{ "Event": { "published": true, "date": "2026-01-27", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-01-27", "timestamp": 1769559328, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "bd644f98-1705-470e-a6e0-21e041e48622", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d3dff1d8-fb0d-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769472054, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769472054, "uuid": "c48c63af-5c49-4759-87ca-0ea3afdb9ee5", "comment": "Malware payload (Mirai)", "value": "501e5a20419ea2ef2ce78556f86a9786", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769472054, "uuid": "4e27adcd-39a3-4903-8f9c-fcd1d64bba29", "comment": "Malware payload (Mirai)", "value": "3bf5ede30017b099d703cbdfe7f9e191647ac20d03aad9b23f583c3475e95e59", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472054, "uuid": "1ceb1bb2-3c94-4af2-b598-476f97c8568e", "value": "T1F6934A4273690487F2A70DF12C2F6BF153AED5A221E0B285694FDB0F8175A312586F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472054, "uuid": "a7a7af2d-3d45-43de-baee-f889035f8236", "value": "1536:EVjVctHMOmCt/OdnbkrLYIHiv2I1zx9EGgvUxuvXruKOzYU58+0MmyvqnQ7Z7X4:YHOmqsnPzx9TxuvXrI58+5p7X4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769472054, "uuid": "1265b5b8-39d5-4270-9784-33a09a382498", "value": 95724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472054, "uuid": "73e481d9-ffc7-42f8-a602-d470dc506031", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b2b9fbd-fb13-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769472100, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769472100, "uuid": "0aec3b13-ddf8-44b0-b30d-af45e80e7d07", "comment": "Malware payload (Mirai)", "value": "d8ea2807203ba403235a82abb9fc5fd2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769472100, "uuid": "608eb17f-4d23-41b8-9aef-d16dbd728f86", "comment": "Malware payload (Mirai)", "value": "49637981a693139c7c283bbeb213dc6cad2a448ff64294e084252dc332fa3e85", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472100, "uuid": "2b817d86-a15b-4598-af85-0b18bbc8af5a", "value": "T1B4B3028078F2ED1AC3656BFB681D8493A36DE8F19032FB098C334A591C9D924575AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472100, "uuid": "56948a34-cee4-459d-ba42-daf5846b9078", "value": "3072:u18DqM1UAzCkg9WllLAiSQxemQOfIRA4b0g1Hm2:aKSAWf94xTSuXQ0IRRb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769472100, "uuid": "ed52b15f-f0ee-45b7-89e2-c8328101656c", "value": 111488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472100, "uuid": "a6fada4b-7ff5-4e76-b7ff-88e0aa6d8222", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07bb0c58-fb0f-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769472163, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769472163, "uuid": "abd0186d-6e87-4793-a832-e1c9ac913d51", "comment": "Malware payload (Mirai)", "value": "b7f304fecfa6c4bc3696b6c7af4b2262", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769472163, "uuid": "2861d497-4f10-4413-b1f1-97b72fc690bc", "comment": "Malware payload (Mirai)", "value": "fcb32f069393978c0906f8e2b234483015dae654d4d1e1c9975d172628d1a16e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472163, "uuid": "85ecb237-ae82-4e32-b844-f7e44d8912cd", "value": "T1C7835B819242E8F0ED050175713BF337A632DDB801B8FDF7F3655576582A6A0B2867", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472163, "uuid": "4ca38b28-6548-42ab-81a1-d896772baf18", "value": "1536:eN057uXY27SgWJS98WB26AS41jU2sws7f3F39VfKEEmQ6rMYwmTXcblNF6yjA:eN6UzWNS9/3wjcwCf1fVLrMYwwMRro", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769472163, "uuid": "24e5e5ac-2c60-42a1-a591-aaad9db400f7", "value": 83124, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472163, "uuid": "7cc7f19b-57c6-4f0c-9d1b-c6897ba03764", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a6216bd-fb0d-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769472190, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769472190, "uuid": "17933b7a-51d8-46ef-8b91-fd8d19c0e2ee", "comment": "Malware payload (Mirai)", "value": "e2814f7668f2ded665c67ff19a06b0e2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769472190, "uuid": "749e23e6-4df0-43b0-a754-f596caedc62e", "comment": "Malware payload (Mirai)", "value": "75aceb402420e35ca4c6c38ceee28704048a949d53c22631a2a70a4e15698bdb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472190, "uuid": "2cf6b4f8-577e-4fb4-a56a-c3064bf6dd70", "value": "T1DAB31989BC819B10D5D536BAFE0E518D33138B78E3FA7113DE185B2A538E86B0B3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472190, "uuid": "40ff0ad2-8cfe-474e-81ef-4314fedb35de", "value": "3072:n6Ge/jNaMrza3Es8fbVTeAhNuHQFKY53V2dZpx2NX:HMrzAUVpuHQFKYpV2dzx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769472190, "uuid": "c2c30654-6f58-44ca-9f3c-d021365d093a", "value": 108064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472190, "uuid": "549625fd-02bb-4dd6-aaf1-510f162a51b2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "950e943e-fb13-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769472197, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769472197, "uuid": "786f74f0-4903-42b5-9001-2e8002dd509b", "comment": "Malware payload (Mirai)", "value": "59eec80a81e4574ee96748cd0f7e7f6f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769472197, "uuid": "5c24dffe-419f-4019-a3bd-aec0d99d88bf", "comment": "Malware payload (Mirai)", "value": "2a634428a117803270edc53ef480e758b36e26cac3b5795e993d4d9020aed288", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472197, "uuid": "2910fe58-5886-4206-beed-ae09b844baee", "value": "T1EF83184ABD81AB15D5D525BAFF0E518933134BBCE3FA72029D245B2527CB92B0F3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472197, "uuid": "7d4b17bc-f940-4d55-9773-3a02edf161f6", "value": "1536:swnYjMln+an+qswJeAV2YxyHIX8zuChjIEmUxlllkiT7qVwnWZNzY4X:dN+a+qneETX8zuChjI0h7qVwWjHX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769472197, "uuid": "c1f315a3-36f1-4326-bc4d-4c5fe2c21de6", "value": 82168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472197, "uuid": "d1f055b2-12ef-42b3-bd12-9916b13e77b1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e99c663e-fb0c-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769472209, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769472209, "uuid": "6f4f775f-3e36-4dbb-9acf-e8e4388ba498", "comment": "Malware payload (Mirai)", "value": "fa48dcaefd04c5ba66fe8eebbf4cdeb2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769472209, "uuid": "8cdfdcbc-099e-48c4-816a-c158a643a5f1", "comment": "Malware payload (Mirai)", "value": "552d60e630c885a8337390ba737c7698efc2eb65f081d6ee26ec782bd893d574", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472209, "uuid": "71198a4f-bd4b-4eb3-96b1-32deb17637e2", "value": "T166838E42CC746EA8F0776D3110B9DDBB4753B54AA41BACBA3C57C214401BE8CF5AAB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472209, "uuid": "50787c68-cea3-438e-9488-df555cafb8e3", "value": "1536:k44zCg3/Eh+aKa3o3wmzVsjTWlhE+f7CnbOZtX:k48CW0+aKaY3wOWff+f7yaLX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769472209, "uuid": "48172e3d-237a-4181-8a77-87fc2de11a8a", "value": 83332, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472209, "uuid": "4f03a43c-8cad-4753-843a-0b5afca4bad2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "866a4127-fb0e-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769472237, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769472237, "uuid": "483f88ee-6ced-4890-b79f-ea8532259f09", "comment": "Malware payload (Mirai)", "value": "d880d600ea8eac071b0d806dcd7995c6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769472237, "uuid": "92b1c482-db02-4c30-bc77-97546c1955a8", "comment": "Malware payload (Mirai)", "value": "2dd625b5ce29f90965659bab57b14e785a980f414c2dddc1d38328c211bde30c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472237, "uuid": "729fcadd-6ddc-49c8-9b2f-0afb8f06f01f", "value": "T1C9635D32BDB51D2BC1C4B53A11E74231F6F6439635B88A2E7DA10E8CFF64540321BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472237, "uuid": "34a305c9-8e47-4201-88ac-2ccccbeb3505", "value": "1536:4lHNLgIoJfp+/SvjLJWR3415OZ0L+eI8PdxynM4:gVgIoJfp+MWi+ZPZnM4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769472237, "uuid": "2bf54a26-da1a-45dc-9730-b8fb7fa5889e", "value": 67012, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472237, "uuid": "4ab4eef3-74d1-4585-8d95-303f1be6007d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c4c2e8f-fb12-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769472265, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769472265, "uuid": "ab4390e6-d9c3-40e1-8f90-dc060140ecf5", "comment": "Malware payload (Mirai)", "value": "0c682851ca5eaa2a6c586d90e57abe2e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769472265, "uuid": "b25a52c7-2ad6-4ca5-9669-db7aad31ffa9", "comment": "Malware payload (Mirai)", "value": "b60eefe19c671ecd35e60f724155da4c4c3c99cb0efeeb8430c908ff52b8159b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472265, "uuid": "2721141a-4842-420a-9bcd-be80f7e03705", "value": "T158837C12CC759D98F07A2E3020B9D9BB5717A549980B6CFA3C438769101BED8F5E7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472265, "uuid": "06e1ddfa-3eca-422c-bf5a-9f2667434761", "value": "1536:9K4lGF6JEw+U7bKUMTiXYXNQpJxgKE2C5jTx8nAX:9KWGkb+U7bJMTWEWoKE2gvSAX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769472265, "uuid": "00688360-dca9-4572-9cee-03880212cb08", "value": 84148, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472265, "uuid": "029915c9-fc11-48a7-a828-5df3bc7bb56f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "10811fbb-fb10-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769472310, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769472310, "uuid": "8426e2c0-fea8-4e76-8557-b9829f3372ec", "comment": "Malware payload (Mirai)", "value": "ac24203c744dffb7c0a5984b3241e75c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769472310, "uuid": "7eb9ab83-04d8-480d-a2ef-4af213ded19e", "comment": "Malware payload (Mirai)", "value": "8af029409df106a8d45d86678dc4420d8f9c95f5d27bac033628885610730f8d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472310, "uuid": "76356df7-a821-41ed-9bf9-9490986d1b56", "value": "T14B938E12CC75AE9CF03B2E7050B9D9FB4313A585A81B6CB73C478725111BA88F5A6B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472310, "uuid": "096e0ac4-de29-41ac-8c4b-de7836205191", "value": "1536:Kq4z0ZQfEF+bBxDnvgEY9K3OSq0a3fYHhxUC0SPmrUX:KqI0C4+bBxjvgn98OZ6hxUlWJX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769472310, "uuid": "ec219021-1384-439d-b29f-f8911559770e", "value": 91584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472310, "uuid": "7c609806-4946-48c4-aa03-d21a0fbfbb84", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e144a2d6-fb13-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769472325, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769472325, "uuid": "aa656bb9-9d61-497c-ac0c-60ecce5b2949", "comment": "Malware payload (Mirai)", "value": "4fe2b9ed62b7320f5997ede982dd3d7b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769472325, "uuid": "28455260-75be-4b48-8419-68b16871f2c5", "comment": "Malware payload (Mirai)", "value": "79d98ca8f2d1b88fc4fad87e6dc348a049b409132766e8acaa7d705fb92917fe", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472325, "uuid": "4a00827a-7af0-4da3-8e19-2b03e7e3353b", "value": "T123431A45BD859616CAC46677FF0F429D371A43F8E2EE73039D296F75238B82A0F268", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472325, "uuid": "395f1bb7-5dad-4491-a03b-acb70b2dca03", "value": "768:ZFuVOj+GKTXs2ooZdoxBuUPc2+dg/hJe0vBaqu54HeEeIVUANPFnd8HX:OkjzKonAdIPc2+dg5Je0vBaqYIFFqHX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769472325, "uuid": "6a102e13-3f08-48e2-ac93-ab0b9b5156df", "value": 55460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472325, "uuid": "0d152d56-2f4c-4b72-a767-6f6c0d2f8d81", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9f0630c-fb13-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769472366, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769472366, "uuid": "fb274a0b-4601-4cc7-81bc-8dc0a982f64b", "comment": "Malware payload (Mirai)", "value": "08e7a35ea2b9e1ba74592f15eaa64f92", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769472366, "uuid": "1c4c7a84-c266-4475-8dd4-44cb5c016c84", "comment": "Malware payload (Mirai)", "value": "de7b7c99fab266f039d35b07911a73cb0893a22808d6db8e9adb551c8823d3ea", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472366, "uuid": "2d79dc22-2707-45ff-b28a-c07c41764e81", "value": "T150835B819242E8F0ED050175713BF337A632DDB801B8FDF7F365557658266A0B2867", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472366, "uuid": "4a42e2c3-58c0-4b0d-b0e4-b31e80b05a24", "value": "1536:eN057uXY27SgWJS98WB26AS41jU2sws7f3F39VfKEEhQ6rMYwmTXcblNF6yjA:eN6UzWNS9/3wjcwCf1fVcrMYwwMRro", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769472366, "uuid": "10e36c12-1e88-4047-a0b5-abc16ba01920", "value": 83124, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472366, "uuid": "fc6f0df5-bf22-4678-89d7-827eecb4c6a7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "756abca5-fb0f-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769472458, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769472458, "uuid": "9f578caf-8800-4048-a5fe-82cbcc294ed6", "comment": "Malware payload (Mirai)", "value": "280d6d18dc55ba83716fafca68361ced", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769472458, "uuid": "5c3ee06b-a84d-494c-9f79-a6fe7150a0fa", "comment": "Malware payload (Mirai)", "value": "523c614a0086d7264a519b5206044e480505c8d1ab15b67ea350869201b4b986", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472458, "uuid": "d2f873e4-5117-4e4b-9a2d-c84cf2adc2b2", "value": "T1B4B31999BC859B11D5C525BAFE0E508D33139FB8E3FA7113CE145B2A538E86B0B3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472458, "uuid": "a4309e62-3fb9-4f5a-b65f-4d5b8a72f804", "value": "3072:7Nwhp6E9MRqmEjWfYs1KJWSe9O6Qb30vgyV0ZUQz4KBX:28RMJs1KJW0b30vgyiZUQcK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769472458, "uuid": "04039cd8-a49c-4011-8b16-dc9ab959f989", "value": 116932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472458, "uuid": "ee418d95-af8c-4235-b71b-c5df1538bdfc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b2a0f6a-fb0d-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769472503, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769472503, "uuid": "ffdadd09-1ec8-454b-8a6a-ce8652c969da", "comment": "Malware payload (Mirai)", "value": "ccbb3c7419450c8083449d7cc2e99471", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769472503, "uuid": "6719b26f-7ecb-4183-ad52-a4e659474fec", "comment": "Malware payload (Mirai)", "value": "1d4374ff197923f1d2d601f39578dbd9d0d2a54fb8bcabfaaf0b2b983360e55e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472503, "uuid": "ee43826f-10cf-4e26-8336-35fe67feef1b", "value": "T1A6C3D40ABFB11FFBE4AFDD3705A60749299C594621A93B357674D81CF21A28F09E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472503, "uuid": "5a6f71c1-b9da-4803-9212-049187f5c5d9", "value": "3072:CtBa061yfEkFRTxUNxgU8gNSJ6rVSuRX:CtBa06YfB7T0zUJ6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769472503, "uuid": "96d66a53-7bc3-4f24-bd41-cbafc15f0cc7", "value": 121700, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472503, "uuid": "bd2d8499-4320-4f56-9250-3bff5e334479", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8770539-fb0d-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769472646, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769472646, "uuid": "5fd2e66e-d3ed-4ef6-8582-13fe9cf88281", "comment": "Malware payload (Mirai)", "value": "edc192ed08f3e62f57f588a7437758b1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769472646, "uuid": "803aed8d-9790-4a09-a7c8-0c71741b0e2a", "comment": "Malware payload (Mirai)", "value": "c129220d029475e24fa683077e329eba32ef27e4ffee3b8fa7147e149b5559fb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472646, "uuid": "3068359d-1581-4caa-858c-3ca5f29c1850", "value": "T1AA931BC6BC818B11D5C526BAFE1E658D33135B78E3FE7213CE185B2E534A86B0A375", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472646, "uuid": "c6ddee93-9bc5-4d94-9ec8-7e061f042ae7", "value": "1536:URnt+UV0M9xPtVTQtwoN4M8EYJYfD0s6/xe54Jv/BsFMDie6NW0yWEx7WWYLX:iV0antQWo/8EYWfD0beo56NW0yWExyWg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769472646, "uuid": "2cc3fe42-6813-4dcb-ae57-0d26f05efac6", "value": 95608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472646, "uuid": "47cb8141-f518-4f68-9631-8bc83d7ee50f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "536d1cdc-fb0f-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769472707, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769472707, "uuid": "cc6bf6f7-2b8f-4e26-975f-b2f248642563", "comment": "Malware payload (Mirai)", "value": "30818305b242d4f78a586b714fdcdf61", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769472707, "uuid": "21f259f2-45ee-4f5e-a7c7-2bd518450a23", "comment": "Malware payload (Mirai)", "value": "f4b93a1e444bb7b7581e6ac874d57ae72d46c8446c4a2cde98027c51b8bd1085", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472707, "uuid": "193a0971-667a-4d37-bd31-498a6a9f72c4", "value": "T1F7435C42F3180983E0675DF43E3B2BE0939EA5D111F5F245760FAB4A91B2E325582E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472707, "uuid": "7e4e1a01-b010-4143-b4a0-2e7763e0036e", "value": "1536:TaIkRtSNIBtlr9yR4+z2LFeELgMLqNg4orZX2:TaIkRttN9yCFes9X2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769472707, "uuid": "cdb3768a-cd2f-4ef5-9722-801f11120c9e", "value": 58860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472707, "uuid": "ea4b4d41-26af-4a71-a55f-76af080d7d03", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "03eb4faa-fb15-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769472812, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769472812, "uuid": "c0106981-d757-4a9a-a4bf-f9b6165938d0", "comment": "Malware payload (Mirai)", "value": "8887f0905db943feff5fd3618a63f4a9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769472812, "uuid": "1d4ccab9-99a0-4c13-8820-420f6655515a", "comment": "Malware payload (Mirai)", "value": "d03b5fc0c052c9255f26dc1cbb359364f5f7070cb2309e5757fba96fadc11e97", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472812, "uuid": "ef16232e-be67-4fab-8850-d8d298bf4780", "value": "T14EC3B44F6E539F7DF32C83354BB39B36A65523E223A0C285E25CD9501D6028E586FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472812, "uuid": "912a3925-0139-44bf-9b2b-6c393da501a4", "value": "1536:hIxSNn+3jjNjjtejtqH6EIgghCI4yO4azFrR3T6BRcAsYKQNFhKAmvxSHmEQqj+0:KAnWHLIRL4Ei3TBYtKAixIAFgEXq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769472812, "uuid": "817083e4-7572-49c2-a9f1-b1cf23e53da9", "value": 118564, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472812, "uuid": "065f073d-1e0c-4bc7-a13b-a440a5fa4389", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "548fad14-fb12-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769472880, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769472880, "uuid": "0281c44c-be87-413c-a5bf-cf6f1ed406be", "comment": "Malware payload (Mirai)", "value": "64b1560ecf65d9d8a7113cd4116930cc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769472880, "uuid": "b767c7cf-eeae-4c5b-a8ae-aa33b6f188b4", "comment": "Malware payload (Mirai)", "value": "5da196d27b9bb036bcf61e5f26479cee371ac02ce5f26a369098d42ba92c3b1b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472880, "uuid": "46913dfe-47a1-42de-a842-e0ea705d4bf1", "value": "T14A73B50E7E618FBDF26CC23157B78B31976963E222E1C685E69CD5041E7034E582FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472880, "uuid": "96a7c6f9-058b-46a9-b82e-27ac64ec5c58", "value": "1536:JWSBWShuS4IPBX8M0o2WIAosy2fKzRl8jCuxIPz9smCfSxHfdqvrrIZ8rkWtX17d:TJsMq/AJftjCJvBf0vcWtXX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769472880, "uuid": "7903ccd4-9ae3-4306-907e-588a0f48783b", "value": 76636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472880, "uuid": "27601162-509f-442f-ace2-c920aa6b3816", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c421732-fb15-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769472880, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769472880, "uuid": "d6634a24-6cc5-4217-bd69-686c24ccc5dc", "comment": "Malware payload (Mirai)", "value": "ac35725f1c43105dc9e2e21c89adaeb4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769472880, "uuid": "0afef5ba-33aa-4693-9f06-44824ec7f2b3", "comment": "Malware payload (Mirai)", "value": "2e24ea76d1756198d0d6fc174141b193f81213fd4bf2e3b463b38096491a8232", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472880, "uuid": "a2db54e1-83b8-4746-b50b-e2a23061112c", "value": "T176C3D40ABFB11FFBE4AFDD3705A60749299C594621A93B357674D81CF21A28F09E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472880, "uuid": "859d5535-7402-4108-b915-47dc53696bf8", "value": "3072:CtBa061yfEkFRTxUNxgU8g4SJ6rVSuRX:CtBa06YfB7T0zdJ6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769472880, "uuid": "e4c722c9-3909-4b19-a093-0308acf50979", "value": 121700, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472880, "uuid": "122cf12b-5cf7-4752-836c-6908d7dd2d27", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db8cf651-fb0f-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769472945, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769472945, "uuid": "f5b8f9e2-fa04-490d-99cc-de0c963d10a1", "comment": "Malware payload (Mirai)", "value": "5eecb66b0d0b5767bc00bc67edf60110", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769472945, "uuid": "36b6d962-ce09-408d-87b6-2d7074e2ac9e", "comment": "Malware payload (Mirai)", "value": "826d0028ae84d8c4d10309e857d71ed21dacc4f1c170314c59e52b044bc93dae", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472945, "uuid": "f8bc2747-21f1-41e1-842f-384fff6e1485", "value": "T125A32915FD781D27C5D0727A51D34631F5B643E926B89A0F7EA31D8CEF18220312BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472945, "uuid": "b381dcac-557c-4d45-843f-0575ebd696a6", "value": "1536:mYoy74lf29t6I4pGzRu7lN4ENEBbwebxgUDQt8TZ0XYzKvAZ93wnPS:/n0u344Ru7lN4E7UpQiD4jnPS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769472945, "uuid": "e9bc4d53-d98b-4054-acf2-66ec6a70ac65", "value": 99780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769472945, "uuid": "7f136e03-e31b-42aa-9b96-638e11757a76", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff634ad0-fb0c-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769473002, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769473002, "uuid": "60d35d86-f302-45d0-a15b-741da2638993", "comment": "Malware payload (Mirai)", "value": "fcbb2b04e9e8dd6c46efd64441a5461d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769473002, "uuid": "ccf22a8b-46b6-4ae8-ad12-7188f0cf4b21", "comment": "Malware payload (Mirai)", "value": "e11e539650e8b87eceb6af79371da41cc2d0b0b127610bed3ddaaa359cfb74eb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473002, "uuid": "2cfc71ed-da36-4a21-b452-6037e9115ca2", "value": "T1AA8307CABCC5C702C6E061B6BB1F559E371643A8E3E6B1078D19AF29674F8970E372", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473002, "uuid": "4a7b3a4d-422f-41a5-b1f0-ebbdfeb8889d", "value": "1536:ZXCfs+3BGStZvMI5Q/EN4fJcDzgD1HLJ2RiC5rdww+PmX:Zyfs+xGYT5qBc4HLJO5r2womX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769473002, "uuid": "7f8fe42d-7398-4820-babb-aab31e4adfed", "value": 87432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473002, "uuid": "a74d4427-ead5-46b0-a71f-35cef008ada2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c864c8a7-fb0e-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769473031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769473031, "uuid": "b2299dfb-2b0c-4a10-ab52-9c883431a002", "comment": "Malware payload (Mirai)", "value": "69de29fb5c954a921d6bc3102dda3249", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769473031, "uuid": "24f33116-7d9a-440c-bb90-d06dde79a3c9", "comment": "Malware payload (Mirai)", "value": "3c2f5517d5b5289fa519c9644706046c0806763119bf355697344a8b1fedfb37", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473031, "uuid": "447fe75c-5237-4cd5-ad9a-4a85a7ed40d8", "value": "T1E4B3088ABC818B11D5D525BAFE0E618D33139F78E3FA7113DE149B2E538A86B0B375", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473031, "uuid": "a648ba80-9a27-49c5-b1bd-d36635328296", "value": "3072:HJve6x34Ix5E7zfPKZeB+ox+kxRssQiGvdrJMeUX:QIOjKWx+kxRssrGvdlM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769473031, "uuid": "9774f6f0-03c1-45df-a562-9bf7d027d20e", "value": 108064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473031, "uuid": "b89c6936-466f-4295-9909-8ec42397ae36", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf1c5337-fb15-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769473126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769473126, "uuid": "31da4c5c-c17b-422d-a3ad-c6053f6ba11f", "comment": "Malware payload (Mirai)", "value": "0c74aeeeb7033ed46645b671fe7ac5b9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769473126, "uuid": "0ebd2d8d-1cc9-45f5-a0d6-499972b321b3", "comment": "Malware payload (Mirai)", "value": "2aae0a212cb3fcb92d2e19f6f5361fe267225d1a37d99b26787105bddbd2cf38", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473126, "uuid": "127ab938-143b-4a6d-8963-718c9a8f2bbd", "value": "T1AC9312BEB968185FE7958BFAA5DD1F1D7311E48451083B4EFB2AA30746D2C8FD940C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473126, "uuid": "48778ff9-1cb0-40db-a4d1-c30b277fe060", "value": "1536:DQTpPdAwRLZhAIdUtWadyd84sAsa1EE6a/13FJhj+wNRSdz/8vKQx1zA47mg0:DE1lRtqIdUIadydmAbmc11qwN0qrk47a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769473126, "uuid": "c4bfe902-92ec-4cb7-b1b0-9019e11f657f", "value": 90244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473126, "uuid": "c53ecd9d-a752-48ce-943a-13406b456e09", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf69c674-fb15-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769473127, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769473127, "uuid": "ef104ae9-34d4-4768-8c80-ba942d001e3a", "comment": "Malware payload (Mirai)", "value": "3a07a81a010237615bef50ca4feecebf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769473127, "uuid": "6d8c78d5-99d1-440f-ab10-86ee3f366aa4", "comment": "Malware payload (Mirai)", "value": "becac669a41c847370dfff38d6aea2be4bd2053bf863e315a1631537efda112c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473127, "uuid": "1e3098dc-774c-4640-a80a-7a20dabac2e1", "value": "T10D933AA2B410DC7EF45BE7F780570A16B220A3E44E426F27B627BD53EE2E1742852D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473127, "uuid": "c4f8233b-1906-4132-b65c-4b4b9f320a67", "value": "1536:OhzzDqIJR0e+6+6ngAJuWgfFfOS+05uWmkWWOYPZeX1Fp48rpz:OhzzDq65e6ngmuWHzuFJMYYX1FDpz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769473127, "uuid": "33827b0d-f4fd-46e0-a938-049c1a96b375", "value": 92596, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473127, "uuid": "7adaf738-7c23-41bb-92d6-ada2b52cf2c6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c588bf91-fb15-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769473137, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769473137, "uuid": "881306a6-f5c1-4544-9aa7-a89f149508e4", "comment": "Malware payload (Mirai)", "value": "4b50c667848e543d59a02a5a2c46fe75", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769473137, "uuid": "bbbf9e25-08e0-4ada-898b-ac8781ba436d", "comment": "Malware payload (Mirai)", "value": "8c24aada0f68322daff0bad32a1378cba49086f264260f5aceb6fc71534b7106", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473137, "uuid": "93c6f6da-ec71-401f-9ead-1d68860798a8", "value": "T1A2C42367637792B5CD0ADB30E1104EC62799A1368F65025B3F86C9CCED798438E978", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473137, "uuid": "da5e5b96-b81b-4863-b33b-c276c01a1224", "value": "12288:Q5VnL041MLJUT1LiEF9KCyU4y74HdtTkHRatUm9XYYkwGDuc+4v/0tWq:GLALQ1yly7yKHoPrKuc+fH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769473137, "uuid": "8770d3e7-69d3-4fae-a7cd-66423be6898d", "value": 549368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473137, "uuid": "7a451a7d-ae52-42b1-872c-0ef73abf98c8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b5bfc1b-fb11-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769473155, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769473155, "uuid": "3f0868de-f7e9-4331-bf4d-92ff459c7a4b", "comment": "Malware payload (Mirai)", "value": "7ed44f873bf4ea4145988516396231f3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769473155, "uuid": "eb68c02d-0abd-4ac1-97c0-539078e77ffd", "comment": "Malware payload (Mirai)", "value": "12c2916bfae2ae015474a308ad2b9e2701b80f8f9866a1cd913d18edfe47e9b4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473155, "uuid": "b09fc85e-2d37-4d1e-9c30-fd846b96d2d4", "value": "T1FAB3E70AAF711EBBD4AFDD3345A5074A389C550B21B93B3A7674D81CF61A58F06E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473155, "uuid": "54b6e739-37f1-44a2-918a-5a6b78a50bfe", "value": "1536:vIFsgIiQuQgiv5/e+ozB+En3Or0MlqlYCVbbd881axuxm/ru0YWZfqFX39wu7r8a:vGRvB+LDYoeOM4FIwznNSt4XS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769473155, "uuid": "ed3774cd-cb8b-4b3d-a913-ca409b6499ac", "value": 109360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473155, "uuid": "d2b46aef-c95f-4718-aaf9-a0f18f0160ee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1769473211, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769473211, "uuid": "ccac5cbb-2d15-45c8-b361-e7418643b52e", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769473211, "uuid": "3509440c-1ea1-4680-a9b0-dedc920215fc", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473211, "uuid": "11d6585c-3690-4efb-abe3-30ff4dcd6b24", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473211, "uuid": "8531cbf2-8405-4f9e-911c-5a21c522ed64", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769473211, "uuid": "5fae456f-8784-4677-9677-8829e2a1bf7e", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1769473241, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769473241, "uuid": "f064ef5a-420f-43ad-bf00-93c81fe6181a", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769473241, "uuid": "774509c3-6c37-4ebd-89fe-8f152a5d2ace", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473241, "uuid": "fc7003db-cd69-4457-a058-2d698341809c", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473241, "uuid": "249ea681-7440-4449-b42d-68ed930ee463", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769473241, "uuid": "6336f2ef-3f5b-4542-8cf3-0f4c1880905b", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9eba3055-fb0d-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769473285, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769473285, "uuid": "316dad60-b29f-43a2-a134-cc2179b190e2", "comment": "Malware payload (Mirai)", "value": "35c8738ec48be22a6640f5437b1c8591", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769473285, "uuid": "bc6888c7-dbd3-4f6b-9700-f5c7a2e5888c", "comment": "Malware payload (Mirai)", "value": "0e7c259f5d825590b3e8f9e192c9ec6343680b5859046efd6f3a6f1d1a49e73b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473285, "uuid": "2fe9aba6-6827-4f9b-b9a2-d94217fcbaf2", "value": "T13F93189ABCC5C702C5E061B2BB1F51CE371643A8E3E6B147CD19AF29674B8A70E372", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473285, "uuid": "72fffa8a-5cd2-49f1-b719-73d692829f1e", "value": "1536:cNdRrJQOXCv5ZBQagbXS4AkN+pO1cYL2OcU5I6dqG6bBvsX:chrJPSVtgznNFcYLZ5IuqbhsX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769473285, "uuid": "307ea97f-f577-480f-ba75-1cc425a4dd93", "value": 91528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473285, "uuid": "d5181717-ac2d-44bb-a5e0-323c513a6fd1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "205b004c-fb16-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769473289, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769473289, "uuid": "e0972ab9-056b-46df-a869-ebfb883fdad0", "comment": "Malware payload (Mirai)", "value": "18f6d307962d76b76150e7bc589fde16", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769473289, "uuid": "1c43cb84-f898-44f8-a161-9373d8f06e8d", "comment": "Malware payload (Mirai)", "value": "5f95dc8180c7ab6348f17b81b91dc36070f79e07ac4a09f05396a1357c9875fd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473289, "uuid": "07f641ff-e0d0-4a9c-a913-f79d22df57da", "value": "T198B3B64F6E529F6CF36C83354FB39B2AAA5523D633A0C185D25CD9411E6034E286FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473289, "uuid": "02c3efae-0787-405e-bc2f-7c4bbc0b7ff0", "value": "1536:C1C1fSSvrVvriZr2O4PnJ9JoA8juQOyXR2vKDkUa58h8HXN:C8fE4VfaIeeMks8HXN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769473289, "uuid": "4d2b539e-7b12-4666-9a41-eec6ecca2d1e", "value": 109360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473289, "uuid": "f9aadf7a-0350-45dc-b083-9a5dfc2f2b36", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "771b4afd-fb12-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769473410, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769473410, "uuid": "499b4388-3fce-4c7d-9d51-0b71093ffbdb", "comment": "Malware payload (Mirai)", "value": "751bed17c70db05b7c78fb6b576c1037", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769473410, "uuid": "2bcdf990-082f-488c-b641-642a60653099", "comment": "Malware payload (Mirai)", "value": "d62ef6a0ab6618341f87f13b75b9829c8bd1df0a8144d428b1ebfcb6330dd865", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473410, "uuid": "14432692-cced-4aad-98a4-9007e6c03452", "value": "T16093278ABCC5C702CAE061B6BB1F558E335643B8E3E6B107CD186F29634F8970A376", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473410, "uuid": "24925709-8d7d-4b9c-8925-a47c98e23cf5", "value": "1536:2Pd2K0peUYsd3xXTFYwqIT4RQVGryMnU6hdVS32eWJ5wzexvBaqEqHoaFHX:2PAK04URxTF2+VSyMU0bS3sJ58elEC7N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769473410, "uuid": "beab9926-661a-4ce5-9329-fe740fdd2d18", "value": 95732, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473410, "uuid": "b71fe008-0a92-4793-bbc6-7308598f4d6a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "549e9785-fb0d-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769473494, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769473494, "uuid": "eac04808-1d28-47bb-bbb3-eb54a1f24bef", "comment": "Malware payload (Mirai)", "value": "c98ae992aca1c5b339e4a2974f6c00d8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769473494, "uuid": "e8052045-c2e1-438b-880e-0c87c7adee14", "comment": "Malware payload (Mirai)", "value": "e43c9c5495d74d90868d016e33739a6531cc424965809c492e48d2425bdf64ec", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473494, "uuid": "9e590dad-ae8e-4f37-bcbf-cc401ddcd321", "value": "T16E937D11CCB19EE8F03A2D7110FAD9BB4713F586D90B6CBA3C47C621505BA94F5A6B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473494, "uuid": "c4a1e558-0818-44ff-9936-46c2f29b0575", "value": "1536:8K43KmVS8XEg+tzGMdx5emhFS99aE4d/JzmOEFCeOVKydYX:8KUKSz+tzGqx5/hapidmOEFO4aYX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769473494, "uuid": "2d122eda-95d6-42a3-914f-bb9509d7ddeb", "value": 91780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473494, "uuid": "d8a5e62d-947c-4a36-ad7d-6f7e7116bee1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "668c96e5-fb11-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769473562, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769473562, "uuid": "ce7df536-8f64-4326-a739-cde09dbcbd36", "comment": "Malware payload (Mirai)", "value": "74b2012730131c0d9dff311ea8dc3acb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769473562, "uuid": "24488484-26c0-4ca4-872c-896ddf813d8b", "comment": "Malware payload (Mirai)", "value": "3dd680f42a9d01864b3eaedf887c13b77edb0c1d0cc9cfcf7d40ca7b31f489a5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473562, "uuid": "77e03d64-139c-4f06-9a19-1c74cf56f8e7", "value": "T1F4A3298ABC85C702CAE061B6BB1F518E371643B8E3E6B107CD19AF29674F8570E3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473562, "uuid": "86f47c77-ec11-4011-9602-31bc8f99e18e", "value": "1536:9NxzdaUe0aXjzU4T2Bnhe46lyODp6WdwZLd32lO55wMe3vBaqs+cr4vFX:7Zd3004yBZAyWp6WCFd3Z55bolsVeFX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769473562, "uuid": "19e2c264-c9df-47e0-9864-2f806fb38496", "value": 98824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473562, "uuid": "3ae94ee4-f278-4e96-ab91-b9c0a325b560", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fea5f174-fb16-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769473662, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769473662, "uuid": "9883f41c-c7df-40a7-ba26-f1caa19be79f", "comment": "Malware payload", "value": "6847840eba1c7d1cff5d0b5d05c34efd", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769473662, "uuid": "aa51ed84-837e-429d-9dd3-587583aaae31", "comment": "Malware payload", "value": "f8f134c63a57c86f20a35349f5fedd1e7d82344bc83eb954537cfcd6103290c1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473662, "uuid": "270aa2c9-a771-4fcd-b7b7-0e72f280eb72", "value": "T1E18309327488582A210B428FD267336C70AFDCE2D611E5B6F6F632344BA5EE135B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473662, "uuid": "026ffef5-44f6-48ba-af33-2208e9b3f3a2", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbn5Wa+VN/:XEKltp9txAX/yr2pb5WfVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769473662, "uuid": "28835c0b-1ef8-4604-b413-3443f6bd0855", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473662, "uuid": "348f0b71-5d13-417d-aa11-5bac916fc058", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1769473688, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769473688, "uuid": "583f29f0-1908-4aaf-9610-8070c3e55283", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769473688, "uuid": "7ee68e04-3c8f-4b54-8a92-98d624ea9b8c", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473688, "uuid": "9ac5e7ae-6a72-4a7e-a778-56ebe5266a7d", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473688, "uuid": "1e1c92f1-edab-49ba-b2e3-2078bf2558fa", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769473688, "uuid": "169cfe11-b059-424b-a9a3-22b1735f7148", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "181b3fe2-fb12-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769473691, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769473691, "uuid": "c4e20df0-4f99-4f8a-b2ae-c9c5e8acd666", "comment": "Malware payload (Mirai)", "value": "c6611c3e0c86c5ebc05a6a883d882c80", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769473691, "uuid": "c7fef5c4-3b6c-431d-b55b-99657cf8b4b5", "comment": "Malware payload (Mirai)", "value": "e52a02c80c89b7773395bde9bfe3971439d4dcaee3a8434d7314fc0e078a986f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473691, "uuid": "333b058c-af6e-480c-aae3-0072f901b2aa", "value": "T139834A0273690447F7A74DB1282F6BF053AED5A122E0F285695FEB0F8175E321586F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473691, "uuid": "525ccbf6-6816-4b61-a8d0-8116104b0b3c", "value": "1536:gfODWUmHvOJJmXzjgjBkrLYIHiv2Nm7BFOGgd6WcHu6bQ3nQLRqmSUsXq:QVOJmC77BQGgBEbQ6OXq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769473691, "uuid": "3d25b2c2-bdd4-4bee-a1c3-fa0d1e326650", "value": 88116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473691, "uuid": "49dc8839-b66d-465c-b901-93d08d09ff57", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d1a8f61d-fb0e-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769473920, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769473920, "uuid": "2bfcda38-3e30-49bc-b094-c4cc563bffaa", "comment": "Malware payload (Mirai)", "value": "e4640c26736d9ae521b0683d6c684512", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769473920, "uuid": "0ca847ee-8ebb-4bb6-be71-cd003a827b36", "comment": "Malware payload (Mirai)", "value": "a431f77daed790e5a3c230e51216d9dc67790e27b6b096757cd328864bf1b751", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473920, "uuid": "7d1c16bb-740a-43f1-ac98-1d79af26916c", "value": "T1A3736CC19243D8F5ED490278603AF337A532DA7801B8FDF7F3685A764469AA071877", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473920, "uuid": "d4c5d281-e865-45ec-b510-8480464fa72b", "value": "1536:VNZE/pgn9HvRR8p2CoSjWQRj62YMKWg79fAHjiEVGy1XgkyiEgFNQvvr7:V/Gm9PRRsHZjuMHg79IHGByZQneeP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769473920, "uuid": "b1f2145a-ad2a-492d-87ec-bcd1cc823536", "value": 79028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473920, "uuid": "cb800faa-43b6-43c2-abe4-9f6a9bf6db38", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7006d77-fb10-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769474028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769474028, "uuid": "d56d7333-a589-4c46-b3ec-f87b5c8d466c", "comment": "Malware payload (Mirai)", "value": "60c88dafa9880d77dc7bce1deca94df3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769474028, "uuid": "0e4d9bb8-1844-413e-9db7-4c4263d17c83", "comment": "Malware payload (Mirai)", "value": "a69d870741886b703b6ae114e56fc0585c27c43453d97a0c6de47e96d3eb3a1a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474028, "uuid": "b394f489-bd5e-4ac5-9aa8-af25257574e2", "value": "T16CA32CD6BC858B11D5C165BAFE0E508D33134BB8E3FA7213CE185B2E574B86B0A3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474028, "uuid": "9ba58429-4a1c-47d9-9d2f-898c562e7f8c", "value": "3072:gm7ydgJbZGZ30Eg4fNXmvPSSzepoH6rFE4PsKQoSX:RGZAGmvPSSN6rF1P/n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769474028, "uuid": "ad5ab54e-5315-4496-b1f9-f5765e59eb1d", "value": 103804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474028, "uuid": "f410d273-5bab-4215-a9fb-39066ce14444", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f448851e-fb17-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769474074, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769474074, "uuid": "567d4a28-120f-4d81-b6ec-e349b71ceafc", "comment": "Malware payload (Mirai)", "value": "ddd46d5abcb77d828d2b12c7f92f7e7f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769474074, "uuid": "93f57ca4-a740-4b19-90b7-55dc53660b91", "comment": "Malware payload (Mirai)", "value": "4f7d97c438d1e7019b113444741ac1734934a17c1675c944f2b900cc7f09f392", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474074, "uuid": "e5878a25-063b-4a33-a211-40268c19aaf7", "value": "T19983298ABCC5C702C6F061B6FB1F55DE371643A8E3E6B107CD19AB29674B8970A372", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474074, "uuid": "6b8bb87c-d0d1-4f3c-bc0e-c6ebeac1ab2a", "value": "1536:B7iiG1sNPInGzwfV6Gfwst4nvCNj+PhdOSHJ2I1x5ce/2a6UXF:BG71wP7KMGIrvCd+JjHJ5x5cQ2FUX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769474074, "uuid": "d3c94903-52b2-4f26-a1fe-d2b477f8630f", "value": 88256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474074, "uuid": "3962bdb7-485e-4859-a98d-944494653347", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2f18e3af-fb18-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769474173, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769474173, "uuid": "ac51a996-4eca-47ed-bb77-8e0c15ecf0a9", "comment": "Malware payload (Mirai)", "value": "c5e29baaaed453b31015f9d4917524e1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769474173, "uuid": "bf003012-13d4-471b-aaf3-b060a2044d7d", "comment": "Malware payload (Mirai)", "value": "192b44480c11982872d820d90335695580695830fd84abe6ec2c954ddf8464d9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474173, "uuid": "2b8eee70-edf6-41ad-bd53-cb4f0e0ccb7b", "value": "T14C432B45BD818612CAC5667BFF0F419D371647B8E2EE73079D296F61238B82B0F2B8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474173, "uuid": "88f4e334-0111-494c-bc81-028509e68304", "value": "1536:ekxefG5p2gwlX2IBG5IUeqvBaqNuBJRt9vkJX:e6efGL0lXVG5LtlNuBBFWX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769474173, "uuid": "51ad1705-5972-4acb-a003-7d0ba60f879f", "value": 58760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474173, "uuid": "0c2974f8-3258-457b-a2bc-bac1e41101d4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a29942a-fb0f-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769474230, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769474230, "uuid": "ac1fb937-78b4-48a8-89f9-87bf00e07b44", "comment": "Malware payload (Mirai)", "value": "d972183e4b87f06645bfd273b3c70cd8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769474230, "uuid": "f89f06ab-7788-4a60-9270-86478497b7ac", "comment": "Malware payload (Mirai)", "value": "434cd56194c113e0f8aff30ec957050758f02fde33b07ed8314fc90e757318c4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474230, "uuid": "12072889-f04c-4e58-b8fe-44f0b5dba4f2", "value": "T10F8317A6B410DC3EF85BE7F790530A15B121A3E54E436F277627FD63DE2A1642822D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474230, "uuid": "d8d8d0e6-5b7b-4202-8bf6-5a8779649e5b", "value": "1536:WNviCu+JL+9711p2x0vqBUjK6wxGlGOCpYLOHUQH8J8SCWhC/:WNviBX32xgI6wxGoL2O0QH8aW0/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769474230, "uuid": "ade943d9-106f-4215-82d3-8033cd95b590", "value": 85740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474230, "uuid": "de40e63a-4baa-47d1-9b71-46524b619cc3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b91da00-fb10-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769474272, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769474272, "uuid": "fe83a4b0-2e44-4351-ba77-08d39dbaef36", "comment": "Malware payload (Mirai)", "value": "3f0cd76781708349a94713beb3cd9d3f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769474272, "uuid": "ef28b762-e7ef-457d-87ef-ecc851b749a4", "comment": "Malware payload (Mirai)", "value": "76c2f4e9491bfbead0ce8cc771d3965040004ecb77f61d32b956ff7c0b3dec49", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474272, "uuid": "539502c1-daa3-422c-bef7-451740394cb3", "value": "T14EA3298ABC85C702CAE061B6BB1F518E371643B8E3E6B107CD19AF29674F8570E3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474272, "uuid": "543c30cc-bd5c-422b-9ce9-22ad0e7b6e1b", "value": "1536:9NxzdaUe0aXjzU4T2Bnhe46lyODp6WdwZLd32lON5wMe3vBaqs+cr4vFX:7Zd3004yBZAyWp6WCFd3ZN5bolsVeFX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769474272, "uuid": "e69bbc2b-9981-4da6-8c5a-ce37cc6b2f1a", "value": 98824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474272, "uuid": "ac098e07-f18c-475c-ab29-9ead2ca58e77", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6bf8a80e-fb18-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769474275, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769474275, "uuid": "aad235c5-b3f0-4316-9673-3bda6ea0a220", "comment": "Malware payload (Mirai)", "value": "4d6e5008504d30343f474a3ca5cc728d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769474275, "uuid": "7c62787c-bc8f-4cc4-84f3-b3f4236b0905", "comment": "Malware payload (Mirai)", "value": "9b91ab333cfa9443b56907d62a03235e99840ac7d8203df1e471b21ac42e18d7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474275, "uuid": "0780a49e-b376-45eb-9c9f-776253c234be", "value": "T1A0B3F80AAF711EBBE4AFDD3345A50749389D550721B93B3A7674D81CF21A68F06E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474275, "uuid": "4a5baa81-708a-48f2-a3cf-7369fd8d1aaf", "value": "1536:AYBsQIi0uQgiv5/e+ojFu0H3Or0MlqlYCV7bd881axuxm/ruTcGZfqFX39wu7r8k:A6hrFubkc4hJIAUGARE8tCyX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769474275, "uuid": "c1faa052-c58a-4b07-99a5-2b35e4fd643d", "value": 113456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474275, "uuid": "6cb41f2b-3c6c-447c-8427-5cd781adb5cc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c3db4e31-fac1-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769474290, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769474290, "uuid": "3b3f623e-9256-4a51-8b07-096fed296a6e", "comment": "Malware payload", "value": "42af0026a447ef285096f7e604077031", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769474290, "uuid": "09dd59b6-86e3-4ff6-b4de-e5747d945828", "comment": "Malware payload", "value": "88d2e5f9b464d2e0fe11a1d5fd97c2170a87a09399efa44580e842de26de5037", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474290, "uuid": "b1bc7d13-ea81-4cf6-837e-c09ce2587993", "value": "T1F931E967A30B8389C5672A704CAA2340C2D150361137E59BD6255EA07CA9DE90B3C6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474290, "uuid": "94274814-1eac-40fd-a102-7249d7f46e5e", "value": "24:9OgCXYW314d9ASHzcC5hWiPc//+o1YAPCwcHmawD+A6CddgGhFEGclhO:9fCXYW314d9AazroNOHmD+A6CddgAOO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769474290, "uuid": "3f7c7183-95cd-4b98-8774-b0558801be43", "value": 1454, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474290, "uuid": "6b352087-99d7-471f-ba4a-4b9c735488e1", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a2da311-fb10-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769474345, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769474345, "uuid": "aea6c472-ea7c-485a-998c-5d7713aa5bdf", "comment": "Malware payload (Mirai)", "value": "5bf78b0029a45c778a819baffd17f9a6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769474345, "uuid": "5124cd41-e56c-4459-86fd-f83e6fa39a84", "comment": "Malware payload (Mirai)", "value": "c528ba6df9584a658f1cfa93256ff10bac6a737afea9c60b6fce8b553bb3d13a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474345, "uuid": "210fec94-8e84-4024-88c4-6ccb006752c5", "value": "T1FE934A4273690487F2A70DF12C2F6BF153AED5A221E0B285694FDB0F8175A312586F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474345, "uuid": "e23d6295-06d4-4c7e-87ad-17516f3f8c75", "value": "1536:EVjVctHMOmCt/OdnbkrLYIHiv2I1zx9EGgvUxuvXquKOzYU58+0MmyvqnQ7Z7X4:YHOmqsnPzx9TxuvXqI58+5p7X4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769474345, "uuid": "a2f08cdc-69f6-4787-8036-7c51c0bbf709", "value": 95724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474345, "uuid": "b6cebd1d-283f-4b96-af7b-8cc1d5b0c19f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3f217dc5-fb19-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769474630, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769474630, "uuid": "a464f297-977b-45bc-ae39-687305e802e1", "comment": "Malware payload (Mirai)", "value": "249362d5a112b25c29841b33aa813ee2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769474630, "uuid": "cc0a932b-7481-4d22-b92c-ba0f2b5440a9", "comment": "Malware payload (Mirai)", "value": "72584dbfbee11e859d592a93e6a135778b6e566a7b63a581a4cd72c6cef4b01a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474630, "uuid": "6eaf2151-43b9-476b-887c-805a438c8a82", "value": "T16AD3122C2C16DCECC5DEEF3C3F908EAE15599A61883E614D56A0747F8B2E2E107297", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474630, "uuid": "29eddc84-d63f-4e50-b33c-a1b9962b75ef", "value": "3072:Z2R7TH5r81zdTroRV7yHqZ1kp+IjZEJyWaUd:ZsH18ddfob7yHqfajr2d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769474630, "uuid": "a9ed9c10-7d38-478a-bfee-818377ab8f1e", "value": 139328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474630, "uuid": "ff9aff46-c6bf-455c-8ce5-f3721522a2dc", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5108e742-fb19-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769474660, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769474660, "uuid": "ea6f8a06-954e-4f7b-a761-21455e613c2b", "comment": "Malware payload", "value": "aafbca13b6899bf3a2c1a99128d5e4df", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769474660, "uuid": "5cf0022b-515e-421e-8dd5-b1304a6e6a19", "comment": "Malware payload", "value": "34939edcb02d93c7d95f6c8801c85b908642b9bfb917d68413bc19c70455138e", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474660, "uuid": "20e715d5-829f-4b92-bfec-2ba7ed30260a", "value": "T1734633B27D286DE0F834C97AC4B21DD7E89C38CA9012426C51D7EE5CA668B4B32F7D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474660, "uuid": "95e4c869-80e6-4330-84fc-2554ffd53adc", "value": "4b8ea275b01195301d047f45b8ba14d3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474660, "uuid": "e7d38b13-ee2a-468e-bf50-e71fb6bc57c3", "value": "98304:8rPdxaZbaDSAXpNW3US3dV6uhbRxDOuI9/qmeO9QYky0edUu9yrTNcMsRDVs/cJx:YalaD7pNiU+xdxDvIWO9QJ2dJynNiDCY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769474660, "uuid": "5b7763c8-4153-446b-848f-c7df415cfd54", "value": 5760345, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474660, "uuid": "c71a8117-6cd1-4ec6-ac7d-7864a70dc1db", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f57452eb-fb11-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769474768, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769474768, "uuid": "6ab80af6-8dc5-4ac8-93ce-877989b71d09", "comment": "Malware payload (Mirai)", "value": "b29ccbaab5f139420087c2c1a15c5c58", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769474768, "uuid": "904f559b-3968-497b-aa87-d546ddac5c26", "comment": "Malware payload (Mirai)", "value": "3362fa58ebd0f718f0726259f0d9711db5b132eb3fc586e623040ff0163db446", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474768, "uuid": "cd1beca1-cb8b-4400-91a8-c308043c7b82", "value": "T150934A15FD381D27C5D0753A51E74630F5B643992ABC9A1F7EA31D8CEE14320313BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474768, "uuid": "e40e30ec-6569-48cf-ad27-2eab7da426df", "value": "1536:98ulBUUCiQiMk4EG05t3j7bR4olD7GEx2UnNcKn6:mUXCbk4I59Tl94wn6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769474768, "uuid": "7de56adc-f1aa-41bd-9114-fea4c4f53358", "value": 91536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474768, "uuid": "9d3fd9bf-20fd-4991-a09d-32dabdceff11", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "05eb8867-fb0d-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769474770, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769474770, "uuid": "7e636bdb-8148-46dc-b13f-4d69398553c6", "comment": "Malware payload (Mirai)", "value": "71dbbb6d47491a782dbd18d6c1205756", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769474770, "uuid": "e9b1759b-d429-4b51-a4a2-95c572736cf0", "comment": "Malware payload (Mirai)", "value": "9bf3c4c32382e168ee857595ff239fb20aef2e789b5adb5817338286c4682c17", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474770, "uuid": "65c7c068-64a7-4274-b014-febfcf00a5d2", "value": "T114A32CD6BC858B11D5C165BAFE0E508D33134BB8E3FA7213CE185B2E574B86B0A3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474770, "uuid": "ac0bfc3d-1571-4b69-8f5a-f68ad165daf2", "value": "3072:gm7ydgJbZGZ30Eg4fNXmvPSSze1oH6rFE4PsKQoSX:RGZAGmvPSS56rF1P/n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769474770, "uuid": "92df2074-7f47-4cdc-b2e2-6736bb3793da", "value": 103804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474770, "uuid": "5daae74f-f906-4216-a171-eb1d047f1267", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93c44e5e-fb19-11f0-8b2a-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1769474772, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769474772, "uuid": "070d121a-b96a-47dc-b33f-9c012db7245c", "comment": "Malware payload (CoinMiner)", "value": "630280ec471765641c0830ae9e062635", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769474772, "uuid": "e62a34b9-62d8-49e5-b0a8-d17777260393", "comment": "Malware payload (CoinMiner)", "value": "b3867cbceea22cb490733f34bb5806fb9d304b204bfbc2b34c04434b8af071dc", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474772, "uuid": "00730a09-9ac2-4c44-8a55-ee3ce1f3569f", "value": "T138063315F880A071D039153615F989B6F03CBD7157259ACFB3A93A710F383E8267AA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474772, "uuid": "b389fd27-7add-4667-b92f-c818103f380f", "value": "91ae93ed3ff0d6f8a4f22d2edd30a58e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474772, "uuid": "5f480cf2-8f12-4a0f-91ba-0c55f036532f", "value": "49152:R3XTWsOBDNQ2iselXOfTITJR0nrtFPpXmfiSLI+VxBSTkqY3yZYIL4XKIj:RLGSThOfTCiFBXmfFs+JMHpg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769474772, "uuid": "aae49b19-c84c-4111-a0f1-a4969819fe4d", "value": 3705386, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474772, "uuid": "a1391de6-6ba1-47c3-ab89-e2ca4d7f6bd8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e92112b-fb11-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769474774, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769474774, "uuid": "305123fa-c31c-4b1d-8456-25604b7967b1", "comment": "Malware payload (Mirai)", "value": "d976c95c63ba05371b86b1c992b9d2b0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769474774, "uuid": "5bc03d51-f214-4800-a43f-9d0b712a5108", "comment": "Malware payload (Mirai)", "value": "60245d7ebd0f6082b1e59e0d7cc2cdc9ba5b2d9716f250a46d6b1660eee71a6e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474774, "uuid": "70ceeb14-02ed-4210-9f8b-0c7ff3c0de52", "value": "T18AC3B44F6E539F7DF32C83354BB39B36A65523E223A0C285E25CD9501D6028E586FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474774, "uuid": "d49125fc-0c01-4842-80c9-10c758684add", "value": "1536:hIxSNn+3jjNjjtejtqH6EIgghCI4yO4azFrR386BRcAsYKQNFhKAmvxSHmEQqj+0:KAnWHLIRL4Ei38BYtKAixIAFgEXq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769474774, "uuid": "b8c8fa08-e7a6-45a2-b25a-84d6e7370d7c", "value": 118564, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474774, "uuid": "0da543da-4554-4880-a34d-56ef6f7e33ab", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b8738ec-fb11-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769474815, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769474815, "uuid": "3df335a2-c12b-4579-863d-b414f5b4c6fa", "comment": "Malware payload (Mirai)", "value": "de63390d2b5b65aa050dbfa7ea72053c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769474815, "uuid": "5cee9fe3-0c80-48a9-906a-0d4c0b2760ad", "comment": "Malware payload (Mirai)", "value": "0810579b29a3cb4bbad1809268a1d6e4e1f99835d3b469e72f5709ffd12b9cfd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474815, "uuid": "07f3789f-bb84-46fb-a360-bc9673d5c6fa", "value": "T1E0B3C84B6E529F6CF36C83754FB39B3AAA55239233E0C185E25CD9411E6034E186FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474815, "uuid": "5007007a-52d4-439a-8157-20a9bb55558b", "value": "1536:kBCF7Suv3Fv3cn3oIGlnVq5qNkRVjUBCy3QWTPbrTGoKCOeMXhg:kY7gGcqN0HzSjrWeMXhg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769474815, "uuid": "a414531e-4a8b-40b9-add5-bfa94cd4ea89", "value": 109360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474815, "uuid": "ad18e283-26d2-4226-8f16-55313b33eaa5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1cb0417-fb19-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1769474849, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769474849, "uuid": "8483a00e-9de1-488f-bb08-750e00a16046", "comment": "Malware payload (Vidar)", "value": "255a5f62de4f13ac713b677f5ec0982d", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769474849, "uuid": "422e3db8-78c6-4cdb-9f8a-0bf046394366", "comment": "Malware payload (Vidar)", "value": "8be3fa2d29d4a3f3a34b634d6f1d871b9f46604caff0270652cd90e223a45655", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474849, "uuid": "c814a2e4-5a9c-4a8f-9d66-083137922928", "value": "T13A041271F8AA517EE1F31E70AD922F94590338135B07EAA99E72D5F3A580220CC19C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474849, "uuid": "9d8bfa4d-b2ed-49c6-8484-36d1efe03080", "value": "ee53c10aff1d01eafea53328179e33a2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474849, "uuid": "ad245e8a-751e-461d-9fad-3e84cc354732", "value": "3072:nDAed5mY2tHEPOCgArvUnMJqmqslvo085K1inS87wuZEh5odomR616bn:n70qPO71MJq9s1h8SAUmU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769474849, "uuid": "2591b78e-738e-4755-b64d-9cd2f11fe16b", "value": 174080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769474849, "uuid": "c2bdddb0-7b9b-4d71-8e04-1f3ffd8f3612", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1769479872, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769479872, "uuid": "37295dd7-23b6-4841-ac59-5cbf0e9e7fa9", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769479872, "uuid": "148fc123-dbd2-4b98-9a05-7aeae8e68152", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769479872, "uuid": "95ac789f-c3e9-44cc-89e6-9770269a57da", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769479872, "uuid": "71b44765-1837-41c8-a01b-3b2f050878d0", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769479872, "uuid": "9d8a88a6-04d4-4fe5-93ac-7465ff8686a0", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70896d0e-fb2c-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769482873, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769482873, "uuid": "df8f8711-b53a-4b94-a0f5-7e2726f28f31", "comment": "Malware payload (Mirai)", "value": "7fa9f69c0adca56b3ff931c91baefdd2", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769482873, "uuid": "210d73ef-70c1-4526-8415-88d974fac708", "comment": "Malware payload (Mirai)", "value": "7ca6c6ba23a348f9a32435f72f63660e5a6f3adebf9d0e752318d562f48994b8", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769482873, "uuid": "50bd7224-7f95-4d59-bad5-977c9c6dcd21", "value": "T12EA3A288F968937DC7E1B2FBE39543CE737A0788A7DB72259A3446167BC571878306", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769482873, "uuid": "b944025c-b83a-40e8-93cc-69e9f0747faf", "value": "1536:0qP9MANJ17ROsfhTM7swX8IEUIev4m/YouOnN1tyiFcAdHEr+Ldk:NS62Ehwwih4m/YouOnNbJFNPLS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769482873, "uuid": "69b2d0b1-13c4-4daf-907e-f8c598189b43", "value": 97984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769482873, "uuid": "edb5a59e-b96b-4660-a344-ac36bb4b8ad4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b8257996-fb2c-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769482993, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769482993, "uuid": "d1a6b503-3aa7-413b-bdac-0c3db7d731b6", "comment": "Malware payload (Mirai)", "value": "87f7d82de714d36d855d0c7a30299148", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769482993, "uuid": "4e64b774-86a3-4f38-8db7-7082289bb008", "comment": "Malware payload (Mirai)", "value": "1d1df12d1a575856455d73af2661d96438aed9248cb3154f4dc0c19e5b8fe09b", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769482993, "uuid": "19659cdf-c292-4202-a679-e82e3aade99f", "value": "T1F7966C036B70CF5CF212513424B34E627AB952A71BE64786C23CE5247BA0B6E541FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769482993, "uuid": "f7034962-7b74-4d8e-b1db-573727c7ae85", "value": "98304:MTJnt3uHda+yD5GVBdLnvX6o9tBqWcL4lCdCTWuk:st3uHda+yD5qdDztIL4lkCTpk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769482993, "uuid": "ff8ca142-de93-4360-9f6d-2f4f6e8d51b7", "value": 9032192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769482993, "uuid": "614bd1ce-4155-4b30-bdc5-2bbf0f25bbdb", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "916e079f-fb0d-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769484650, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769484650, "uuid": "205b00d8-c868-4216-a5f6-9bfca847918a", "comment": "Malware payload (Mirai)", "value": "851870c906f2c6524e89f3209a0f1e22", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769484650, "uuid": "8f472e0c-c48a-4e4f-a50d-67cc1830877e", "comment": "Malware payload (Mirai)", "value": "a99a589867394c51c5fccd9186a47067e8b70778644aacfe7b0d493c9e888ec8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769484650, "uuid": "1681408a-6d90-4428-a0b7-90d14b7c42ef", "value": "T1F4933AA2B410DC7EF45BE7F780570A16B220A3E44E426F27B627BD53EE2E1742852D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769484650, "uuid": "521ffa60-4b80-4b8b-a2a0-efaf33cd7622", "value": "1536:OhzzDqIJR0e+6+6ngAJuWgfFfOZ+R5uWmkWWOYPZeX1Fp48rpz:OhzzDq65e6ngmuWH4HFJMYYX1FDpz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769484650, "uuid": "643914f9-417c-4238-af6e-ad4c294a2f44", "value": 92596, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769484650, "uuid": "7a595058-7e78-423b-96c1-fb1db3194cc0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "47234920-fb33-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769485810, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769485810, "uuid": "185a0f13-886d-4b81-815b-c562edc37ff8", "comment": "Malware payload", "value": "a1cd1cda63c81f3b77c20f9313c810c7", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769485810, "uuid": "bb48b5b6-4221-48f8-8693-8a48c05fda33", "comment": "Malware payload", "value": "313877c8c8d847b1ba12d8316645b4f2ee73819653fa94848d46029e30176ab6", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769485810, "uuid": "85dff2db-d156-4592-ad79-13f1b460410c", "value": "T1D62309DE2BF12AE8E481E3E0EF1A5028351A60F76B01C928FB5C1E501F0546DDDABD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769485810, "uuid": "a31cecd6-8a02-457d-87fc-62967558a4af", "value": "768:y88gbEyRJyxplRZasChb/1h/VuCP92+Dy5DdvG:ylgMebNTRP/SvG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769485810, "uuid": "c349edd9-d0de-4f55-b7aa-d7e34c2842d2", "value": 49336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769485810, "uuid": "579a55ab-3122-4f5d-bfa1-abcd72a58316", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee3a209c-fb3f-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769491244, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769491244, "uuid": "c91ca9f8-186f-4df6-9a3b-4b93a87ec388", "comment": "Malware payload", "value": "a3dc13217a1af0158b1953869705d048", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769491244, "uuid": "fde3e6a6-7d51-4967-9514-6c1d1450728d", "comment": "Malware payload", "value": "8984b7c43a86ef143552097387c2984a67056b985c8fc2babd12c5e61985fa6f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769491244, "uuid": "d874748c-986e-432e-8b1b-3daa6888a032", "value": "T160E3F86F83F7313572138359F5A6773896ADC133EB410EE2B9B29A9C8FC11A201761", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769491244, "uuid": "a59a19cc-4741-40ba-9d81-ebc8c3fd6ba2", "value": "768:EZdapEbrTXlGRNjcXscJGcz74k/tHcTwApmppnsfifRfiVIrePfHKIYToFSnUh+p:EapArrl4k2wCmphoIrlA4YkhJgc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769491244, "uuid": "40aa9c48-62cd-4561-9d56-98ddc71a55e3", "value": 150754, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769491244, "uuid": "b7f3fa70-d1f7-422f-95e8-a4e7d6b9d75f", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "055b55a9-fb0d-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769491327, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769491327, "uuid": "1df65758-8b6b-4dd7-908c-5c405702605f", "comment": "Malware payload (Mirai)", "value": "f611d7271ba05bd3b58f68a71b42c505", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769491327, "uuid": "f56bf2de-66f2-447e-939e-cc0064c2d86b", "comment": "Malware payload (Mirai)", "value": "0aa5b0fc73261f54cbf3c2128257b488c564db0e9bfc1276c56a52db01c9e1f4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769491327, "uuid": "642f7e3a-1971-4089-af31-600c1c10bab8", "value": "T135B31999BC859B11D5C525BAFE0E508D33139FB8E3FA7113CE145B2A538E86B0B3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769491327, "uuid": "803361ac-271c-4180-ac8e-d0647f60feaf", "value": "3072:7Nwhp6E9MRqmEjWfYs1KJWSexO6Qb30vgyV0ZUQz4KBX:28RMJs1KJWob30vgyiZUQcK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769491327, "uuid": "bb87977e-16c1-4031-9e25-b1e6018dbc02", "value": 116932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769491327, "uuid": "88acc75f-fb52-4900-a2a5-7fdf7ced3e2f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cfd14013-fb0d-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769491840, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769491840, "uuid": "7600089e-fc84-43a3-86d6-e91a9ae7f5db", "comment": "Malware payload (Mirai)", "value": "2e4b8650e88e400256f7936e689c52ad", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769491840, "uuid": "0617aaed-38fe-465f-834c-cc2b74a639a0", "comment": "Malware payload (Mirai)", "value": "1d7af18dcb402b9bd83b6d64061e25afb9c8609fa1cbe5132641973ea4ecbf6a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769491840, "uuid": "6bedd6a5-98fc-4f0d-bf6f-55bc604ff817", "value": "T1DC93278ABCC5C702CAE061B6BB1F558E375643B8E3E6B107CD186F29634F8970A376", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769491840, "uuid": "884b3929-cca4-484e-a871-310fed462ac3", "value": "1536:2Pd2K0peUYsd3xXTFYwqIT4RQVGryMnU6hdVS32eW95wzexvBaqEqHoaFHX:2PAK04URxTF2+VSyMU0bS3s958elEC7N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769491840, "uuid": "53d0f908-f6e9-4eb4-8f8a-3c9903225877", "value": 95732, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769491840, "uuid": "a59d04b4-89f3-483b-9045-118082884928", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dcfbe608-fb0f-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769492461, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769492461, "uuid": "5695e36a-64a6-4774-b0de-37f4b8371a0a", "comment": "Malware payload (Mirai)", "value": "6a6f6f3557a76ae1796475e4b95fa185", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769492461, "uuid": "379fd5f3-c99c-405b-a3b2-b2ef5dfef252", "comment": "Malware payload (Mirai)", "value": "6c3d77b180a2b7d817deb8882418133c3cbc38d999a9af1944b025b8142e70cd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769492461, "uuid": "3e7175d8-daf8-4a25-ad07-51d661a189eb", "value": "T117334AC9B683D4F1F91A01B4253FA7731732EA7A10B5FB56E7699832EC23601A2477", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769492461, "uuid": "03d9023d-8d3c-43ca-a6d2-faae987c3751", "value": "768:ZEnm+IqKquhkJBr7u1E333J6BWYoX4gRm+X5awSJcmyz99kxqJ2zRmg+IOMHxO:ZEnrfJt7ME3Eakc5KJcX59kxqqZ/HxO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769492461, "uuid": "0480e846-8df9-4924-af47-fa9c72b8acbf", "value": 50612, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769492461, "uuid": "72affefe-d31d-44bd-8216-0aa15e5907a2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66e80d5a-fb43-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769492735, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769492735, "uuid": "bd393be4-ff21-4449-9655-7360322f5d37", "comment": "Malware payload", "value": "979882f97eaf1ba960b1cb0c1b04507f", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769492735, "uuid": "64e3ee5e-a8f3-4da7-b9f5-a605a91f347b", "comment": "Malware payload", "value": "68bcea14834e17d8ad0b1877ed7fb569ac998641502b19272e18aa28868f30dc", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769492735, "uuid": "cde2ec5d-0f28-40bb-8741-6c2387c2bf41", "value": "T14FB523E26AD455BDC8A4D7B2C0FB215977FBBF07546106CFB34937988A713885A2C3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769492735, "uuid": "dd3cf956-4e64-42e2-8344-832bee8b3399", "value": "815e1ba56e855b07daa7197697b159cd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769492735, "uuid": "e9e1a1ad-73ab-4355-8ae7-c141e9ff9155", "value": "49152:r4XXBsxYs27Vi3UjAwbPRtDbbO0VH8LG4sgPVta1b9aOc/DRHotj9C:oBeB3Ukg1brVH8oVpC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769492735, "uuid": "687a6295-e6f7-423d-a46b-5fb05be7f792", "value": 2326808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769492735, "uuid": "7494e8c3-5bfa-4ef7-a6c1-ceb2007d855c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e175c07-fb43-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769492828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769492828, "uuid": "0c5074c0-d884-46df-8310-fe424cf0835b", "comment": "Malware payload", "value": "729c06b4db86249fc49db33393012b1f", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769492828, "uuid": "7bf32e99-5b21-4bd0-b771-720492cf6d42", "comment": "Malware payload", "value": "de9167d1504cd2a930c43df8c1e2bf98a2fd73674492165afc45717a916b5cfb", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769492828, "uuid": "a26356bc-3785-48f7-873b-59efb4b290d7", "value": "T17ED097C280D3480FC4A8547AAEAB033923C9E703632C872BF98E1000CBC2504E4641", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769492828, "uuid": "0e02fa99-0f5b-40cf-9167-a8b027717b1f", "value": "6:SAa7F8dGbMvEY9IlK+D2nVlhavEPenZB0Ooxc:SHB8EAre48GE/yxc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769492828, "uuid": "87e91efe-d788-46a4-a4bf-55e71de9d489", "value": 243, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769492828, "uuid": "436c8e36-b6bc-4496-9a63-b9c75b126b9e", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86caf813-fb44-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769493218, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769493218, "uuid": "a71b8097-5adc-48f2-a7d3-f98b1c03bf30", "comment": "Malware payload", "value": "385cc5bad7246704d1bc77ac93dfbd55", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769493218, "uuid": "9e9c9b60-5296-44e4-bf03-3f5b52ec85ed", "comment": "Malware payload", "value": "3f2599a1489878a9d54b2d7f17bc345c2006313d7d0e0d5e3fb68ede803f1388", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769493218, "uuid": "717cc870-8098-4541-9739-d4a701eb288c", "value": "T1A4E3F96F83F7313572138359F5A66738966DC133EB410EE2F9B29A9C8FC11A201762", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769493218, "uuid": "d2af5c64-73d0-4512-a8c9-15ea59a4174b", "value": "768:tZdapEbrcXlGRNjcXscJGcz74k/tHcTwAYmppvsfifRf+VIrePfHKIYIoFSnUh+z:lapArIl4k2wZmpBUIrKF4BphYTP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769493218, "uuid": "45758e7c-36ff-4710-b2c2-2e2fa45e0952", "value": 150640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769493218, "uuid": "86130d89-8c75-4f82-bb12-ed2cc7b51494", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "31932a0c-fac7-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769493246, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769493246, "uuid": "c2c44aa1-c9fc-4cf5-8dfd-dbc2e3b2b729", "comment": "Malware payload", "value": "2a8e2c24b6699d709b08a0a0de7414e1", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769493246, "uuid": "5fda715c-9c9e-4f2d-aa93-386da3ab648c", "comment": "Malware payload", "value": "885d0f9b15c9489202f5b7ea7fc125a4e0dcc7fff074d68e37d7b6dadb3bc57e", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769493246, "uuid": "53cf7792-26ba-4961-9392-7c1ae9047037", "value": "T15331E98557884057CD67E33250E93D55DDA8019F81F1BB03A6ADD945CC83957CB267", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769493246, "uuid": "3808f6f3-052b-4bb5-818d-361e50267d85", "value": "24:9zlcyaCyv82IHWJhxiXKSu1F+Put17Cphgoml8Htl2HjxXbJmOKa8Q6utRAIqJGt:9z+yaCyv82r3wXKSu1F+PMGcdoojxXbX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769493246, "uuid": "628cec44-2be4-4094-abd1-bba0a878493f", "value": 1455, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769493246, "uuid": "2be95018-ee51-48ca-8ad7-ed7c57767ff3", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6e720e8-0f08-11ef-ab08-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1769493265, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769493265, "uuid": "3fb4db29-0377-4153-b089-8a49190f1d29", "comment": "Malware payload (CoinMiner)", "value": "a20727b81b50a20483ba59ae65443dfe", "object_relation": "md5", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "i-frame", "colour": "#eaf934", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769493265, "uuid": "309d2636-a245-45f5-a359-4cab6b7fcfc1", "comment": "Malware payload (CoinMiner)", "value": "af94ddf7c35b9d9f016a5a4b232b43e071d59c6beb1560ba76df20df7b49ca4c", "object_relation": "sha256", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "i-frame", "colour": "#eaf934", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769493265, "uuid": "54a993b6-38e3-493e-a816-4b142de4df86", "value": "T167563362F440E436E038203925F684A6B17DFD7347254A8B73A93A364D793D836BDB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769493265, "uuid": "e2d5cab2-8791-4628-80ac-d3fb25f39a00", "value": "91ae93ed3ff0d6f8a4f22d2edd30a58e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769493265, "uuid": "925a344e-c3bb-4476-83f8-2bd863dcb2b5", "value": "98304:RLGSThOfTCiFBXmfFs+JMHpCVoR8oMEOJ6Ty3RvX+Y2naq8le+:YBfTCiUswVSLOJgyBG/aW+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769493265, "uuid": "b04db3e8-df4d-4d68-bf23-1fdc19bd0142", "value": 6271259, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769493265, "uuid": "83374483-6991-4ce4-bb16-aaa68029ae73", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "febc6b74-fb44-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769493419, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769493419, "uuid": "58a5ddfa-45c2-4606-b3b8-d07829b37486", "comment": "Malware payload (Mirai)", "value": "d41b6f18fca102451fe7e94665063f15", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769493419, "uuid": "52b95c05-1258-4435-9b1e-57d5d3299c67", "comment": "Malware payload (Mirai)", "value": "36e35651324a3c1b79a151a720f6b83e4e0254b6328d0e2a386d52074f5f4b67", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769493419, "uuid": "0818e967-b2c2-4513-a4cf-608e7198e578", "value": "T19DF31A46A9918F12C5C211B9FF5E424D37133F78D3EE72029D20AFA4778A8EB0E765", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769493419, "uuid": "291b31bb-adc2-4b4c-b064-155772301722", "value": "3072:EWGbb8EpH+BgrXvRmzRyUaENwWqQlQZl/OA+H9fcQz7m:EWGbbjH+6XgzVaI8dZl/oH9kQz7m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769493419, "uuid": "7b747826-5b3e-4b29-a028-95588644a6bf", "value": 167796, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769493419, "uuid": "7535b157-82f1-45a4-8c44-3d59f44a3a98", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "467483da-fb45-11f0-8b2a-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1769493540, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769493540, "uuid": "cf2a4d90-d53c-4e5d-8f07-48772b140855", "comment": "Malware payload (CoinMiner)", "value": "c669b0b236bd751a422bf5dd24c66f12", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769493540, "uuid": "5f6dabe1-c3d3-4f93-879f-338e6e472f2f", "comment": "Malware payload (CoinMiner)", "value": "ce0d36f082b79afea9594e8f97a9a8cde69f3f38a7b474675931b0a2ea0cfd2d", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769493540, "uuid": "99218044-735c-4b2d-8dd1-0caa65f18c32", "value": "T12DF5337F0B921DFBE0BA4934D29D0F4049F215035B12E9C3A1D9A7906E36EDA39335", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769493540, "uuid": "165952c6-5cd9-422e-9899-29f08a8ebf8d", "value": "3641b918fa6fcd6b6754b75fd2065c00", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769493540, "uuid": "16e0b2b7-bc1f-4668-85c5-892420f4cdbe", "value": "49152:GbkUWQUMdZdpIE/+aJ2zG2AWN7VK3Exnwg8jBxHe7PX1GFBPCQdf4uNPcM:TQ9Jn+jG2PFzxwg8j/eLqBxdfdNPcM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769493540, "uuid": "96874c78-2ad0-4dde-b17e-0c2879c6c309", "value": 3443512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769493540, "uuid": "b0cb2018-d666-4e15-9986-b37df4972b35", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98b614f9-fb47-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769494537, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769494537, "uuid": "e170bd91-41c1-4b9d-9715-79a4a5a7ef7b", "comment": "Malware payload", "value": "5c931353ff51ae78ae6f6a6d8d61c160", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769494537, "uuid": "67d4d31b-5adf-4b20-b449-c9534135db01", "comment": "Malware payload", "value": "6dbebcade23b425bfa193b2edd5474c5297c98a3c4ea2995145a3f86839300a4", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769494537, "uuid": "a54e511c-9673-4ad8-b1fa-c39900aec09b", "value": "T1B024E046C4D7C7E6487237D3384DD4728CD3D6AB38E98879D9B96FE36B605B20026C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769494537, "uuid": "e8c4891a-932a-4e1e-bbaf-41139a063bb3", "value": "6144:ME8HasA2Mkth33QNzOqn9VyJ9xkRHnog/oXIPa:ME8JA2fP3Au25i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769494537, "uuid": "a56a0190-b3c6-44ef-a33d-5c56dc16aef0", "value": 213078, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769494537, "uuid": "85490eba-5a98-4214-974f-54737df9b687", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0329de2d-fb48-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769494715, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769494715, "uuid": "83ba6832-ffd3-40b3-b54f-712358926a13", "comment": "Malware payload (Mirai)", "value": "f63477ea1c3edbf88dce7ea11c4b9a58", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769494715, "uuid": "e209e2e3-fa98-4ab4-8aff-541cda1b85ab", "comment": "Malware payload (Mirai)", "value": "869fcd05cd73b20cde220e207b055fdf006c37c3e41875acde5e376555f3df36", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769494715, "uuid": "a1285cfb-b604-43cf-b902-b58ab80a2590", "value": "T131F32B537B324F80D726D1720B738B5959EB12811EE258C5936CCA103E34BE9689BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769494715, "uuid": "7ad39248-3d67-4545-a8d9-ddfcdce67314", "value": "3072:0WFQJ1rTFXXzMM3vN1ZVz8jcTkJDxnpIVg9twWpFC:zQXFXXzNT6j46LI4aMC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769494715, "uuid": "e97a6d62-60ac-4c1a-8a70-13aa91faaef4", "value": 169252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769494715, "uuid": "4c32b1e2-25dd-4d61-b98e-d453f2062dee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5574e554-fb48-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769494853, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769494853, "uuid": "bb3b1f3f-e6f8-4a98-89e4-2a9200c017d8", "comment": "Malware payload", "value": "7223e59abf2a88a098050541eeb43ace", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769494853, "uuid": "5fcc602c-7dbd-42f8-b6ab-5cec3c3c1995", "comment": "Malware payload", "value": "4c844f5c6637a0cccfdc94eb7900b7b23247b267d069b3eb05dab31a3b030d20", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769494853, "uuid": "d7bcf6d4-00d4-4cc5-868b-2bec35ef64dd", "value": "T1ECF31A62A7B4197A23BB43BCE455F78879688523D74D62E1F8FEC19C42C1BD224727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769494853, "uuid": "9dffab37-5eec-40b4-b19d-f84e0827afb8", "value": "3072:EdrK2iu5mGuE/kDkank71vQ+/s4oxY+b3wyAtA+3C0PCWTn5bXZEtUioCkdGas0F:aru8GPAM09asaeH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769494853, "uuid": "1bc2032f-f939-48fe-8371-b1036d1a8602", "value": 159238, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769494853, "uuid": "76ea04bd-3d41-48fb-b68d-677ab8c68239", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ae00587-fb4b-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769496044, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769496044, "uuid": "4d1ed645-54a4-45a9-8c1f-f75687f8cd94", "comment": "Malware payload", "value": "630814aa9298b3c251cf7d347e36efa6", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769496044, "uuid": "9d6f4e94-d977-4dd6-8b0b-a70461114e9e", "comment": "Malware payload", "value": "fd6567298c78547036f6b255fb64177ae5abcb28b25903d17540027a1b1cd317", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769496044, "uuid": "1f969f7a-2667-4e73-8905-09701fcf7f68", "value": "T1A3311B3B661C6483FD76A53376519D97C630DD4CB2108DAAC0D07E77944EFC9C7415", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769496044, "uuid": "4f7531cf-48c7-4d80-a94e-f772ba5b6bd1", "value": "24:9e2Q85RZvMolt7U3Gb8VgYSghvdjShSOKws5mhWLbwfJzexFkojJ60zsgY/F:9JD1MoTgy/gpdj95CWLbsAZjJ60zs3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769496044, "uuid": "1c250bf4-fa91-4102-be41-c3a7ab6765eb", "value": 1453, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769496044, "uuid": "725468ec-67e7-4468-88f4-8dcdd091c281", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a5f25bb-fb4d-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769496955, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769496955, "uuid": "90ec5e69-4aa4-4b95-9117-4c04fd896991", "comment": "Malware payload", "value": "6790f516902a82a7229af72158608b01", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769496955, "uuid": "3ac74501-647f-4d37-88ed-5f8851460b86", "comment": "Malware payload", "value": "a12c87691695f6cb3fa533063ffb1ee0b3657c5c42b4217870f3f71a286ce8b2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769496955, "uuid": "4baa533b-7c86-433d-b17f-f428e31ea721", "value": "T17AA3E91916670890F1EEDDC00D89B8BA1A137773A5E11BF967CCD64CCD16EED28C36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769496955, "uuid": "283f54fb-5f4b-4b78-90b3-b33e346a0eb4", "value": "1536:f4Xku131N6/RTVBMKJu83mPm+sezkTiBHAw06IyGbwgewyDjEYgIPLOAj1QJzqAP:ggVBH3mPm+sqk+HAw0F5KijXxP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769496955, "uuid": "aa11007c-4aad-434c-8469-43dd779f185a", "value": 98122, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769496955, "uuid": "e6f64686-ee02-481f-8bbf-eee195acc0dd", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52111a06-fb4d-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769496995, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769496995, "uuid": "646a9717-4134-41ae-893a-754cb838e1ef", "comment": "Malware payload", "value": "76173a35ca19405aa1d668033787042a", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769496995, "uuid": "696ee3c4-bd3b-4c82-8f44-b64873f7daf4", "comment": "Malware payload", "value": "ba88c1fc2c57c5a3898e1f3f0c59c171602db449bf2caf5832cca8e901bd33f7", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769496995, "uuid": "b0d23815-8be0-4c6c-a308-3c25891829c1", "value": "T1EC519513215421AEC76B0560C8798B9D7E5CA2DB11061ECB36B4E6F61E302DEE7FEC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769496995, "uuid": "8ed0da29-13be-4e3a-a12c-4466bf308338", "value": "48:PPmBhqNHJmw4pZCD2pJFvrkJvFJvbYBjyrlmNatrdUALv98XuEcDXPup:PPm7Ip8TFwfCjJqr2+V8+EQup", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769496995, "uuid": "ecec7735-4ad3-4f52-a798-f4514029d310", "value": 2452, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769496995, "uuid": "ee6c1d1c-236f-44d8-a1aa-f5c48cbf8b92", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5277b83-68b5-11ec-9b74-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1769497218, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769497218, "uuid": "a0725d5f-f28f-4b29-9477-bf1911bdf4b2", "comment": "Malware payload", "value": "05127008ddc73ccf64c067fbf04d56f2", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "fat1", "colour": "#edd8dd", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false }, { "name": "lip124", "colour": "#BBCFE5", "exportable": true, "hide_tag": false }, { "name": "Neconyd", "colour": "#f3f32e", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "rob136", "colour": "#5765b6", "exportable": true, "hide_tag": false }, { "name": "SilentBuilder", "colour": "#708a1e", "exportable": true, "hide_tag": false }, { "name": "tr02", "colour": "#e32a4b", "exportable": true, "hide_tag": false }, { "name": "Trickbot", "colour": "#334db4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769497218, "uuid": "c9015581-c139-42b4-bf4a-bbf1cfdf4d62", "comment": "Malware payload", "value": "f914b9eca1b06fac49b04ddc2c9e24e2832f75f84f97fbc7595e2f9ceaeb5645", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "fat1", "colour": "#edd8dd", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false }, { "name": "lip124", "colour": "#BBCFE5", "exportable": true, "hide_tag": false }, { "name": "Neconyd", "colour": "#f3f32e", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "rob136", "colour": "#5765b6", "exportable": true, "hide_tag": false }, { "name": "SilentBuilder", "colour": "#708a1e", "exportable": true, "hide_tag": false }, { "name": "tr02", "colour": "#e32a4b", "exportable": true, "hide_tag": false }, { "name": "Trickbot", "colour": "#334db4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769497218, "uuid": "40c0b286-23e8-4310-8d4d-a98c796e809b", "value": "T1F841B5DAE322A9D9C6B334FA365294C55E53225B8E75CF087E21C07C0089AB496D0F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769497218, "uuid": "d64ff1d3-0105-4f56-8794-902209d40d3e", "value": "48:qbUT8PA3RAGvm+SkUpE+lkGekbt0RNEtaq4F0ZnYcowWPa:qwwPcm+xokGekbtCwa33a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769497218, "uuid": "b595a13f-e6f4-4d3b-84b1-8a3e6a0426fb", "value": 2367, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769497218, "uuid": "4afbb446-c7f5-453d-a5fc-82f7bdac07da", "value": "image/png", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae5ee73d-fb66-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769507887, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769507887, "uuid": "469f9180-80de-40db-b443-64956d1c2b7f", "comment": "Malware payload", "value": "a0289e607c97f7195d6cd72f2ac4deec", "object_relation": "md5", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769507887, "uuid": "ed167d97-0083-42f7-9ba2-b4dcb1665165", "comment": "Malware payload", "value": "57efd1cfac6b5f995efce90065ddd272049d232f8c33749f0ed7b4d2220456c6", "object_relation": "sha256", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769507887, "uuid": "d1d0475a-d1b6-44ae-a806-85b50b8988c9", "value": "T1EFB633B13185D239C5535839CFF9B09C8E26969B437207EFB67E6EAB6D003C57224D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769507887, "uuid": "06014df4-8c72-466d-9245-4a699659ddef", "value": "bf5a4aa99e5b160f8521cadd6bfe73b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769507887, "uuid": "57f1fadb-13ad-4ec6-80a5-5d8b73668c3d", "value": "196608:bGMxW4bVu+oC2kKXycTjNphHiGsuNWxa31txv/XlwcqjNVfQKBn03YGzV:N04PoC2krCHiBu4xaFtbIimn03FV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769507887, "uuid": "48cf1b81-fe9b-4983-a25e-b9678d33661e", "value": 11359232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769507887, "uuid": "ad8bc875-bca0-423c-aa08-457f2cecfaf7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4db93a05-fb70-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769512020, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769512020, "uuid": "0fc261bf-5024-4413-a473-96c81042bed6", "comment": "Malware payload (Mirai)", "value": "5c9b1555e0ca7976d897d80946a4aab6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769512020, "uuid": "f850bcbb-78c2-4270-903b-135e0c5ecd6c", "comment": "Malware payload (Mirai)", "value": "b9506abc4e3cb1470df2036977c93f5c220b198a37e1a84a6a04a1ea736dda8b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769512020, "uuid": "e009c1cb-4607-4d8a-b211-02dd2a68a185", "value": "T1B6835BC1A683D8F5E91801B4213BF33B6572C97801B8FDF7F76869768429A90B18B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769512020, "uuid": "063330fe-af30-471b-bc02-b4f2403f6921", "value": "1536:JewOc1EzNQDdx82fTPEEpQPi2RhgpF7OW8a/ECUw3CYjcsxK/FbXSPT:J9zWZudx7DQPzhgptOWt/ew37TYtGT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769512020, "uuid": "bc059f28-b09a-4242-a881-e2df3407f278", "value": 83860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769512020, "uuid": "0a36af18-fc0a-49ce-8a82-03da45107356", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6102a67-fb70-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769512222, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769512222, "uuid": "f3615441-22b7-4a70-9b8f-b9177994d692", "comment": "Malware payload", "value": "5557491b730e06695a77c55e4856c33b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769512222, "uuid": "cd2dbce5-f21c-4df4-a0bb-4d51e94cdbfb", "comment": "Malware payload", "value": "e3681e7ef4ce1bcd9b5fab233fc633e821fe2e51b1e771f92793cc8e8af64c04", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769512222, "uuid": "c25f4aa0-33b1-42c9-afa7-eaa59a7eda86", "value": "T1D893298ABCC5C702C6E060B6FB1F559E371643A8E3E6B147DD09AF29634B8970E372", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769512222, "uuid": "902ab380-bd99-411e-8818-1c0ab46168b5", "value": "1536:uGzl6p5oeML13z034bl4mc3EaJgq/hiD2QLZw5PeJaB4lCXV:uSl6Lobj03DB39piDLZw5P6aBQCXV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769512222, "uuid": "a075125d-d274-4c58-bec6-36380609dcfb", "value": 89852, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769512222, "uuid": "6bc8a48a-070e-4f4f-ab31-0bb157e9cdf3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "041b69bc-fb71-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769512326, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769512326, "uuid": "8f150143-be48-4f1a-ae8a-4aa71984c365", "comment": "Malware payload (Mirai)", "value": "6251413559e9886e195eb73db6c53076", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769512326, "uuid": "bcacf256-aae7-4b0c-9455-810f81bc14bd", "comment": "Malware payload (Mirai)", "value": "7bafb063fde2bdf45b581d7e9c5aa70c560cacc9f4bda83d50efd0e26dbc808a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769512326, "uuid": "6efdb8b5-b039-47d6-978f-dde1e3135a65", "value": "T1B6938C119CB9AEE8F03B6D3050B9DDBA4713F585A80B6CB63C4783611057E88F5A7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769512326, "uuid": "1a188910-0a34-4291-8f71-995bbd200b17", "value": "1536:SiW4pJoOPEY+947VeyGvKpOOvA7Cok77MO5F2TchQlHUOCzEcGC6OX:SiW+J/F+9470yGSplY7rkEO5McGlHUOU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769512326, "uuid": "11c89e25-d4b0-4969-85a7-e32f5a5df490", "value": 91584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769512326, "uuid": "d4bf7792-feb9-4184-b3d4-8a7c8f633c13", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a7ad52e-fb71-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769512552, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769512552, "uuid": "6cc7a7d6-122e-426b-b8e9-5800039caaa7", "comment": "Malware payload (Mirai)", "value": "84e24ea4e3edac6c02f3219d39129279", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769512552, "uuid": "84dcc1ad-826f-47b0-87bc-8772992161ec", "comment": "Malware payload (Mirai)", "value": "df87a7a75fbcb3907cd9a50599541a524827b421a1d37961cea908f5bd20fba1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769512552, "uuid": "053a459d-c82f-47ec-be38-e66a5fab8bfc", "value": "T1D3B3B64B6E539F7CF32C83344BB39B3AA655239633A1C185E2ACD9411D6034E586FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769512552, "uuid": "82be17d2-28b1-4356-a367-09dfa8b60527", "value": "1536:MditDvl7jd7jd2jhgJmD5H1HRquu8ACCsuGbvts5tzQUS379XN4:M0D/mbtZv4otsXe79XN4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769512552, "uuid": "93d0f57d-2791-4b7b-9374-d4a26bae917c", "value": 109392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769512552, "uuid": "2981fe58-466b-45c8-8649-a616b3d8f101", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a4456946-fb71-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769512595, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769512595, "uuid": "a551424a-763c-4979-b1a8-6259bc55b571", "comment": "Malware payload (Mirai)", "value": "5cebf2079e99a60e3c6cc0f2559459a9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769512595, "uuid": "0e6faa79-bf8e-4649-a410-931883b22643", "comment": "Malware payload (Mirai)", "value": "9f3c038722a236bae610bcd2010d210d07be594cbabccb3529d89359e3f696ca", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769512595, "uuid": "46728e7d-407a-49a7-b38c-f257277c1931", "value": "T181A32CDA7C818B11D5C1667AFF0E508D33135BB8E3FA7113CE185B2A578B86B0A3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769512595, "uuid": "4dde71e9-5d19-4f36-893c-348c3f1283a7", "value": "3072:GdN2uRcUnf1E4TfQgHplkHebtsQQdIZhdMgwoX:yn78gHplkTQQdQhSn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769512595, "uuid": "024b24f9-9e7b-4dcb-a599-0c46ed018074", "value": 104152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769512595, "uuid": "187dc7b4-77f1-478b-95cc-7be2d2314370", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df877346-fb71-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769512694, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769512694, "uuid": "1243579e-6196-4458-8ab1-df206c1d95a6", "comment": "Malware payload", "value": "1c4aa839bb02a16d3d0282a13516e01e", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769512694, "uuid": "fb5c6a76-d798-48fe-a80b-1c004bb92a6d", "comment": "Malware payload", "value": "680824c866873393c5534ead600ac804bbbb8c2a6b85bc2e71f0c6caa1752db0", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769512694, "uuid": "64a6ece3-a13d-4d6e-8367-fb856db93cb8", "value": "T12AA63316C27FAD0ED8A10275658C1036D730A91A8E97B747BF946B3FA883F618F943", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769512694, "uuid": "b873fbb5-a30e-4755-8dc9-66bdf0877d41", "value": "196608:HhXB+K59fd5YBiHNLsKwUAicwao/5WdgBDSlt/KYYtNtKpBhkSIDJlJQ:HhXBL5904HNLZpJWdgBDet/KDNt+hkSd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769512694, "uuid": "203e1dcc-5a1c-4fe7-b180-92e5cb8dec26", "value": 9678285, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769512694, "uuid": "9bed6f56-50bb-4eb5-8e30-7012c6160540", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e28cae0d-fb71-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769512699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769512699, "uuid": "bd193a11-0a85-47b7-bfa9-f45382128d22", "comment": "Malware payload", "value": "5b320d0db4e25a152457695ce46a1955", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769512699, "uuid": "090cf08e-ac4b-4a37-89a0-1aef0854e020", "comment": "Malware payload", "value": "6e1eb38ceacb9b22d4feca47c5599c5327102fa22614c5cbe4dbb6dfe653a091", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769512699, "uuid": "28858538-bde2-4258-80e8-c8d1acf44960", "value": "T1EA93198ABCC5C702C5E061B2FF1F518E371643A8E3E6B147CD19AB29674F86B0A372", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769512699, "uuid": "102a2f21-bf59-4e4a-94ad-c9e9c0bbe772", "value": "1536:O2SCwvuU38SLetnXkT/ESr4R5OY7Q1N2eE85b4LL/Fxwv+Xk:O2ZwW6ZK0/OvOd1Nd5bKLG+X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769512699, "uuid": "64d152d0-261f-41c5-9db5-74aa3f4e198d", "value": 91528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769512699, "uuid": "9621b6f9-72a3-4644-80ef-d171d2d718e1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "08dde632-fb72-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769512764, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769512764, "uuid": "9f3f2d3b-4c44-400c-9c2e-37b258ff548d", "comment": "Malware payload (Mirai)", "value": "a8cf4c78f928f328e793cb37bb0489e9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769512764, "uuid": "bf8799ac-77fc-4076-9aa8-967e409a4d9f", "comment": "Malware payload (Mirai)", "value": "9d048fcb85e08d0320aa03e4a55c31e04c554f3448ad0ef17ca16f553d6896fc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769512764, "uuid": "2e514c34-7064-4343-b5fd-d9573ebbc5af", "value": "T15283184AFD819B11D5D525BAFF0E518933135BBCE3FA72129D246B2517CB92B0F3A8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769512764, "uuid": "0e666256-5981-485e-bdb0-45dae7048831", "value": "1536:0un2JjEzztqsPI3eMT1lVsvYJnI8SKNoSQ9mHll4eirGJT8XfZaYGX:fzztqcWewsWI8SKNoSQrLGJT8XfoJX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769512764, "uuid": "8b5a1f6b-663d-45d4-b5fc-db9bce03bf43", "value": 82868, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769512764, "uuid": "10e7c0a2-85a8-475f-9b59-a470355e055f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3630c724-fb72-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769512840, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769512840, "uuid": "b0eebd2c-07b6-4cec-a069-e4e3d42b6693", "comment": "Malware payload (Mirai)", "value": "f38b1249b684dda24801ef31d90b474b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769512840, "uuid": "71002070-d556-4f69-951d-da0bdb03c8c6", "comment": "Malware payload (Mirai)", "value": "54a7f2004c0e7ebf042d75f560c355c6ec58443d0de0a9a94fd8163720263095", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769512840, "uuid": "3045bb76-ad71-42f5-8957-30e5ebae037f", "value": "T144A33A11FD386D2BC5D0717A51D74630E5B643E926BC9A4E7EA31D8CEF14220312FA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769512840, "uuid": "015b61be-4a6d-4a76-947b-cd87025c0315", "value": "1536:JA3/I0DFOrjD3x1Nzz/llQy7cJ6G0t/LjPTZ0Vvk2Mz0A9Fjnk:CPbcj3Rzz/m0JRG8Tnk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769512840, "uuid": "5b2e0769-a7a3-47ab-b510-9d3814489f33", "value": 99780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769512840, "uuid": "53fb0837-394a-46f0-986e-1665e1f79ae1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3681dc5f-fb72-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769512840, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769512840, "uuid": "8b745101-7da1-4e05-9210-fbeb6758b53f", "comment": "Malware payload (Mirai)", "value": "07f7ee56737c6c84512d8c9b3b9ae12f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769512840, "uuid": "a5a442bd-4fd9-475e-bcc8-5c9c7aec6422", "comment": "Malware payload (Mirai)", "value": "25ccc358bb9e503cc426dfb4345a61d40a78f7f3e0dbfa5a2e54303f992bc497", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769512840, "uuid": "9277aa1b-b63e-4001-bb2e-f700e1dbe620", "value": "T1CA938C128CB55DD8F03B2E3150B6CDBA4727E485E80B6CBB3C478725106BAD4F5A6B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769512840, "uuid": "0e7e283b-594b-4ad6-829b-f053a8d9efa3", "value": "1536:kp4yZDlYE0+LbZ0RfBnbuJ8DMhueSVzCjfUJC+WevwX:kpNZxe+LbZ+fBbuqwh14IfUJnLYX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769512840, "uuid": "4eef377f-e2cd-4f3c-8702-da6d23f2f9e1", "value": 92332, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769512840, "uuid": "f6ce043a-2acb-4a48-9c35-b4c2dbd82540", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4a907a28-fb72-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769512874, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769512874, "uuid": "3ecc3f54-db03-4691-8d12-7523f84bcb8c", "comment": "Malware payload", "value": "3d41d133c1fba05c9f4be6a3e52dc1a5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769512874, "uuid": "510995c3-eb40-4f10-9e51-a90c06dc7a13", "comment": "Malware payload", "value": "26fab8de175aca6ef673bb6e6c59d86b913499b1415ea468714ed96c03c4826d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769512874, "uuid": "d90855e6-20fc-4339-821d-a47f2682c999", "value": "T14EA3299ABCC5C202CAE061B6FB1E558D371643B8E3E6B107CD19AF29634F8670E376", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769512874, "uuid": "2019377c-3f70-4478-ac43-f66f5b2adc12", "value": "1536:ol5XX7qpR+ZF7It2PrB4l1e9Iay6iO177mw27bu5mAe8vBaqqqX66vnX:oPHG3g62OXeby6i+7Cw+u5zblqlInX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769512874, "uuid": "fb8026fa-f5d1-46b1-b038-90d6b1c22b41", "value": 99720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769512874, "uuid": "319f414a-da91-4c57-9465-3cdff5855535", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e3496fa-fb72-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769512880, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769512880, "uuid": "b422d6c5-4bce-466f-8409-8cb2cc22b789", "comment": "Malware payload (Mirai)", "value": "8140e82f786a2ad64b9fdb32aff88e4e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769512880, "uuid": "e1cdd1ce-35c5-4e94-b957-5afc6b720816", "comment": "Malware payload (Mirai)", "value": "5a8d30683a937ecf56f6e06cf1f9eb7c9de187e68b4ba1d214eae22a5f1e5bec", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769512880, "uuid": "4f22e4ff-6a18-43f4-8fb9-a6ded4d2448b", "value": "T11CC3F70ABFB11EBBE4AFDD3745A50749289D554621B93B397A74D81CF20A28F09E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769512880, "uuid": "8111fd03-9ac0-49c8-949e-c8a3991eb542", "value": "1536:xSCgx9+SuUg2X5/amo6JLtX3qX0U5qRYChMbh881+Bu1u/nSgDuZfqFX39wu7r83:x7cTJLRjDwUDbpSAUDPce7nCNZB67XB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769512880, "uuid": "22497181-5c9d-4aed-90e6-bba4ddb78a92", "value": 122480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769512880, "uuid": "33245ed8-4fc0-49e5-b5ef-561f1bb188ec", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9fda031e-fb72-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769513017, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769513017, "uuid": "50ab34a4-a8f1-4efb-8ff1-0af5f11ac9dc", "comment": "Malware payload (Mirai)", "value": "24447ba9d807275970b1c5167855f67c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769513017, "uuid": "c0f6da1c-8c80-4423-83ec-10c2b548687b", "comment": "Malware payload (Mirai)", "value": "66dafc3cb09abe2c44e7042c4eeb384c077ecd8fb93641d766a95223e2748e2e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513017, "uuid": "ae938847-bbf1-47f0-bc2d-956d42c262a8", "value": "T1EF734AC1A243D8F2ED580274603AF3377572CA7801B9FDE7F36856725425AA4A287B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513017, "uuid": "0fe5362a-10b7-4f8a-939e-622fbbc2f50f", "value": "1536:dZpO8UclbNFgB8LCZV8FwpUh2D6VdonKOEqELgBtl74jLBVoFOE+hBO+:dr/tN/gBy8rUY6DonvEqjl0ff2snD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769513017, "uuid": "95910fd8-b6cf-44e4-a98d-c7d907543fd3", "value": 79028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513017, "uuid": "f97ef3a7-3be2-406a-9a6c-35dfdfe4e935", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a44fbac4-fb72-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769513025, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769513025, "uuid": "1f17f134-531d-4db0-9d21-1c2fcb0dd042", "comment": "Malware payload (Mirai)", "value": "863b33d99bcfed051b688cc001686d25", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769513025, "uuid": "ef6330ee-fbab-4aa9-8067-de22d48ea33b", "comment": "Malware payload (Mirai)", "value": "c6a54cd9814f2e3d9331776b118ba6025eb898e92a123355da5c057c4a081f0a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513025, "uuid": "38bc9b7c-5314-41a2-9e83-006e2ea84f5d", "value": "T1E0B31A8ABC819B11D5D536BAFE0E518D33135FB8E3FA7113CE145B2A538A85B0B3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513025, "uuid": "2eda4919-cd2a-4824-a0c3-f005b9bfd7d2", "value": "3072:HDwPVmHZ9/fEU3fVBVtz0O4EeRnEQSt8lgD628X+of7TX:39ZdBVtz0O4DSt8lgDx8X+M7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769513025, "uuid": "34b19a66-5454-4bb9-a0cb-4be0733fcc74", "value": 117632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513025, "uuid": "0b4bede5-7166-4a7f-83d8-8b00a97ebeaf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf72f03f-fb72-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769513070, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769513070, "uuid": "93b6008d-5639-4a1c-92f5-a88ba98c9c5c", "comment": "Malware payload (Mirai)", "value": "4d5792f371fc8f03461d401339418332", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769513070, "uuid": "42bbb88a-c74b-484f-9010-0b4cc1c664ad", "comment": "Malware payload (Mirai)", "value": "59f07506dfea2ee3dfa47d07a28eaa8660c5290a50a5db6b21f6256e9c10ded2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513070, "uuid": "79d3c108-8393-49a2-83a1-417e5b0defd9", "value": "T13D837C16CC745DA8F07B7D3060B9CABB4713A549A80F6CF63C43C265501BE98F5AAB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513070, "uuid": "9d279de6-5ba6-439c-97eb-a5f878940752", "value": "1536:fP4giGc1E5+kH4yQ1jyHvJf4XVJco1kRaCSlM88X:fPHi7a+kH411jmRfmrrkRarO7X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769513070, "uuid": "830fab81-8f63-476a-82d3-272436ac9495", "value": 84084, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513070, "uuid": "8e08a495-bb0f-4999-8772-60fba7cd600f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c766fb9-fb73-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769513280, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769513280, "uuid": "d4a352c1-eb5d-4c92-82ab-01b462fc82bf", "comment": "Malware payload", "value": "5158cb0188eeb48a92619cae57183ca9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769513280, "uuid": "0c63d7bf-36c0-43a0-a931-b9a675dc82a9", "comment": "Malware payload", "value": "de82bd365213a87054f09be19c1f67ac8672b4924719ca900911448c5974ea68", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513280, "uuid": "90452d9f-2b8a-4825-b535-19ff68720d22", "value": "T16583288ABCC5C702C5E061B2BB1F558E37164368E3E6B107CD19AB29674F8AB0E372", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513280, "uuid": "c1d28d14-229a-4d55-bfdb-987d172bd87e", "value": "1536:lguCrLtRGmy6jqziiV9G4aYnExK4cz2ceO5xzzAZrQ7X:llCr5RVGziIlnILczr5l8ZM7X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769513280, "uuid": "dc8dfe2d-ba18-4d07-87cb-d6f8d656c4ee", "value": 88388, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513280, "uuid": "85a6da6c-69a5-4b2e-a2ca-ad99620c8b15", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "65f18e0e-fb73-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769513349, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769513349, "uuid": "378d68b9-86a1-4bcf-9a15-15626967be69", "comment": "Malware payload (Mirai)", "value": "34b32d3dc8256f43b9f2a941d740f601", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769513349, "uuid": "3e82c3b7-dfed-407d-854a-4caf427e055b", "comment": "Malware payload (Mirai)", "value": "4d68ee855dfd77cdf365e4af3a99a10412fe38f0c9d27f43ee2e16c306d42b4b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513349, "uuid": "81d254af-2aa6-4876-835b-aed49ed02d09", "value": "T158B30889BC858B11D5D536BAFE0E518A33538F78E3FA7103DE145B2A538E86B0B3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513349, "uuid": "0ca281fc-4709-4b3d-b5d3-5116dc0362d8", "value": "3072:l0BqisTTIrPLEHuYfOXKoGeTHeavnr1C2ZhGdjTBWkX:4nr3hXKoaavnr1CahGdfB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769513349, "uuid": "f49b81d9-8d3b-4023-a11c-e6ba7e4ad953", "value": 108064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513349, "uuid": "829392d8-568e-49dc-964a-8dc61c038a17", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7ec0d1cb-fb73-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769513391, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769513391, "uuid": "c5f9a631-6bf9-4dde-bde8-b90e6c5ede28", "comment": "Malware payload (Mirai)", "value": "8bf4c81405dd2d07088ae5bec2684861", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769513391, "uuid": "d3cc9c2a-1418-488b-b02f-2e926e05be0b", "comment": "Malware payload (Mirai)", "value": "4027d260979c784ae0b41d7944fd16daf09e18cd924a87878fb745606508f825", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513391, "uuid": "ed46b83d-4e48-45fd-8396-7d27992e5d82", "value": "T11873B50E6E218FBDF26C833157B78B35D35963E223E1C685E25CE5051E6034E586FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513391, "uuid": "55cc53da-69cb-47bc-897b-5befbf0c0df8", "value": "1536:Ey2py2pi2I67pfKvT4AmqI4qDC72Fz5eR0DZmUanWxyPQs1d4jXgrTUSJ+/XaT:eZ4T+z4qDdz51r0tz4+UNXS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769513391, "uuid": "c7b6710a-c362-4d2d-b7ab-96b8ac57ecbd", "value": 77640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513391, "uuid": "3fa508ba-971b-495a-b2a4-28687402ef45", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "937bd830-fb73-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769513426, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769513426, "uuid": "b383e4a7-074c-48f0-83e9-88c8f65a26b3", "comment": "Malware payload (Mirai)", "value": "00837c92cad7cd5eb1691e4d6aee6fb6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769513426, "uuid": "e723dace-01c0-464b-8c1a-11fc11b8dcf3", "comment": "Malware payload (Mirai)", "value": "f4c8f6e0ccf151f765084e5d0bde25e2370ba4188b8d6d6b4a96242ef15cb84b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513426, "uuid": "8e944a56-7657-4c62-9df8-942b4aec7bb3", "value": "T129837D168C75ADD8F07A6E7060B5C9FB9313A449984F6CBB3843C325501BE88F5E6B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513426, "uuid": "7f48bfb3-f0da-4751-b3e3-c2f253d42893", "value": "1536:Dl4faiqaEs+TVUkOigWe0lIJBJZvoqyLWRCCCXBXTTX:DlUax0+TVUBigt0WJf9oSRCC2R3X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769513426, "uuid": "86c63314-d2db-4f5b-958a-2090c2f57025", "value": 85532, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513426, "uuid": "213116da-beb0-4139-832e-11f5404a2e79", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a34e3bff-fb73-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769513452, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769513452, "uuid": "9b73797b-e5e4-42a1-8a55-4752edeee1b7", "comment": "Malware payload (Mirai)", "value": "473a949f3e4c78e5875fea6310b2830a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769513452, "uuid": "794bb42f-0baf-4819-8365-ee4373607463", "comment": "Malware payload (Mirai)", "value": "4a3b75e3f968337924dfc92ac11b62ec56ce5fd449e0e0d3e3dfd50273c9d3d6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513452, "uuid": "40706071-61e0-4cbe-97cd-75282868430d", "value": "T18BC3C74E6E529F7CF36C83744BB38B3AA65527D223E0C186E25CEA411D6034E586FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513452, "uuid": "2557a2f9-605a-474a-84cd-096e8076e48a", "value": "1536:qCJdPTmvvVvvFiv9FTCKEIk4J+IAFzhIm2cc7+EZNb0KcRi4GF/l/iy2Igs+TTXI:qKP7TCTI1nAxGEc6kmRml/loTTXZu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769513452, "uuid": "fb0ab1da-b4c2-471d-98b8-17e66699a605", "value": 121728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513452, "uuid": "70922c90-80b1-452f-b283-2a4bd95920f2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "54988d1f-fb72-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769513533, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769513533, "uuid": "d2f2292e-867e-49bb-806a-ae02b97b92ef", "comment": "Malware payload", "value": "c5761a40566e5ebde74836c50e565941", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769513533, "uuid": "3b6e5aa1-d6b4-48aa-8fdd-e139c5cd47cf", "comment": "Malware payload", "value": "f8176435bc7da421f082a6d07682eefbef79e514997f77be1a0e8e8ded31943d", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513533, "uuid": "bf07963b-3c5b-45db-b61c-6b31f05513c3", "value": "T12531D742846AD238C76E8D3231072228F70D82461C5566EED25E2F895E270A7471CF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513533, "uuid": "233130c7-06f4-453c-a27e-dad0eaf4f285", "value": "48:9EdqH8HX0Y+GlJ+ywofQ3AUne2zUKrgKzv1J+5d1J:2dqczJ+/ofolne2IKJv1JybJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769513533, "uuid": "80a42bb0-4677-4453-a4ce-c2ef9d8ffe39", "value": 1545, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513533, "uuid": "e4d48185-ac89-49b6-bd0c-9b5d986e72a5", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d71632ad-fb73-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769513539, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769513539, "uuid": "af1332b6-b976-4d47-aa1b-657f80f93955", "comment": "Malware payload (Mirai)", "value": "a50eb7a7286dfe332c25fd904aebeb66", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769513539, "uuid": "6c658415-15d5-40f2-aa14-16c304d3b6ee", "comment": "Malware payload (Mirai)", "value": "fbd3239b6e1467f91cdbff25870ef9eadc2693fe6ce3af677a385abdcb185f16", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513539, "uuid": "600a3273-a600-4447-94dd-1c7feefb5c23", "value": "T150634B32BD751D2BC1C4B47A51E74631F6F6438A31B88A1E7DA10E8CEF546403217A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513539, "uuid": "1e3e1dff-721e-4bab-8532-f343c3eecb9b", "value": "1536:DWGraTS4j6NYhmGqXjshLR+lsOZ0IlwD8UCdh6Mnx:yGqS4jyGqXIhN0ZwwEMnx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769513539, "uuid": "0c1d88e8-26af-408c-851c-18c7fdf8e45a", "value": 67012, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513539, "uuid": "40250e1a-e0f5-4525-ac1d-de597ade9c1e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ddbb8302-fb73-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769513550, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769513550, "uuid": "a246c468-b2cf-4651-ab2f-330aa5e9e7ed", "comment": "Malware payload (Mirai)", "value": "b36726e97214239b4495d4d475a3208f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769513550, "uuid": "412feb4e-db9f-4040-aa39-12ce1a9fcd46", "comment": "Malware payload (Mirai)", "value": "53ced0bc2d9f0bea31b7c5be34c7f793caa0833f81584ce02e8eb308c56624b3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513550, "uuid": "83029027-1d8c-46f1-a653-5334c3d5dc3d", "value": "T12CB3B54B6E52DF7CF32C83344BB39B36A655239633A1C185E2ACDA405D6034E586FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513550, "uuid": "69deb886-6daf-4df7-aa35-90023d7b923a", "value": "1536:7oJcVga7Hx7HW1Hy9juzH8qqrFvxVWES7GL48csfoJrf7bZXefE:7lVFjuzsrF+p/8cGObZXr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769513550, "uuid": "068920e0-1c3b-4af6-878f-b64719b6d137", "value": 110688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513550, "uuid": "46e30507-d6b4-4f6d-8593-220429d1deb8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fb5bb823-fb73-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769513600, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769513600, "uuid": "27b2a3f1-efa8-4b2c-a55f-a7185c717055", "comment": "Malware payload (Mirai)", "value": "9ec2c957c12c9f812e4aea2c4ec045fc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769513600, "uuid": "7b853837-9789-4806-9527-e1901a7979f6", "comment": "Malware payload (Mirai)", "value": "761dbe2f60688e76c8c12d7a63c74403ee2a7f6e8888c1fbdd4bf9be8d5f7488", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513600, "uuid": "a00856e7-effb-45b7-b051-bcc045b5ac6a", "value": "T1BFB30989BC858B11D5D635BAFE0E618D33139B78E3FA7103DE185B2A538E86B0B375", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513600, "uuid": "05cf470e-1e36-41a3-a72e-2415b8b97769", "value": "3072:GWtcCNtwx4rEHXfdHh7e0mPYMZwAq+y5sIdojbhPX:Mxp1Hh0YMZwAq+OsIdob", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769513600, "uuid": "0d5f9f5d-13cb-4148-b006-6ab19cedb9dc", "value": 109508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513600, "uuid": "03fbe0e3-7849-4687-a508-0dd536133cb0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc2cd464-fb73-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769513601, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769513601, "uuid": "a68734f1-9807-43e3-a24b-50f6330bd3c1", "comment": "Malware payload (Mirai)", "value": "b259ba3b87eca1450f020e9d1c133532", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769513601, "uuid": "0d8c6bf9-fb39-4e25-8d0b-f3c4ec88177c", "comment": "Malware payload (Mirai)", "value": "6b0d6def84c8ba20fc7e2bc65c2daefc1b6d5cfe2e9873e1f78171bbaa405d72", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513601, "uuid": "1271b815-6656-40e6-befc-c7aa55a9814d", "value": "T110A33A11FD386D2BC5D0717A51D74630E5B643E926BC9A4E7EA31D8CEF14220312FA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513601, "uuid": "8931e2e8-43ca-428b-a6c1-c98b3593cf83", "value": "1536:JA3/I0DFOrjD3x1Nzz/llQy7cJ6G0t/8jPTZ0Vvk2Mz0A9Fjnk:CPbcj3Rzz/m0qRG8Tnk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769513601, "uuid": "19279af1-2b59-4bd3-bb31-a964921f62f6", "value": 99780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513601, "uuid": "2812fcda-14c8-4323-84ab-8325440e732d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07fb3275-fb74-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769513621, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769513621, "uuid": "c34b2e3c-dd88-4d03-ada5-2517b3902b05", "comment": "Malware payload (Mirai)", "value": "632f8eda0cf3cd6fa6a290b54632679e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769513621, "uuid": "9aa0c563-7caa-49a6-ba6f-7e416e6fe6fb", "comment": "Malware payload (Mirai)", "value": "15328497efb82492607b67225a59d1d73d8d8334cba2f90f7acf1cbc85ef3cf7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513621, "uuid": "e80f8812-810b-4edd-9cbe-af7bac0473db", "value": "T199930AD9BC818B11D5C526BAFE0E618D33134B78E3FE7213CE185B2E574A86B0A3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513621, "uuid": "a54ee32d-e98a-4b0a-ac38-bdda2f7f3cb3", "value": "1536:SRnfDqRk91HyEb9X771LvcZ/PEButYf7pyschIEeowldvmtsCMKiv8ZB8TzGoi7U:CekLHfJ/1LUZ/PEBuCf9yDBe3dj8ZB8t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769513621, "uuid": "9eec80a6-c507-450e-8d78-f42be735b33e", "value": 95608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513621, "uuid": "8b27d705-0436-4165-8dff-732d7302c8c0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d8bd0ac-fb74-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769513684, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769513684, "uuid": "68f11e4a-3604-4491-ac0b-5e2a66558fb1", "comment": "Malware payload (Mirai)", "value": "f634b74a3e5d3d829fbc92e6a2121751", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769513684, "uuid": "c41045a0-a6a0-41d7-be40-aede96fc87fb", "comment": "Malware payload (Mirai)", "value": "45203f7da056c3a55ebef72780b57e70bbc3b90cb32aed2be3adc3cffcc9e8be", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513684, "uuid": "46831369-872f-46ac-8b57-50c46186af79", "value": "T1F0835BC1A683D8F5E91801B4213BF33B6572C97801B8FDF7F76869768429A90B18B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513684, "uuid": "6d9bb1a3-57ae-4140-a9c3-a826f768f22e", "value": "1536:JewOc1EzNQDdx82fTPEEpQPi2RhgpF7OW8a/E5Uw3CYjcsxK/FbXSPT:J9zWZudx7DQPzhgptOWt/dw37TYtGT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769513684, "uuid": "e780ef68-19d1-4de0-8380-e6124077c1b9", "value": 83860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513684, "uuid": "fcb851c4-aae5-4eb2-8d51-96cef0260897", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ba04f8f-fb74-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769513708, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769513708, "uuid": "9f95986a-05e0-460e-aad4-06b63f507335", "comment": "Malware payload (Mirai)", "value": "fde104ae201406c1eb5842125ccb35ba", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769513708, "uuid": "54f1bb58-8fa3-40ea-937e-c8e4f79e7ae1", "comment": "Malware payload (Mirai)", "value": "35a66a7d28203ad8c60f54be62d6dd64259908d8739a2dde01c17ff5e40f4409", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513708, "uuid": "97bfa76e-b6f7-48a8-b1f2-3ba6d4e80c8b", "value": "T13F934902B3690487F2A74EB12C2F6BF1539ED5A221F0F285694BDB0F8175A311586F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513708, "uuid": "b94282d0-a948-4f91-b4ca-63cfb1f94faf", "value": "1536:2oZtydHSOL6lMIhekrLYIHiv2qABFYSxJFhtk/Illzsd+5ZwvryqlwrMXWa:203OLSFXBF9FhtOw58ZX5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769513708, "uuid": "6c4c497f-e340-4114-a414-c8702d23f711", "value": 96180, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513708, "uuid": "26ad1a3b-fc2f-4182-ba1e-48a7840074d1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a1992ff-fb74-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769513840, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769513840, "uuid": "482beabb-af2d-4c18-afb9-7f397d7af14c", "comment": "Malware payload (Mirai)", "value": "387878be4ed8d7cea3a95c9f33b6fb2f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769513840, "uuid": "36457dd6-fe4b-43fe-9e6c-76a78cd5e876", "comment": "Malware payload (Mirai)", "value": "8853c8b568f92f75189381de18e994f0a311ee9b93ae96abdc1ce30ec61127a5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513840, "uuid": "bc4d49b5-9065-4322-8e3c-301c0068291b", "value": "T1A7C3C74E6E529F7CF36C83744BB38B3AA65527D223E0C186E25CEA411D6034E586FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513840, "uuid": "83ee8c17-eb51-4834-86c0-a3794e0d26ff", "value": "1536:qCJdPTmvvVvvFiv9FTCKEIk4J+IAFzhIm2ccE+EZNb0KcRi4GF/l/iy2Igs+TTXI:qKP7TCTI1nAxGEc5kmRml/loTTXZu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769513840, "uuid": "8529da14-9161-4391-ab08-c9e1dc3cfadd", "value": 121728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513840, "uuid": "95a11938-078b-4758-9ef3-4d0316429efa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c9c03bca-fb74-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769513946, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769513946, "uuid": "ed3796b7-e3f2-412c-b601-243eba1dbca9", "comment": "Malware payload (Mirai)", "value": "68f8aceea51ee0b3f75295816a1d1481", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769513946, "uuid": "bdd86cdb-8d2c-429a-8557-5efa1fe46d74", "comment": "Malware payload (Mirai)", "value": "2331ddd27b6671771177b13a8887335e8b5f14a97dbc48f140b620c81781d5cd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513946, "uuid": "7f1e16cb-659b-4c1d-a970-0fb7f1ca0dec", "value": "T1FC934902B3690487F2A74EB12C2F6BF1539ED5A221F0F285694BDB0F8175A311582F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513946, "uuid": "f7ce622c-efe9-4c1b-a9d6-ee2abff9ad84", "value": "1536:2oZtydHSOL6lMIhekrLYIHiv2qABFYSxJFhtP/Illzsd+5ZwvryqlwrMXWa:203OLSFXBF9Fht3w58ZX5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769513946, "uuid": "724abe10-89b6-47c9-8c22-0629b2486687", "value": 96180, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769513946, "uuid": "6b83a2e5-b376-45b6-ae0d-bca4f140a820", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a745403f-fb75-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769514318, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769514318, "uuid": "6d9cc5d0-9d19-48c3-b645-acce8ecbe794", "comment": "Malware payload (Mirai)", "value": "32069ef0d375562a0fb048a83cbc6932", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769514318, "uuid": "ccf6c93f-73ff-495f-ae2c-481a82ebdd54", "comment": "Malware payload (Mirai)", "value": "23d938d3b2f940f16ec5d7dfbde8b2da3c369cfa795678307e486d656530a73a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769514318, "uuid": "b792fed7-5175-4676-9e6f-71e176c2e60e", "value": "T189C3F70ABFB11EBBE4AFDD3745A50749289D554621B93B397A74D81CF20A28F09E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769514318, "uuid": "59badbed-d7f4-454b-b3aa-35d59ac5c449", "value": "1536:xSCgx9+SuUg2X5/amo6JLtX3qX0U5qRYChMbh881+Bu1u/nSgDuZfqFX39wu7r8q:x7cTJLRjDwUDbpSAUDPce7aCNZB67XB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769514318, "uuid": "28232404-91f5-425a-bd66-f341a88c6b34", "value": 122480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769514318, "uuid": "7e550f41-fbfe-4254-a552-c5db980f7a8a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c722e566-fb75-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769514371, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769514371, "uuid": "4f12fd90-a7d2-407b-8e20-1bf9b08740e9", "comment": "Malware payload (Mirai)", "value": "f20b092fd6f8d63c1ee69d75fd564da7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769514371, "uuid": "fc703ae8-2d6c-48ed-8d07-5b01dc9809f9", "comment": "Malware payload (Mirai)", "value": "af9f30466d0c4c32ef48f8eeb403f2de832daf072a80f7b0456f26a7bd8f37b4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769514371, "uuid": "0b557768-473a-48cb-81fe-b50f0e74e13d", "value": "T1FA933AA6B410DC7EF45BA7B780470B16B121A3E44E426F27B627BD63DE2E1742C52C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769514371, "uuid": "29b71c88-49fc-4a62-93c4-a5efbd13fba3", "value": "1536:MhyJFmJeeTzAnfxesiPcyzNi9+nEMEhkxgO1VQeUxhd8iVt:MhyJFHi8nfxefPcytnEFC/1ZUxhXVt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769514371, "uuid": "4a4448f8-f278-43a8-89c4-d44814ede815", "value": 93508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769514371, "uuid": "4bc6c1ce-1e9c-4599-bf7c-c4c7e1f5917b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc1ea02e-fb75-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769514380, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769514380, "uuid": "1c3728e3-1a4f-46f3-a155-d2d89ef00ae5", "comment": "Malware payload (Mirai)", "value": "558dc1eb396bfcbe6b3791bcf7938a75", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769514380, "uuid": "48dcc2ca-5a5d-4da6-af67-514aa44d373d", "comment": "Malware payload (Mirai)", "value": "267f134519d86c6c219e437ba64132f8715c58bd67b116e7faca50ebe0ea2f37", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769514380, "uuid": "3100056d-78d9-435c-bc4f-7126ebfcad1a", "value": "T10EA32CDA7C818B11D5C1667AFF0E508D33135BB8E3FA7113CE185B2A578B86B0A3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769514380, "uuid": "cb61a473-85cd-4f50-9c97-95515d387aca", "value": "3072:GdN2uRcUnf1E4TfQgHplkHePtsQQdIZhdMgwoX:yn78gHplkXQQdQhSn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769514380, "uuid": "b2cdb951-fc53-4a4d-a2f6-0824e6c064b5", "value": 104152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769514380, "uuid": "3bce50bf-db65-4992-bc85-1de7759d102f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f039da64-fb75-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769514440, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769514440, "uuid": "0dd3f3ef-11bd-4bc4-9b7b-5cc48df18639", "comment": "Malware payload (Mirai)", "value": "6af97ad1c946d0aa66d00f3630038e69", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769514440, "uuid": "206f1613-bf5e-493e-94ff-2ac084671505", "comment": "Malware payload (Mirai)", "value": "427112de38afc47df78d2c72f04341623e16ce250a3052733e38ad95b76f0df5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769514440, "uuid": "5ae27839-0d44-4ae2-969d-6909eb8a90ae", "value": "T108338D65FC7B6E28E01945F07031CE7E2723A1A082572EBA686ACB65E043D8DF5487", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769514440, "uuid": "1e978733-db8d-44b7-8f50-dde17bc5dd6a", "value": "768:i6QXanugEkat0lrRNF9CUCwjmEoh+42btNP6qo7CBymqCK0sdihBHl8X:iBl5t0hDFAUCwjqiN478qCKmhxl8X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769514440, "uuid": "5ec2e15f-591b-45b3-a7d4-f459ce54f889", "value": 54720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769514440, "uuid": "7a3c0d6f-3e3c-4175-b7da-eed6a8c2040a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "857492c4-fb76-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769514691, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769514691, "uuid": "1220638d-7e36-4825-8084-272f621d45db", "comment": "Malware payload (Mirai)", "value": "d647a7ecba8ac20f8a7cdd24e78d3ef1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769514691, "uuid": "344d4143-fb4e-4421-b9fd-976c4cedab6f", "comment": "Malware payload (Mirai)", "value": "32b2c715edaa524b4e26f468344e0da1257fdcacc08750acb6c1d162aa9a3e93", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769514691, "uuid": "a3555657-a4ee-4e36-9acb-e07b82db2822", "value": "T16E932BD9BC858B11D5C126BAFE0E608D33134B78E3FE7213CE185B2E574A86B0A379", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769514691, "uuid": "57d06bd9-acab-46be-b811-9f637862b501", "value": "1536:dmnfDE2sBA952Q9rRjMiEJELtYfyZPRsFJZJegv/b2B1GCGsLMTi3mMg38qlgR7U:g3sBWZrRAiEJELCfAPRudeHEMg38qlgO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769514691, "uuid": "326da320-0cee-4c0e-99e9-2379a1f73993", "value": 96032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769514691, "uuid": "6439fa17-7ae1-4ccf-b998-068706e91695", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba3ee089-fb76-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769514779, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769514779, "uuid": "4d834507-a97a-4300-9b15-75ca07eaa080", "comment": "Malware payload (Mirai)", "value": "f3107399fe0c8d88e9d0467b4fcffd6a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769514779, "uuid": "e6a79e0e-6856-4de2-905b-041740afbc28", "comment": "Malware payload (Mirai)", "value": "5a1d924f81f15da4e3b1e7bc1f350c3b25697babf91bc509479197cb524d727d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769514779, "uuid": "02987d2b-4d6e-4ea9-b8ca-a22cd91b13e0", "value": "T1D2933AA6B410DC7EF45BA7B780470B16B121A3E44E426F27B627BD63DE2E1742C52C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769514779, "uuid": "8304ac54-fe57-438e-81b9-0ac0561b3362", "value": "1536:MhyJFmJeeTzAnfxesiPcyzNiG+SEMEhkxgO1VQeUxhd8iVt:MhyJFHi8nfxefPcyaSEFC/1ZUxhXVt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769514779, "uuid": "04053724-15d6-42d5-b810-602bda6cf015", "value": 93508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769514779, "uuid": "52bfcc3e-ad8b-42b1-9f75-ef0fc0ae9363", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eab9065c-fb76-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769514861, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769514861, "uuid": "13892825-44ee-420c-95fc-c5451527da90", "comment": "Malware payload (Mirai)", "value": "b2720b179d0bcb4edfb03e1c0e39776f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769514861, "uuid": "c2922951-a978-4666-ad64-4b4859a60f2b", "comment": "Malware payload (Mirai)", "value": "dec94518f8877ee5a3428975b16c1275f1d136ec2fe159bc94d4cd2b784da9f8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769514861, "uuid": "b9f82b06-fa86-48a6-a620-70d2dc3999be", "value": "T121336DC1A693C8F6FC2625B0253BBF731E71E9391079FA4AD769D832EC23540A2167", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769514861, "uuid": "f9847daf-f045-4c18-b7ce-34616f4b9c03", "value": "1536:htz/DeLknSSEPD+7FtnDBTNJlbJq/4dk1T:htz/qLQSSUSFtntjRQAg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769514861, "uuid": "fdef10a2-5607-487b-8e8b-54fbea048a2a", "value": 51380, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769514861, "uuid": "cc9749f6-e1e3-4f63-9df9-17b68c468954", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "37ec7b97-fb77-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769514990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769514990, "uuid": "f5627bb6-2ff1-4e51-af2f-4d04ae7831cf", "comment": "Malware payload (Mirai)", "value": "15ea9399c2193ebaec10741371ac040a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769514990, "uuid": "55c20975-d3a2-4c8d-8da0-333d4f53e93d", "comment": "Malware payload (Mirai)", "value": "dadbc08dc2068913a10a9def07534f92430f2eb186991c4466b9400f86455152", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769514990, "uuid": "863ad1fb-aa4d-4b69-abe6-46d0578f1a13", "value": "T1C793289ABCC5C202C6E0A1B2BB1F559D371643B8E3E6B1078D1DAF29634F8970E376", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769514990, "uuid": "adf9d90e-a786-411e-8c97-957e04da82d7", "value": "1536:XBDjwEURV7DDKZ8TGI/4yEhmSss0vZmyw2gnT5CeYvBaqLwCIq3X:XNjwBRpK+TCBhPssKZmywDT5C7lLwCLn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769514990, "uuid": "94690cc7-58ad-4bd7-9c19-c7c3048cefa5", "value": 96448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769514990, "uuid": "1333276b-5cd6-417b-9535-5844e68feb08", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7caa5891-fb77-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769515105, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769515105, "uuid": "1af562f0-5cee-4e30-975a-8ce05f945a5c", "comment": "Malware payload (Mirai)", "value": "e4bce28a09c76fd717d8720d2d825da8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769515105, "uuid": "38d499b0-d7b4-4e1c-8b5b-46ef175ac5a2", "comment": "Malware payload (Mirai)", "value": "3adf04d48e36bf05eef600f8c5353710b35bbf01d0167f8013abbec150f4f8ee", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769515105, "uuid": "2c236e4a-280f-454c-8881-18d7f5e12e61", "value": "T1B6933B12ED391D27C5D0713A51E34A31F5B6439D2ABC9A4F7EA31D4CDF14720322BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769515105, "uuid": "a0228ceb-ce33-4443-9f25-910246f18011", "value": "1536:QOH0qLODn9ZkQiIuWvrMBTtjx1CgKNk/74HcLF53UQNzUnv:PUqeqBtWIBUgx0IFt6nv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769515105, "uuid": "634e58ca-d6f8-4ab4-a729-9585627d491f", "value": 91680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769515105, "uuid": "64fca917-2868-4a0b-a9d1-06eb04eacb4f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1c6a3ee-fb77-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769515168, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769515168, "uuid": "e1b3eab7-5f6d-4d6e-b6ee-97673dcbe965", "comment": "Malware payload", "value": "6d793cd23e45a5b0be3834d756784d5b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769515168, "uuid": "82d6942b-d4a9-4a8c-bd8f-e9e65865f46b", "comment": "Malware payload", "value": "8b32133df2dc1b831f1b38e1234022bb816a5d8cfcd3994a7743d01c523d2522", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769515168, "uuid": "c204dea8-08a2-4752-9137-36bc195d9a4a", "value": "T1CD431A55BD82DA16CAC46677FF0E42AC771643A8E2EE73039D296F35239B42B0F364", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769515168, "uuid": "6b82af89-72f1-4074-b2b6-f8dbf46f56af", "value": "1536:CRVLLYk9p6Ft72Hrr5xCeSvBaq8cGML4yX:wVLJp6Ft7ir5xCpl8cr8yX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769515168, "uuid": "75204c5a-e124-4bc8-93b0-2c91752908f3", "value": 56176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769515168, "uuid": "ea2b4086-8d65-4dbe-aaa6-c2f38a8131ff", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c9b5d4de-fb77-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769515235, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769515235, "uuid": "dc270c06-2372-432a-bc5a-8812c6ae41c2", "comment": "Malware payload (Mirai)", "value": "ce4d263ef43fd0726638d1920bc618ec", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769515235, "uuid": "a87a90c9-aaef-44a8-9af1-4e1aea48a7ed", "comment": "Malware payload (Mirai)", "value": "4877b50dae39c0d329442cf951aa544c99c3735bd2e04a43d639a35e108a8b6c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769515235, "uuid": "98729b86-0e97-4a95-b084-60dcdc9d10d8", "value": "T1CB93289ABCC5C202C6E0A1B2BB1F559D371643B8E3E6B1078D1DAF29634F8970E376", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769515235, "uuid": "fd706dc8-9904-4e2e-91eb-c1f61bdd752d", "value": "1536:XBDjwEURV7DDKZ8TGI/4yEhmSss0vZmyw2gnn5CeYvBaqLwCIq3X:XNjwBRpK+TCBhPssKZmywDn5C7lLwCLn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769515235, "uuid": "a6912043-b9d1-4ea1-95e4-beb45556ebf0", "value": 96448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769515235, "uuid": "65fc1a73-9f05-4450-842b-ca3f0b7094e3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc41478c-fb77-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769515239, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769515239, "uuid": "2e2799f6-ad37-45b2-a60c-cd9c92281a9f", "comment": "Malware payload (Mirai)", "value": "c0942ce23e9b596f8fd418be6a737bd7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769515239, "uuid": "405ec746-4bcd-482f-9334-998da5614bfe", "comment": "Malware payload (Mirai)", "value": "57ad94f6a0019ae8852bac6530147b717e2bfaed768600c658c44346357c4554", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769515239, "uuid": "9edb5844-17d7-422d-acef-6ced43ba0db5", "value": "T17AB31A8ABC819B11D5D536BAFE0E518D33135FB8E3FA7113CE145B2A538A85B0B3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769515239, "uuid": "c9fca346-e1c8-437a-ada4-5139de8ed295", "value": "3072:HDwPVmHZ9/fEU3fVBVtz0O4EednEQSt8lgD628X+of7TX:39ZdBVtz0O4XSt8lgDx8X+M7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769515239, "uuid": "52b7d8e0-3964-43ce-8a82-e49614082ba3", "value": 117632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769515239, "uuid": "54d8e0b6-43b9-40a9-a32e-2912ef1031c7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0602eedc-fb78-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769515336, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769515336, "uuid": "7e4e16eb-7e80-42f8-9874-fdcda9a66708", "comment": "Malware payload (Mirai)", "value": "84e1362d18e01f97786c3d8df18ae974", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769515336, "uuid": "776b865d-dad6-4a55-882d-087d392eb954", "comment": "Malware payload (Mirai)", "value": "3b0e186eee5e986183d42a0ec587bc7ea3437b1d9ed83fa1cf47add169d4066a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769515336, "uuid": "25c04013-693d-4597-a8b3-749d5b9ddd61", "value": "T123533BA3F405DE7DF80EE77B84571A06B271E3A549421B36A3237967FD7609008B2E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769515336, "uuid": "e8f26d17-e1af-437f-8a74-f4fd4de9e293", "value": "1536:5mFbDnqWE+3hwB58naJeGvDeFHTW8MCT8:oFbz3a3IjGqFHTkCI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769515336, "uuid": "a7f085d7-9ba1-48bd-b9f0-e381b5e5841e", "value": 61440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769515336, "uuid": "a5e5d871-c74c-4ba6-8fde-55d8cd5f6f0e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13c15257-fb78-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769515359, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769515359, "uuid": "a739f613-e679-41df-8871-efe0629b17f0", "comment": "Malware payload (Mirai)", "value": "8b007dcae61fe7f4db71132864818d34", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769515359, "uuid": "095ad679-7124-4d7c-ad57-2d28ef54eb16", "comment": "Malware payload (Mirai)", "value": "318df882e7a506d224b9762fbdb5b82eed5cf3aedf80e8f674db6883189eb51c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769515359, "uuid": "8829313c-8095-46ff-ad09-f0087a6a4427", "value": "T136934A15ED391D27C1D0723B51E34630F5B6439A2ABC5A4F7EA31D9CEE14720313BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769515359, "uuid": "0e999920-3c48-4065-aa2a-07a0278c90f7", "value": "1536:5jEr3ebjrxi8gezxt/NH94VbE/nhzY4zQefUqN0In4:1Mar4IziMh7QwXn4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769515359, "uuid": "aeae9398-e5ea-4b0f-8d7e-fe32fcdf2d93", "value": 91536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769515359, "uuid": "ff5b73ca-4b13-4361-a661-9194171ba4cb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1cdf6fe9-fb78-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769515374, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769515374, "uuid": "8625078b-6e7b-47cd-9fd2-fb1f52a23bf2", "comment": "Malware payload (Mirai)", "value": "82f297e83c020e855b1be91cfe43b23c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769515374, "uuid": "0aa98473-1552-43c0-94e1-e324fd22b56e", "comment": "Malware payload (Mirai)", "value": "6ee19c34f8c3fb8230961016ac7873a7098ed794c37c78fd2bccb71bd5ce7cae", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769515374, "uuid": "3584709b-1efa-403e-abd3-4d41273b25df", "value": "T1BE9319A6B410DC7EF81BA7F780570A19B131A3A44E426F276657BD23DE3E1782C22D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769515374, "uuid": "a1a40378-1916-4346-b43c-f0d876cf18c6", "value": "1536:UzkpyrDJiATXbXHxLdshK+JgTv7RqWdaOm2rKGHK8As1h:UzkpysILXHyJoVLRmOKGHEkh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769515374, "uuid": "b0bc3f6b-e9c8-41b7-bdc5-d0c1428b2b9b", "value": 89016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769515374, "uuid": "f0eb2935-0b2a-43a8-ba23-e24f8236aa06", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4acfd1b6-fb78-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769515451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769515451, "uuid": "5690d2d5-1e94-4bb1-a412-35f892f539da", "comment": "Malware payload (Mirai)", "value": "63b590fdc40c7fe23e591eabac95f9d4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769515451, "uuid": "ee6a96be-d0ff-4a0c-8e86-1014ec8087b0", "comment": "Malware payload (Mirai)", "value": "a0cca3015b335fdc20fc47255de080ac91a84fe0079f8613b4a27bed7cd0b2bf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769515451, "uuid": "992e285e-85ba-4b56-b9f8-acaa755e4861", "value": "T1EB83D41ABF600EBBD82FDD3746AD0A4535CC965722A83B753634D828F25A18F49E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769515451, "uuid": "a466c320-3503-4d2f-88dc-b2145cb8cade", "value": "1536:Ibtv6pK7S5uA4OzuuYX+pu8JCcM4xJHTJjZgQqED6Vsy5DwrFvX:IbJ6k7WuA4OzPhfJjPGDwrtX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769515451, "uuid": "5f357f65-3147-4e80-bf26-161e7c0f4ed1", "value": 80760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769515451, "uuid": "b0f75977-c6dd-44bb-bca7-fb2044a12a14", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e700465-fb78-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769515511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769515511, "uuid": "0e94df2d-8e6a-4fe0-a0b4-4f86481b523d", "comment": "Malware payload", "value": "77b4d2cb0bf7a71eb024068c03f435ae", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "shell", "colour": "#59ed1d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769515511, "uuid": "5f83ba26-6f55-44a2-b0e3-49e88b7d2aaf", "comment": "Malware payload", "value": "ed4875fe62f198d959f925dcfef1c2f7f77c1577bf5d2b1342795a0801e578bc", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "shell", "colour": "#59ed1d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769515511, "uuid": "3713317f-612a-40c8-8128-2435387b86d4", "value": "T105C012AA04324A1AC634F859E673224DD101C19F02DA0DE878841CBE5088A9DA141E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769515511, "uuid": "b4857d5b-452e-429d-a8d1-9805e4cbdf6d", "value": "3:sjqfAo1/IlGzx0//F1IW3Jxf/F1IW3JoSGPFKeuI1YFIOn:mqJ9IwG//oW3Jxf/oW3JyK+Qn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769515511, "uuid": "47afb8a8-02b4-4f31-a52c-00f12a34114d", "value": 168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769515511, "uuid": "0250d02b-0dc5-4480-b936-aa700d1fd914", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc709098-fb78-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769515642, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769515642, "uuid": "73adc186-ac8e-441a-bf27-d84d1948263c", "comment": "Malware payload (Mirai)", "value": "cd9966fd600d7fd61a16b4826a4cff48", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769515642, "uuid": "81539225-1096-4090-af20-fcd36b4e6d10", "comment": "Malware payload (Mirai)", "value": "3ef324de797a383e60dcb07e270fce03722ce127ba87a6d3e83405ff6dd70fbc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769515642, "uuid": "021c7ceb-0f66-492c-b872-bff21bf7a971", "value": "T12C93198ABCC5C612C5F0A1B2FB1F518E371643A8E3E6B107CD19AF29674B8670A372", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769515642, "uuid": "4aa71ab5-6b66-4975-83e1-847d80313bf3", "value": "1536:EzoeUk8uPQ0fEiQYC+lFNkgN4lNYkA8YLl29/i5Omeb54cWIOvhX:aRUkj4eG+ZR2nYw+lUi5OmAdUhX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769515642, "uuid": "4a26f45a-8c12-4bcd-a277-ba8ecb8b9c09", "value": 92944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769515642, "uuid": "e4824cb7-9661-47e2-9b38-d51202ad7ef1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fce07a7e-fb78-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769515750, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769515750, "uuid": "f1572f93-31f1-478c-b58c-ecd5290b908d", "comment": "Malware payload (Mirai)", "value": "78634c1fa15f1beef25013e8428b951f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769515750, "uuid": "146b3ad5-cfeb-4a21-82c4-4c885bc84e36", "comment": "Malware payload (Mirai)", "value": "eba1d094b75564d87c5aa0e5e84dc9bcd5b7660389daf3cbf57368f35e70db2d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769515750, "uuid": "6ab0347e-f253-4f38-b1dc-af92ad5025be", "value": "T1D3435C01B3180983E1675EF43D3B2BD0839EA6D112F5F349764FAF4A91B2E321542E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769515750, "uuid": "9f5c71c1-03e1-4ac0-952e-26c960886ae4", "value": "1536:CPA1fO3HMN45ByTlzkGFRQBKysq4caTCXX:CPA1oMN47iFR+VXX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769515750, "uuid": "3cadd2da-d1e5-4608-9a86-20b2c37e6fdb", "value": 58860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769515750, "uuid": "05adf4c5-1b63-41c2-92e6-276a407e70eb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35ef81af-fb79-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769515846, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769515846, "uuid": "304ec9de-5f2f-426a-8efd-0f8682904a41", "comment": "Malware payload (Mirai)", "value": "9d2a83f7e771e2ff8de3279c3a79bdf4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769515846, "uuid": "cd2d1509-f304-4cbc-8565-8d522b9b3bb0", "comment": "Malware payload (Mirai)", "value": "ea2d35b7c56818b77a6758f692e6237ae1eeee5e71ffe781728bd6554074d15d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769515846, "uuid": "c20d9243-0c5a-4bea-b233-6a9bc70b6be0", "value": "T1DF7359C1A243D8F5EE480175603AF3376572CA7841B8FDF7F36806769465AA0A287B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769515846, "uuid": "fb146874-1855-4850-94e4-a9bc7f7b1a03", "value": "1536:/o4AoBD+7oP9T8S2xtg6HMs+24jEeE+MykYEBTJwEtJ7FVTF6x33AT:/HFxEi9TLscs6jzE+FkY0TG09bZcY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769515846, "uuid": "1d728f85-e5a5-4e6d-bcda-16fff4315927", "value": 79028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769515846, "uuid": "4ec54d31-6c0d-40c8-acf8-0ec0b67aa86a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2dd00de0-fb7a-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769516262, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769516262, "uuid": "915423a9-38a5-4c3a-89bd-cdb1360336d2", "comment": "Malware payload", "value": "b7cba9cc76ab574a0adf59fead66dd4d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769516262, "uuid": "b4064f9f-1b4c-4334-ae2a-6d0ab6d51eb8", "comment": "Malware payload", "value": "32a4ef67285eaaab4188c9d4cbe91282a311646d250a613c13ed9921e82faccf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769516262, "uuid": "714bc415-df36-4a77-a717-94ffc021c1fb", "value": "T137433B55BD82CA16CAC56677FF0E419C771B13A8E2EE73039D296F21239B82B0E374", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769516262, "uuid": "39fb8db8-fcb2-4d64-ad27-f1035ebfd077", "value": "1536:wX5yr8hnC/AY2vfh5LeUvBaqORU6kRv5X:c5yrgCYYKh5LPlOox5X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769516262, "uuid": "467486d6-4b05-464a-b657-ea76445c9b13", "value": 59252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769516262, "uuid": "e8bcabb0-8515-428f-8137-11852b182996", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e8266256-fb77-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769516297, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769516297, "uuid": "86068c97-d843-45b3-90f0-e75acf2fc8fb", "comment": "Malware payload", "value": "fe3978067d5553e9c8a706b23a943b8e", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769516297, "uuid": "4e7f0c22-2f52-45bb-ae64-14f35210e68a", "comment": "Malware payload", "value": "94b7c2dd775bc82f57fbff81a7d6f3eda89fde845600f06ebeb9348eacdebf00", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769516297, "uuid": "bdd3459c-0519-4a59-8bd4-291dcd55823a", "value": "T1E131D713575FA904D8BEA4F446D687C5762D60885F738AE0E00CA05FEE817FA3BC92", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769516297, "uuid": "89ad1a3f-23ed-4510-a28d-f9a741adef84", "value": "48:9mnp4V+Ms/DBWWc83aKxjeYUK329kfi/D/:EpptWWc83aKxj+K329aE/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769516297, "uuid": "45ccf828-0077-4890-8ed4-85dc8bcbd806", "value": 1553, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769516297, "uuid": "dc5e95d7-c052-47d9-9928-3ff19d304a00", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4458c7d3-fb7a-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769516299, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769516299, "uuid": "95815a7f-3589-4cbb-8851-96e06a21f8e9", "comment": "Malware payload (Mirai)", "value": "65e7dff98382da175d10e304e01837fa", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769516299, "uuid": "02e56b81-d355-48d2-94a3-2e1efdc6ea4a", "comment": "Malware payload (Mirai)", "value": "1282ee544057e5ec1c2a8331be777cafa95f7b76f69196e0623bc19535ad370b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769516299, "uuid": "8b50ba1f-8a18-42ba-94fe-dffbea88d719", "value": "T1E1B3080AAF711EBBE4AFDD3345A50749399C550721B93B3A3A74D81CF61A68F09E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769516299, "uuid": "80305cc7-7088-451b-97fd-6164a7fea11a", "value": "1536:h4xEE4OJu4gaP5/muoD9G8r3Wj0M9q9YCtvbVM81yxuJG/He3cnZfqFX39wu7r8h:hiVg9GPQctnFB60HPFLOyqRQbzbX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769516299, "uuid": "dde75c21-6298-4679-9256-849de462d6ff", "value": 113504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769516299, "uuid": "7ad015b7-826e-4a33-a9c8-892a59bd5aa2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "03d71ba2-7530-11f0-912a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769516710, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769516710, "uuid": "35de35e5-e068-4b69-94e4-63386f95b1bc", "comment": "Malware payload (Mirai)", "value": "72a37a2fa588e013eafd695b8b5b0e61", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769516710, "uuid": "38f85d0a-10b2-42dc-8978-e5af6fc30dd4", "comment": "Malware payload (Mirai)", "value": "0c748b9e8bc6b5b4fe989df67655f3301d28ef81617b9cbe8e0f6a19d4f9b657", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769516710, "uuid": "97c1f3a1-8e83-4f56-8053-e00599d777e1", "value": "T1C3865C47B6E318FDC19AC470472FD663BD7078984221B97B7698AA302F67E205B1DF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769516710, "uuid": "e7d7ceca-f112-466d-be6d-6972b6e54053", "value": "98304:g8DPu7AJOgt5Gnuk4zX06WOESLAsNFeuLSgPETesUVLFqK4sB9sPBVrZDEtq+Udx:OVaGFesaVBjHmxN9NZozI1olQFj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769516710, "uuid": "b62d30b4-ecd7-4cd5-be7d-3e0af4d4d6eb", "value": 8334576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769516710, "uuid": "9192fdf0-2880-42ed-bbf9-e492f6672dae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53d040b0-fb7b-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769516755, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769516755, "uuid": "6b1bdde8-e6fc-4d3a-8cf6-45abc74ca208", "comment": "Malware payload (Mirai)", "value": "269ab567035ba4c2bd996ffd78d461c4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769516755, "uuid": "4876e2b9-cc5c-4dd7-ac5b-c256d6c6fa97", "comment": "Malware payload (Mirai)", "value": "30094855f734e99f964d9f3b8118d4b4ab2539fb277a71c1f80f41493648afae", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769516755, "uuid": "364a075a-37e2-45bd-8976-c3d908b75f9d", "value": "T1B4834A0273690447F3A74DB1282F6BF193EED5A621A0B285694FDB0F8175A321586F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769516755, "uuid": "5764ef49-45b9-421b-8f66-dd2b370511a8", "value": "1536:EVMMHFFOFCJ86FikrLYIHiv25yMsFQrkg9bjI52Ew6KqNiPuNXb:4OFmDiMsWAg9bk5dTNXb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769516755, "uuid": "321adf75-d70f-43ee-a209-c7a4c07017eb", "value": 88276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769516755, "uuid": "4ef6bb4b-2205-4140-ae44-c15e41b2cd87", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3879f575-f968-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769516827, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769516827, "uuid": "73722e71-5303-43ac-b476-d9b7794dfeba", "comment": "Malware payload", "value": "8b172183689b2093c9a95bd7ad1f5f72", "object_relation": "md5", "Tag": [ { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "tar", "colour": "#fb5a2e", "exportable": true, "hide_tag": false }, { "name": "tgz", "colour": "#bfd520", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769516827, "uuid": "4f615228-804c-4178-bdb1-ebd2c180a3c0", "comment": "Malware payload", "value": "16ac8c14e7c5d9b0e573f42125b2c41fa0627243a84fcf37fc1d166ab824b64e", "object_relation": "sha256", "Tag": [ { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "tar", "colour": "#fb5a2e", "exportable": true, "hide_tag": false }, { "name": "tgz", "colour": "#bfd520", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769516827, "uuid": "574a3a63-6a5c-484b-99ac-81d32aa28b3d", "value": "T13E74236EC8640EFBA4D8C1AAFD2C2535D06319D00A0DF4C577969AEA4E711C5C22FE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769516827, "uuid": "699fdc94-e036-4f28-90aa-4690ff98e87b", "value": "6144:EZ+dAmI2jaMKKF1AKYIbs9ba+E63YY78+CrzxuaiDStureawCGb4yfX:5dAPWaUPtVbs9baCQ/xViDSMGbpX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769516827, "uuid": "efb58868-aef9-4953-a113-354adef9c3ed", "value": 351866, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769516827, "uuid": "b1b8f738-09c6-400e-b961-a2f25df47c27", "value": "application/gzip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "384a1de1-f968-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769516829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769516829, "uuid": "2392ef0a-fe1e-43f6-a75b-38add29d74ca", "comment": "Malware payload", "value": "d3ba2c41757b203ad0a12d1028074bbf", "object_relation": "md5", "Tag": [ { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "tar", "colour": "#fb5a2e", "exportable": true, "hide_tag": false }, { "name": "tgz", "colour": "#bfd520", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769516829, "uuid": "41bb398e-b703-44ed-a9fc-636ede7de8b4", "comment": "Malware payload", "value": "d7c569900cd7cdcaafdc0de74de12cc44988f7ad76917b5a2c224aa9de5fc3f8", "object_relation": "sha256", "Tag": [ { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "tar", "colour": "#fb5a2e", "exportable": true, "hide_tag": false }, { "name": "tgz", "colour": "#bfd520", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769516829, "uuid": "8185b510-5c9a-460b-b1e6-0802d5f9f20b", "value": "T18B73025D14CB4AD28CFB14C0CFF83B5E98666FED81462905CCF096A24AD4E75C4BA3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769516829, "uuid": "e89fd2b6-1ac7-4c3b-b7c0-1e2c4281947b", "value": "1536:L1hCvSQqIAUXwtS+0LzLpOv8yo52yYYP59NzjH4wx3z2n:JhCaHI+vkpOvnkNYYPVnpd2n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769516829, "uuid": "a83df152-bdb0-4778-874e-20b2a80146bc", "value": 74429, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769516829, "uuid": "6da8673a-6730-4473-9782-8bdb05dd2e4b", "value": "application/gzip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81c3e5ee-fb7b-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769516832, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769516832, "uuid": "0eea0ce6-1b4c-4abd-8f6d-61fd1e63758e", "comment": "Malware payload", "value": "2ba2e76bea6f56769e277b760c9a6c9c", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769516832, "uuid": "3440c1da-4d0c-4fdd-ac14-5ecbcf73578f", "comment": "Malware payload", "value": "6a19f4179be29d227f24bb076c8a9378aa191d0fa00374318caf1513f0af4448", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769516832, "uuid": "75428775-341d-496e-8a5d-ea79f32e4d83", "value": "T1449110BD7159D9B1694881F8136DDC4CEDAF0C1FBA52E40E330F96A43F1A76981F82", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769516832, "uuid": "ce894ad9-41b1-41bf-9b45-9c399cbb3177", "value": "96:mhiSGbe3Up3jhvBzIX0bd0NNFGcrcBc3gjXuc2a:mhiSmeEpzpi0bONNFGzJuC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769516832, "uuid": "2ca35df8-53c7-4597-bb32-9679806c10a7", "value": 4317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769516832, "uuid": "87a049c6-f4ab-46ce-a11a-8858739ab6cc", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b109286-fb7c-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769517116, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769517116, "uuid": "8411aa02-2fe3-42a2-b7c2-b267ebadb147", "comment": "Malware payload (Mirai)", "value": "9ab15978f25c8a7d273b52dd7511ce16", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769517116, "uuid": "c7dc39e4-cdc8-4de0-b80c-1e7b9a919304", "comment": "Malware payload (Mirai)", "value": "d964a7a68c53a69a082064984e6779bf20d0b00f3e5eb6c729cf745650f7f595", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769517116, "uuid": "ef124733-12b3-4105-bfba-cd76c9802727", "value": "T1ADB3090AAF711EBBD4AFDD3345A5074A399D550721B83B3A3674D81CF61A68F0AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769517116, "uuid": "179cc15b-4813-4d73-ba2a-7279fb30fc5d", "value": "1536:yonVE04Ocu4gaP5/muoT5WML3Wj0M9q9YCtLbVM81yxuJG/HeLIeZfqFX39wu7r2:yOF35WrcI42Kq9Y3w1h20YKq5X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769517116, "uuid": "2b052ffc-f95d-4a55-b210-f8e460bfc61e", "value": 113488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769517116, "uuid": "a335fed2-a121-46c6-851f-193da129bab2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c3b78d6-fb7c-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769517145, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769517145, "uuid": "d44cdb81-f49e-4a41-804f-f0d4c7c62b05", "comment": "Malware payload (Mirai)", "value": "6f1ad2022e303bfc1151a687571e51ac", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769517145, "uuid": "6aa71256-01b3-441e-82c6-fd5a61da2c2d", "comment": "Malware payload (Mirai)", "value": "67b89a8488862fb278b4ad8a94899b9248c90e57655a5756a92f139810f52932", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769517145, "uuid": "f7e5dd58-a895-4af4-b821-c9c820b33836", "value": "T1D9631856B9919B15C9D152BAFF0E118D33035BBCE3EFB3129E246B24578B46B0F3A8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769517145, "uuid": "a3fd9785-fae2-4885-bc42-a7d45fc08078", "value": "1536:ronkjQaaCCZ0sO44edTatNLyve4scMIiEwqKyEqjc67vFYnqX:AdCCOtlea8wqKyHjc6jFNX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769517145, "uuid": "3ee052ea-1eae-494a-8a2e-b6d96d59755b", "value": 71036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769517145, "uuid": "27808861-36e1-495f-b463-a65166e527c1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ffd984b6-fb7d-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769517903, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769517903, "uuid": "e7b00909-ee12-4a14-b305-27e2c4791c02", "comment": "Malware payload (Mirai)", "value": "da2978940de19d37b85d12ec12535c4e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769517903, "uuid": "7a38df01-91ab-4933-9c58-777c14dc0915", "comment": "Malware payload (Mirai)", "value": "1cbad6136b7e1f337b93f1ccfb421e316c700374baa024618805edaffe92660a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769517903, "uuid": "0f54322a-a37e-44ab-9294-0547d931d979", "value": "T126934A0173694447F3E74EB1282F7BF593AED5A221A0F285695FDB0F8135A321582F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769517903, "uuid": "79fb4020-a745-4815-a512-af9abb572198", "value": "1536:TsI9OHgO6jGoe1JVkrLYIHiv2FLC4FdW8euBeN5p+ztcqz6O9XKr:HO6nECC4zW8ej5I/XKr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769517903, "uuid": "09903640-1821-4b50-a3b3-056536e820e5", "value": 89732, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769517903, "uuid": "e1e88e04-c0e7-4b2a-bb8a-8d34d041a371", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "213d0430-fb7e-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769517959, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769517959, "uuid": "bc981a12-bd56-4606-b0d9-ab0219db1c1a", "comment": "Malware payload (Mirai)", "value": "4432871d31fa946d3e72a97c2f8814a4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769517959, "uuid": "e4e52cb8-5673-4653-a3c9-0ddfb08020ad", "comment": "Malware payload (Mirai)", "value": "dbd962339ad6d9573d4a2ab32a8374dfc4759a2ed25e1c11bcf0fb15c38a783e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769517959, "uuid": "74ebeab1-e7f2-40d3-8e44-223a29f6e0f0", "value": "T1BF8318A6B410DC3EF45BE7B780130A16B221A3F15E426F276627FD67DE2E1742822D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769517959, "uuid": "4b6a5f10-70c6-4e29-afcc-6ca25738c0fe", "value": "1536:/0s7LJ+8os3WrIR27HO/n2S0a0Ye0lcr1eWFNPOYouZIhE8Wk1j:/0s7MTsGrIR2zed03Ye0l+36Y9ZIhQMj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769517959, "uuid": "5565e477-8b31-404d-bba8-12e407be3939", "value": 87452, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769517959, "uuid": "fcca0289-8d0c-4deb-bc22-e8b77f617d3e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b56f06f-fb7e-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769518056, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769518056, "uuid": "42b512c3-d45e-4bd0-b9f2-faf75af656a7", "comment": "Malware payload (Mirai)", "value": "2fddd9475a1c726e758584b300fa015d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769518056, "uuid": "a8c9d420-ddff-4597-9ebc-f471e8f1b53e", "comment": "Malware payload (Mirai)", "value": "e3c748cae6c49c536fb41220772ca2c9e8d15afb34de9ccf9d63e3becdcb037f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769518056, "uuid": "d596d373-786c-41f5-b563-4b1e664a25a5", "value": "T1C2A3299ABCC5C202CAE061B6FB1E558D371643B8E3E6B107CD19AF29634F8670E376", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769518056, "uuid": "4cb7ec0a-422c-4385-a290-aa6c9b5313d1", "value": "1536:ol5XX7qpR+ZF7It2PrB4l1e9Iay6iO177mw27bS5mAe8vBaqqqX66vnX:oPHG3g62OXeby6i+7Cw+S5zblqlInX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769518056, "uuid": "95a45201-b3cd-435c-ad83-b271c5054adb", "value": 99720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769518056, "uuid": "4946f1a1-bbdc-42f6-a200-00a22667c050", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bcd2323e-fb7f-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769518649, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769518649, "uuid": "dcc5bf40-1603-4a7f-b33b-ca1872378532", "comment": "Malware payload", "value": "bf6d0c596d231cdc63ba4fca0b0fc717", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769518649, "uuid": "40065288-3b5e-4052-b33e-be81176845dd", "comment": "Malware payload", "value": "d83968c2133e9ef926c1863218fb0ec2846902f7fc1931173cbfa6a1663d261d", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769518649, "uuid": "c2c5f5de-af02-4930-879c-c3dcb3aa1489", "value": "T1E531C9BDC548FA51C6749B7746BD06C3E274F5A98273D316051514A8FA5C3D1A1504", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769518649, "uuid": "b42eae71-00d4-4b63-ac5e-f683bec0ce1c", "value": "24:9WZHEPYAokPAXma/4QR+skwYnnlZSeORUN9i2/iTP2hdEIDk6/Z:9sorPfo7kvaeORUJ+wVZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769518649, "uuid": "2dad2852-e5ae-42d4-b02e-1719af3b9561", "value": 1537, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769518649, "uuid": "30c73192-d1b9-4825-9214-9c730c3d49b6", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a63018f7-fb80-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769519041, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769519041, "uuid": "8d83495b-47f3-41cf-a424-2568efaa08a5", "comment": "Malware payload", "value": "eb7a7dc07ca6b01e5722e65d227317d1", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769519041, "uuid": "36397d07-bb81-41b9-96af-6e670f132ea2", "comment": "Malware payload", "value": "513c88a0a8ca11895aa630462f9af8cd3b7464fce67af01d2190502ff54bd41a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769519041, "uuid": "68a2c2b8-3f65-48dc-b626-cb69fb762d53", "value": "T1768309327488582A210B428FD267336C70AFDCE2D611E5B6F6F632344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769519041, "uuid": "52f3204a-6201-4f53-a008-dd818d84103f", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnLWa4VN/:XEKltp9txAX/yr2pbLWhVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769519041, "uuid": "67dca515-4de0-4a19-b076-b1255e5d9aa6", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769519041, "uuid": "f31b03ac-d0d5-40b8-abe7-d7c04fe886f4", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "80275d00-fb86-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769521554, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769521554, "uuid": "a5bd765d-6d62-4b81-a984-dd0d5b67304b", "comment": "Malware payload", "value": "016c607c868d5fde2f9f6a1a3f38ccf7", "object_relation": "md5", "Tag": [ { "name": "shortloader", "colour": "#200f54", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769521554, "uuid": "985517c2-3527-4ef4-b42e-e1954efa9ade", "comment": "Malware payload", "value": "4bcb884d5234c06c58c0c3a046f32c6173548cb4d78f303570f86000424af66e", "object_relation": "sha256", "Tag": [ { "name": "shortloader", "colour": "#200f54", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769521554, "uuid": "f142f032-97bb-4f76-9c9e-0dc6f4092b38", "value": "T14865332E36980579CC2B5E3392EE892BB3FF536613245073F796AD2914B17815060B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769521554, "uuid": "8da41e97-0c50-4238-b3b0-8565c5db9b92", "value": "7fa974366048f9c551ef45714595665e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769521554, "uuid": "133e58ce-c8d4-4e85-8f0a-5dc77810329b", "value": "24576:/cjlC0McRZiuHqKcX8nHya78EqULN0i0gQufXFElzqUWT5Wdfy+tlF7CH:/cjUw7PnHr8fULWbcXuYHcdfy+tlAH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769521554, "uuid": "1cf581b6-c13c-4199-a354-a3a61a718642", "value": 1482008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769521554, "uuid": "c224a803-20c4-4ec9-95df-74ab601273d6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e43debb0-fb89-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769523010, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769523010, "uuid": "7eff9580-6c89-4bc1-b5a1-9b456bc17e87", "comment": "Malware payload", "value": "e4dab38208d8ca88cf52bfc6bd8ca384", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769523010, "uuid": "03797346-d21b-4234-a662-a669ec4b2a05", "comment": "Malware payload", "value": "63854ecb06e7ce9f7525e275481b38ed2456d63e975a05fee233be59b4c62191", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769523010, "uuid": "b7915e97-eeb1-4d27-8947-3e5aca6b05d6", "value": "T1E4D5E013B28BAF3EE05F07360572A25454FB6E116D22AFD686E4AC9CFE350501E3E6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769523010, "uuid": "96129272-3c46-4d93-b4ac-a7f23d20eb4c", "value": "40ab50289f7ef5fae60801f88d4541fc", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769523010, "uuid": "7539a558-ae6f-49d6-ba95-6f3662bdb9d5", "value": "49152:n+MRdOH01EIZhx4126Xv2Ass4C9yMYZWF9+5JYFBFpb5O5fS:nr1EK3cdfv93oMYZWF9+5JYlptsq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769523010, "uuid": "83ef688f-ab4e-43e1-bf6f-b39aa495a690", "value": 2911459, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769523010, "uuid": "380f0ab5-4a2f-4039-ab8a-d378fe9ef120", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "983afd32-fb96-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769528466, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769528466, "uuid": "9b4fd98a-70ae-4e78-839c-d6b9bbe07615", "comment": "Malware payload", "value": "691bc8ade646a1b5cb90c234ac25eb00", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769528466, "uuid": "1dc96633-2086-4c0c-8254-b262717f48c4", "comment": "Malware payload", "value": "ad81ac2400d66848a30d6b2bdc76e9429a172ce0c07076c578b573576b91aec3", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769528466, "uuid": "a2d52aa0-986e-4847-96a4-50513d4caa99", "value": "T14794E619A7F90814F5F3E6388AB68241EA73BC655B31D2DF1198853D1F73ED0A934B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769528466, "uuid": "9db2af66-21bb-4c6f-b64d-7a3a0659d097", "value": "df3f418443d8095a5f121467e2031eec", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769528466, "uuid": "cf76a719-57ea-4058-8ca2-2c9091387f47", "value": "6144:5buVrVIfpoPV+01jUA454MxYyBOrBj/PmZtulf3vVeUe0pl:Uvu4VrUx5YyB8mtKzl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769528466, "uuid": "7f68a0fb-d81b-42c7-bf6f-933d09bac21e", "value": 426696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769528466, "uuid": "330847db-6e49-4008-922e-77082fb5942e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f177cc6-fadc-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769532609, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769532609, "uuid": "b8199f46-d42b-42a5-820e-45d893ecef98", "comment": "Malware payload", "value": "f1ce244fe84194c6d753fba3de5ea492", "object_relation": "md5", "Tag": [ { "name": "181-235-3-218", "colour": "#b68dcd", "exportable": true, "hide_tag": false }, { "name": "3ffae72147348ef591eb32443902cb86", "colour": "#7043c8", "exportable": true, "hide_tag": false }, { "name": "ArkanixStealer", "colour": "#e0ae21", "exportable": true, "hide_tag": false }, { "name": "jpg-base64-loader", "colour": "#93d451", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "XenoStealer", "colour": "#f641e8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769532609, "uuid": "fec191fd-d322-4c6e-8d3f-935d1254594f", "comment": "Malware payload", "value": "18cf301f73cb987f6706257cef6935f6443b2da728c81f348a9581d24a8c8383", "object_relation": "sha256", "Tag": [ { "name": "181-235-3-218", "colour": "#b68dcd", "exportable": true, "hide_tag": false }, { "name": "3ffae72147348ef591eb32443902cb86", "colour": "#7043c8", "exportable": true, "hide_tag": false }, { "name": "ArkanixStealer", "colour": "#e0ae21", "exportable": true, "hide_tag": false }, { "name": "jpg-base64-loader", "colour": "#93d451", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "XenoStealer", "colour": "#f641e8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769532609, "uuid": "aa2f70fa-8b04-4df7-b05b-5482bc5e6c28", "value": "T157C523B15207BDC96F371C84F8A015649C5CA9BB63F2943DF9C53AEC69D6428CE688", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769532609, "uuid": "1de245dc-7f67-47e1-8171-0e0193609038", "value": "49152:8A3C2JyJiuj0gtd7D5188bLtUqh9Scxrkjc:8QFcXj0gP7l1FircxrZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769532609, "uuid": "16acaeed-2500-4b43-89ab-48f110379995", "value": 2521159, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769532609, "uuid": "85727cab-9c09-48fa-9932-592d1c9d5873", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "464eb3ef-fba4-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769534342, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769534342, "uuid": "3c06af88-7a7e-445b-82a4-ae61d25a1073", "comment": "Malware payload", "value": "d9b963132e3ddc3dc353b32e6ae7c7fb", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769534342, "uuid": "d2b5f3f1-a6d3-40f5-9b59-07d06b940132", "comment": "Malware payload", "value": "c4f1820c0842fc4ce527fd260ced400094a153008cff486b6df8b15410eee21b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769534342, "uuid": "76f1ad61-d9b8-4b1f-9c20-6c106ce6bd22", "value": "T11BF31A62A7B4197A23BB43BCE455F78879688523D74D62E1F8FEC19C42C1BD224727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769534342, "uuid": "7f151a28-1b2b-43b2-b184-dba6a036e4de", "value": "3072:EdrK2iu5mGuE/kDkank71vQ+/s4oxY+b3wyAtA+3CWPCWTn5bXZEtUioCkdGas0l:aru8GPAMWLas0eH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769534342, "uuid": "11198a1c-0d95-493a-b698-f0a7935846be", "value": 159238, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769534342, "uuid": "d9c5daeb-e684-48ce-9c62-61c51183e6ca", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6d473259-fba5-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769534837, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769534837, "uuid": "e0de7d84-0b61-422b-a12d-963635b5caed", "comment": "Malware payload", "value": "e6dcf83c4433b28bec66391e87a67087", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769534837, "uuid": "b27c72f4-bf23-4906-8c96-aaccec3a2008", "comment": "Malware payload", "value": "8f471fedd86a019c71f885fe3116f032f8cf6bf7289a7f3238081dff3dd41f4a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769534837, "uuid": "aeec6a38-e125-4166-b68a-edc64d155fae", "value": "T188E3F96F83F7313572138359F5A66738966DC133EB410EE2F9B29A9C8FC11A201762", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769534837, "uuid": "50065d2d-f37e-4041-a720-014ef0e6c856", "value": "768:tZdapEbrcXlGRNjcXscJGcz74k/tHcTwAYmppnsfifRf+VIrePfHKIYyoFSnUh+4:lapArIl4k2wRmphUIrQF4B4hYTP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769534837, "uuid": "cb7bf94c-5efb-480d-a1d3-4a53c46c0d02", "value": 150738, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769534837, "uuid": "65d9564f-125a-4c8e-8016-0b4711933f3a", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "040523a8-e5c0-11ee-b38b-82aee05be84a", "comment": "Malware payload", "timestamp": 1769536225, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536225, "uuid": "ecba7f7d-a302-4243-af06-1c97747862cd", "comment": "Malware payload", "value": "724f25e7f93eae0ae54a80142e11b7ef", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536225, "uuid": "d58bdcc1-3fb1-4a63-882c-e2234f8f920b", "comment": "Malware payload", "value": "ab69ef32017a5365ee0e7faca03e1352382865c5672e989d99d2d77ec91c33ef", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536225, "uuid": "407a7999-2ea4-4f59-bba7-0e17ef3b7bed", "value": "T16D356D56F9808EA2C5D8177BB75DC35833534B78D7DEB102CD08672877AB94A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536225, "uuid": "408e6b66-44dc-4f9a-a512-b005597e06c3", "value": "12288:00Bw2wHeeJgR3asIAksAi0uObzkzOgFr1qwRcFjV1D7a9KbsaKjpeFmz4T28bLv:00BnRED/TwOjX0a5xTdv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769536225, "uuid": "a62ca4d9-602c-48a5-ba9a-f0dcd03607b4", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536225, "uuid": "366028bb-9b59-4680-bb16-f3ef1ddf3e9f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536225, "uuid": "226f0969-535f-4270-933b-cd6338707ecd", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6b53292-16ee-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1769536227, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536227, "uuid": "a3ba5a0d-a6e7-4c53-bcb9-aa351f95f0d2", "comment": "Malware payload", "value": "ba5d73d924d8f25a7d7aeee4bf7fe6be", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536227, "uuid": "3cae918e-7178-4730-aabd-59fd6d667b5b", "comment": "Malware payload", "value": "7ccd748e7cd3cc2cb747b87bdbdac4c23ad118837b496a19e7f69596dc256ed8", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536227, "uuid": "2f9855b7-afad-455a-93b9-3bc525ac9729", "value": "T1A205E184F5E01E67E487813F9B8246720266ED5FB34AC317574876BBB4BEA34EB153", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536227, "uuid": "f5a3ef93-5162-40ee-b670-ffaa998c6216", "value": "12288:lZpdDbfRWxSYOkwVcqcMFT5G1z6EtYOyDIGOnd7w4bLvVc:lHlb/KwiqcMFUzYP8GU7PvVc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769536227, "uuid": "0eb12f4e-86ef-4c87-8cda-0469b8255884", "value": 848048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536227, "uuid": "195321e2-3fb2-4360-abad-51d428163ebe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536227, "uuid": "fae756e5-4d65-4f54-a8e5-88af833d453c", "value": "t189217143a83f9f3ad5a2d8b0dc6a0725512b5702b4f9e7109f3ca9d06c7a016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cae4e4b-16ee-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1769536228, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536228, "uuid": "87f26b88-4c72-4ec4-b517-d02eb99740e7", "comment": "Malware payload", "value": "936b35bfee8232f437bf6b46e88401dd", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536228, "uuid": "1e69a013-7375-4c7c-8043-46f21b437b18", "comment": "Malware payload", "value": "de9a5647bdf02fa2b927566c78e54d5931e25c9f07d2ab884e135766815d53cf", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536228, "uuid": "3a86e471-0365-4d6b-b5b1-e674890a9406", "value": "T1B9356D56F9808EA2C5D8177BF75D835833134B78D7DEB102CD08672877AB95A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536228, "uuid": "b27d230b-efc6-4911-80fe-a88f825dd831", "value": "12288:E8dASOYRNCAJump208iJftl7zmnSrlcaUxQ5TVFQGl9eLtRajZa6ZTxIVD7bLv:E8dbbsO38+TfgRinIVvv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769536228, "uuid": "857d8f17-8162-419a-b97c-70b48a171861", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536228, "uuid": "583e2fc1-1029-4ae8-b8b5-488b66f54b03", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536228, "uuid": "8a90ccba-e5d5-47ae-b4aa-2acac3e881ee", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6d0b5db-7fda-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1769536228, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536228, "uuid": "4942b998-dd4e-4ea1-bd9b-4a77e6fd4606", "comment": "Malware payload (Hajime)", "value": "5377e8f2ebdb280216c37a6195da9d6c", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536228, "uuid": "caf2dceb-3df3-48a5-822c-d9d852c12110", "comment": "Malware payload (Hajime)", "value": "020f1fa6072108c79ed6f553f4f8b08e157bf17f9c260a76353300230fed09f0", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536228, "uuid": "e73f2d4d-c4b9-4ee1-806b-a0b2c1d14117", "value": "21831229135414E5D62681F1D3FD1B84AE981FA9CEE2EC147C12BC89EE333AD3CD2618", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536228, "uuid": "0eb6df50-a15e-4c37-9d1d-f34964bdbad9", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J1V+uBNu:yYI0ARqw1qAEv7UIFM8oJorFquyjkRks", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769536228, "uuid": "57604659-0214-4b07-a371-8c93c6e6e81f", "value": 85232, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a29e50-7fd8-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1769536229, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536229, "uuid": "d9f06cb6-d101-4e3d-9a75-5ba3b3f895a1", "comment": "Malware payload (Hajime)", "value": "9b6c3518a91d23ed77504b5416bfb5b3", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536229, "uuid": "77ad6d0c-9e79-4458-a335-18deab0300c7", "comment": "Malware payload (Hajime)", "value": "a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536229, "uuid": "3aadf4c0-3fd0-471b-98ce-f809765bb5b5", "value": "6D7312E017B517CC1371A8353BED205E9128223972AE35302E97528DF957703BAB2DBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536229, "uuid": "3777e865-c1ec-4b70-8497-5d8fee47aaf0", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQAvcYkFtZTjzBht5:8D+CAXFYQChaAUk5ljnQssL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769536229, "uuid": "0ca14fd0-d212-4208-8bdf-4d76407083c0", "value": 80280, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0904a76a-fba9-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769536386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536386, "uuid": "66e64071-797d-49f2-9704-c9c290948882", "comment": "Malware payload", "value": "b102aeb5bf700c220b7a5886e0abcb2a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536386, "uuid": "d8fcc7d2-1d73-4bea-8066-3bd7dd0243fc", "comment": "Malware payload", "value": "b0fa0635160efdf12679b8bbe85efc9b499da225032d2ae656a0229439354309", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536386, "uuid": "ae5b7dac-2cf8-447a-b407-4b71b9603e78", "value": "T1E224D08CECB2C0F938A90D1B7ADBB561B996E973060D97FD1BD887220C40821BFD75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536386, "uuid": "bf4f2559-b5b5-4705-8c6f-e71a68180723", "value": "3072:rNQoCcLintpL9GkWsR6XDE1c7jqH4eUq2UlfirjkBFt16iNcMlFs69B9x:pQogtZ9DWsR4r7jqFB22irKPNcyNz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769536386, "uuid": "796ea5f7-e818-4849-aca2-a98cfb50152a", "value": 213067, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536386, "uuid": "19436727-3d44-43c5-bad0-1d211379fbf7", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09522235-fba9-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769536387, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536387, "uuid": "8e2cbb0e-3dea-45df-86fe-147dda324543", "comment": "Malware payload", "value": "c8792a6195c337cec787d981866d036c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536387, "uuid": "18a551dd-d4c8-4a1f-afee-2b67e5fb9f6a", "comment": "Malware payload", "value": "d8c9616c86f5829311fc34fa9e2a9cb244292a0a15df2520612d0f5a87a6a8ff", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536387, "uuid": "8992efec-d6d1-41be-916b-bd61a1542dc5", "value": "T1FC34BDBF4743E22D450D59DF58EE3348A5928EB902F0D2D949DBD26D8BA0F0B708BD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536387, "uuid": "a2a3e82e-699c-47b2-b9dd-41ed133f7dd2", "value": "3072:/Afb7PdaMOkFy9P3lnBlzY0wK8tD/zYUuH9mFWbmuqVvokOOQ0GGmGQGAjX+0Yvk:/6b7/HQdtXStD/zYDKJXPDQ0CGyi0Yvk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769536387, "uuid": "4712fa97-61ba-4674-a13d-670cd22204c8", "value": 239707, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536387, "uuid": "d054e02b-ab9d-4ea3-9ad1-068b773a1812", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09df9db1-fba9-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769536388, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536388, "uuid": "cd7c891c-bf09-4880-b346-ba1496871e23", "comment": "Malware payload", "value": "e78846ca8af755ec32bf3649046dfd87", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536388, "uuid": "a7c5f992-d8ee-4f07-b9f2-8d7c10a13908", "comment": "Malware payload", "value": "424eea9e5ae023061c96a0873806f892d0976258a5d1f0c178f4ada9f61a7e3e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536388, "uuid": "6092794c-0864-40c3-8e42-32e7d5be69d9", "value": "T18934F029057739F4AC9C8E56B8DA837144EF0CF21DE12A73C4683BE666A084CCDDC6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536388, "uuid": "ba76c8ea-994d-475d-9f1e-74336486aaef", "value": "6144:bgL/Mvepd4lBRvdzK65ZOFqFjjEjMEshNjZdy1V4mkWzg:bgLkvePiPlW669AZHVdy1pkh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769536388, "uuid": "ab4477b6-265b-4fa5-980e-ebea43b3d662", "value": 247892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536388, "uuid": "1e081937-c34a-43f8-bbba-00f112bcd122", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78385901-fba9-11f0-8b2a-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1769536573, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536573, "uuid": "8d2a925d-4ea9-469e-ae35-3ad98b2f6bb1", "comment": "Malware payload (RemcosRAT)", "value": "6a020622e9e8a8d9d604232474ab92fc", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536573, "uuid": "697ed9fe-a021-44f1-a570-7aee0f1e10c4", "comment": "Malware payload (RemcosRAT)", "value": "67be85e1d864a272c3ee117128c696d12e0528fe8d58a5a5749a7c157f525f08", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536573, "uuid": "20248f5d-aa93-4565-b7a3-4081c9347be3", "value": "T1C365F00917E58288F4B9DB30A2BB361547F0B51BC826EFAFA38411FD9C25799A5437", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536573, "uuid": "5ead8f5c-34e2-4803-86ab-705178c4228f", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536573, "uuid": "183f99c3-1ea1-4205-86ca-54f7f1eb925a", "value": "24576:McfMs1hsAdBen2pqpICnRveYepqMKDmfC4KOSSn2i6vKimsOD:McfTfeZRveYkqM3fC41p29KP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769536573, "uuid": "90c3fe41-d71a-4919-a404-585024455366", "value": 1475584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536573, "uuid": "91c32a39-be8d-453a-9555-cd2fe2ef547b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "328a2b29-fbaa-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769536885, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536885, "uuid": "e17dec5a-b2b0-444f-9e57-27cd2ca29247", "comment": "Malware payload", "value": "5845bc329545d433a23a2214d5519417", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536885, "uuid": "6c909441-f0b5-4719-b5b6-3751ac6dd87d", "comment": "Malware payload", "value": "3336e8cc01a4df187bd9a88bebbbdc6ef3da294952bc06c1e522fd69b185bcc1", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536885, "uuid": "fc4f669f-a2a2-4b5c-9204-457995bd60da", "value": "T14781A9AF006AEF33D54C5E7026AB34B3E8F0569215210908BFE760B754C9A00BB69E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536885, "uuid": "b9c6cbc8-7472-4757-9b61-f64d8a7b2472", "value": "48:YjBDcB8DVjbbcB8hdjvTcB8VnjBvcB8H3jh7cB8TDjXZcB8/7jXXcB8Rz:YjB5VjbbdjvnnjBd3jhRDjXT7jXfz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769536885, "uuid": "7026ff9a-bb76-4f8c-9f92-9dd03e3f0d87", "value": 3945, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536885, "uuid": "e0f8195e-df65-4126-8494-602f6448cbc7", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a19b9e2a-fbaa-11f0-8b2a-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1769537072, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769537072, "uuid": "d9db06ca-f7ce-43f1-a3a2-eed57e9bbf8b", "comment": "Malware payload (AsyncRAT)", "value": "31a70b06d091ce9670daad3f038afa5d", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769537072, "uuid": "35fb4a8c-4aca-4849-9a93-9973ff2fbba7", "comment": "Malware payload (AsyncRAT)", "value": "1e92c5d7ad812ca338b0e85bf1decfa613ecb31376cf21888d45f474a06921af", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769537072, "uuid": "84d8f9e4-cd0b-452e-bde6-6b8c4c7dee96", "value": "T12A05DF0813E88658F8BDAB34913736154BF0B40AD936EF9FA3C464BD1836B94D6977", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769537072, "uuid": "b8ed60f7-7f3a-414c-86fd-3446050c7897", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769537072, "uuid": "3858564f-1948-4ee3-813f-faa833ba74bd", "value": "12288:4goCnolCsoYdAA9mJadBeFZYBpqEC1xv0oi7QgYzclg8eGiMahkrwK:4lfMs1hsAdBen2pqpQwclgbtK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769537072, "uuid": "2b30d10c-626b-4d6d-97b0-d1944373b72b", "value": 860160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769537072, "uuid": "a10d24db-1392-4e92-b177-a782a59e17f9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1769537538, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769537538, "uuid": "73e24505-1a63-458c-bf63-c13b86db9a41", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769537538, "uuid": "df047ccb-3436-4747-b345-6d23cc5786f8", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769537538, "uuid": "b397355a-b56c-46c4-b8fd-8a4b8a563d89", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769537538, "uuid": "232b5069-ce5a-4f60-a6ec-9cc058a9592e", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769537538, "uuid": "26f80e69-199f-419b-a00e-f4a7f197d110", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e8ecb612-fbad-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769538480, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769538480, "uuid": "169313ab-64a9-431f-b115-6389f5b26b03", "comment": "Malware payload", "value": "bab0fd433be9c673ce0965b434dc21eb", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769538480, "uuid": "470dc06a-fa00-44fd-853d-9f99a3a0f6f5", "comment": "Malware payload", "value": "48b66a15b70f7b3b7f26ee10287d292c6c68ea3d4c540af550564d692f67a982", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769538480, "uuid": "0e2c6563-1723-4e89-9bd5-999972d1abc0", "value": "T1C8F5F173728BD47EF42E073648B7825848F76A2A95636C5A92F4949CCE311711E3FB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769538480, "uuid": "07b1b760-b862-4883-895b-01598cb0011e", "value": "40ab50289f7ef5fae60801f88d4541fc", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769538480, "uuid": "e22e22ba-0e01-47b1-912d-6db580505ff9", "value": "98304:Ur7QeWfKAbVPdDOTmdl5ogaZ8RJsJrPkVu1F2HOMDbpJ5PFg/:y7QeWfKAbVPdDOTmdl5ogaZAJsJPF612", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769538480, "uuid": "36e5f7ea-f663-49bb-a054-96aa0f6e0ac3", "value": 3335681, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769538480, "uuid": "635408d7-a702-4634-b215-1e87d40318cf", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fc10323-fbaf-11f0-8b2a-82aee05be84a", "comment": "Malware payload (a310Logger)", "timestamp": 1769539028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769539028, "uuid": "215678b5-a3ec-4304-a9fc-cb28e3ff1a20", "comment": "Malware payload (a310Logger)", "value": "818cf714ce4b8c7ac9a307676f3c9683", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769539028, "uuid": "8ff90b78-9c55-4105-b1e1-58c9ecc69512", "comment": "Malware payload (a310Logger)", "value": "c3c30fc030de442cede5c078e0ba3ff227c4c57c10c23c4d7dba78e1147f3428", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769539028, "uuid": "0aee4dd5-6b3e-4f1d-b2c6-030f4e69bd40", "value": "T1D355F1090BD58598F4B9DB34A37A361543F0B41BD836EFAF938421F88D36799A6433", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769539028, "uuid": "1b13816c-8d5c-436c-9483-f199319f0610", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769539028, "uuid": "017d5e55-36eb-4b46-a0e9-0e6b5c2c7f4a", "value": "24576:91gtfMs1hsAdBen2pqpXpojZ6tm48Ym1KObQz9pONC67S:AtfTfe/Oj94pYGS7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769539028, "uuid": "351f121d-eb55-411f-a786-7de82ed0648e", "value": 1404928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769539028, "uuid": "74b2d332-c677-4092-8c65-706da7533390", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5fe7b5f0-fbb1-11f0-8b2a-82aee05be84a", "comment": "Malware payload (QuasarRAT)", "timestamp": 1769539968, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769539968, "uuid": "9b7d0262-bec1-44e0-ace2-c7421a107b1f", "comment": "Malware payload (QuasarRAT)", "value": "fe10006b4d28c79e2d733e66bda06dfe", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769539968, "uuid": "1a0cd0f2-3708-4eec-ba31-a01d94fda780", "comment": "Malware payload (QuasarRAT)", "value": "4173909d6790cfde1cb60988ad573f014cf71b6bd7fe5ebc26a5284a429748c9", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769539968, "uuid": "4c818a7f-9fa0-47d9-b053-4d86f8647fee", "value": "T1AF46230933C6894CD62D9774443AAE4267F0B55BAE21DF5EB3C923AC1E1139AB7137", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769539968, "uuid": "b2acaad6-1dbe-4d85-82bb-e100d096fb40", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769539968, "uuid": "dc554931-4df4-452f-a8e3-323bec59fe93", "value": "49152:dCfTfeUkFAn/2Gnw6nxwXqiMOrENcitrFkPvhGR7thSoWYfy8jg78uoX5mQq32/u:YiQ/2a9Or4cW+PvkNDHmfQq32yeDGWJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769539968, "uuid": "e24f256b-fdc0-45c2-b5e8-71b345836033", "value": 5711872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769539968, "uuid": "74a5b9e7-4778-4add-88d6-fdb0057e2c9e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8437f3d5-fbc6-11f0-8b2a-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1769549048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769549048, "uuid": "accd9545-0575-422c-8646-261bf527124c", "comment": "Malware payload (AsyncRAT)", "value": "e82f218247b54e79b6cc97534ecf01ab", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769549048, "uuid": "b43dd4f1-9ea5-48d7-9fbc-671182cd7af7", "comment": "Malware payload (AsyncRAT)", "value": "c5bfd0abb2e443daf2b319726ee97aadc657aacde9f466228efe908e2193e9b3", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769549048, "uuid": "076051c1-746e-48d4-9ee4-bb2b0fdbd8af", "value": "T160D5E123B2CBE03EE45E0B3B0572E17494FBAE116522AD5696E48C9FFF250501E3E6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769549048, "uuid": "f4dce380-320a-43eb-9200-c20cffad1911", "value": "40ab50289f7ef5fae60801f88d4541fc", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769549048, "uuid": "b5e730b2-f7f0-4794-98c4-dba2aa2ec065", "value": "49152:1+MRdOHfqahTCvJgz8tLjuCTCY0sPoFJfZmgTxo+a7y5:1rQ8aiLyQ6LJRTam5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769549048, "uuid": "22f8f8ac-7c7c-40f9-b5cf-57462e7acac4", "value": 2906830, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769549048, "uuid": "6ba39439-fb38-4fee-bd28-75b57a24433e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ea1ab982-fbc7-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769549649, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769549649, "uuid": "0a582c8f-1304-4626-8a4b-72acb63dbfc4", "comment": "Malware payload (Mirai)", "value": "f3f4e27e5c6e04533ed541ec7bf17cb2", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769549649, "uuid": "026157b8-db0b-468e-ad5c-db699ac616d9", "comment": "Malware payload (Mirai)", "value": "0692a76931e852892ec5adfca812c2b52c42ec9ce0f92f6eae9f4b4ae7729992", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769549649, "uuid": "fb3c272c-ce9e-4883-a8b4-265c76afea95", "value": "T136D2E030584550B4D3A18833D76E88523B2703A9E2FA7D8A586A05627DCFB75633C7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769549649, "uuid": "8375e3d5-cc35-4340-a5c3-63500a31306c", "value": "768:peaRLnMZ9cgcxPkciObQWC+7azG8YPrzbMs3Uoz1:p9KJQkcislB8YPrzdz1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769549649, "uuid": "f41538ac-2eeb-464b-b4ff-baf4fc3644a1", "value": 29936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769549649, "uuid": "37759910-5522-4768-b011-328930dec595", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ea2eceb7-fbc7-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769549649, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769549649, "uuid": "2ba4653f-2981-43bf-a39a-81ed345c9dee", "comment": "Malware payload (Mirai)", "value": "dd40d690d6c5a73a10c53188840542f0", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769549649, "uuid": "27c869da-2f80-4b1a-9920-3a8f926bb21b", "comment": "Malware payload (Mirai)", "value": "52128016ac5c6464219bd02fc5a594c50fa3f0f1eb870d608f41c7088834276b", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769549649, "uuid": "57b62f9f-0be9-4698-ab58-66a148f6c654", "value": "T194F2E154F7A2E9E1C7710831897603C3EA594EFC959B30677D1907A4AEC5A0336FD9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769549649, "uuid": "cf68324d-753c-4b00-b2fa-e27fd5067871", "value": "768:e96r/HH0Ql+GqOe2Oha6yWD6OdpL2KbJeKnstEr9q3UELCB:w4PH0Ql3qOe2WJySdoKbJHnMLO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769549649, "uuid": "afaecdaf-fdef-4494-b4cb-ed2a743a86c6", "value": 34476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769549649, "uuid": "d7ea0a1d-7386-4472-9deb-fdca696ea5af", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ccb1782-fbc8-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769549707, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769549707, "uuid": "b8762f14-9986-47ff-8e82-94b15ce44898", "comment": "Malware payload (Mirai)", "value": "62bf0ffe89a39494d351121d06d5df14", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769549707, "uuid": "ffd81239-53ff-48fd-baf4-dbbd67adec1c", "comment": "Malware payload (Mirai)", "value": "3a5740542c0eb085195ea347f1ea2a6219a807073542ffbf553f51ac1c6efcd9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769549707, "uuid": "5d509b33-ff94-4df0-b581-5e3099c78082", "value": "T15CC2E1D8E15618D4CBBFAFF8ED60FAD233C28F67AAEDC98450A3DF501247545E50A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769549707, "uuid": "588f1a84-e118-4265-9209-0990e0e02da9", "value": "768:aLXZeDk1u1ip7bNhgufhzMqEt9l3kLdv4uVcqgw09G:mkr1g7JhvfhzMqC3kd4u+qgw09G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769549707, "uuid": "ad82eed7-db4b-4aa5-b891-7bb9a3070a2c", "value": 28248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769549707, "uuid": "49cef7a9-322d-4f01-be6e-fdcc4d587360", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4cc0b6bc-fba4-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769549831, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769549831, "uuid": "19b51149-94fa-4a94-8342-df8eac4faba9", "comment": "Malware payload", "value": "c13469185ebcd16c9beacf940362e250", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769549831, "uuid": "83cdb31d-a83a-4927-845c-34d253b338c6", "comment": "Malware payload", "value": "fc371b37133095cdb9d9e55d0a7aecdaf79ef96163f292c576399e8d270ac224", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769549831, "uuid": "c31df608-5012-4804-92e3-7ba1726c74e4", "value": "T12F31D72CA3B1F146E6A24675C27862079A031AAE9250E0993596380F6A977591CD7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769549831, "uuid": "f4830c37-6e75-4b0d-9330-8e00d9b514eb", "value": "48:99deRN/CgwEs/UQa4px+VgeZFfT6y+XRgwjP:/deRc1EdLFLNWRDjP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769549831, "uuid": "47c08e06-8503-4321-870a-58b1bc8cac36", "value": 1576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769549831, "uuid": "503fe3af-ce13-43fa-8c47-263571aef8e8", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769472610, "uuid": "8b432532-fb14-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8243889744/PVduvPo.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769473223, "uuid": "f8cca62c-fb15-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.167.149:57041/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769473577, "uuid": "cbbc3157-fb16-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.56.112:56285/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769473688, "uuid": "0df265bb-fb17-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.12.205.35:40587/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769474237, "uuid": "54e950ad-fb18-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.31.108:34989/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769474293, "uuid": "7696d180-fb18-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.100.171:38338/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769474405, "uuid": "b981bfb2-fb18-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/relight-73-unsigned/tk-hz-ctrl-70/4635461563546876", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769474414, "uuid": "bec038d0-fb18-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.167.149:57041/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769475486, "uuid": "3d5cf7cf-fb1b-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.12.205.35:40587/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769475616, "uuid": "8b2ee988-fb1b-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.157.244:52296/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769476154, "uuid": "cb91e128-fb1c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.31.159:37703/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769477414, "uuid": "baacd232-fb1f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.179.148.190:34276/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769477468, "uuid": "dac5006f-fb1f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.157.244:52296/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769477535, "uuid": "02ab0d25-fb20-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.52.172.245:56790/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769477947, "uuid": "f866b218-fb20-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.215.192:37531/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769477947, "uuid": "f87b1952-fb20-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.81.65:37596/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769477950, "uuid": "fa12c9be-fb20-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.232.20:56093/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769478314, "uuid": "d31ce109-fb21-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.89.219.53:36606/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769478913, "uuid": "3885ea06-fb23-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.199.20:40782/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769478972, "uuid": "5b587c6a-fb23-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.46.44:59556/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769479034, "uuid": "80243108-fb23-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.52.172.245:56790/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769479037, "uuid": "8235c1e9-fb23-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.176.244:50424/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769479214, "uuid": "ebb74297-fb23-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.179.148.190:34276/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769479455, "uuid": "7b152aad-fb24-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.170.246:15628/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769479872, "uuid": "73ce85e1-fb25-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.166.218:58083/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769480598, "uuid": "247087f8-fb27-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.232.20:56093/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769480832, "uuid": "b0576cb0-fb27-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.248.190:50692/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769481016, "uuid": "1d8b08ad-fb28-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.166.218:58083/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769481134, "uuid": "6457902d-fb28-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.120.114:33333/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769481436, "uuid": "1807af21-fb29-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.59.104:42804/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769481436, "uuid": "1809f763-fb29-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.223.218:41291/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769481493, "uuid": "3a281d73-fb29-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.170.246:15628/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769482269, "uuid": "08dda7c8-fb2b-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.59.104:42804/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769482817, "uuid": "4efe2157-fb2c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.248.190:50692/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769482821, "uuid": "51d7a708-fb2c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.2.58.106:46171/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769482873, "uuid": "7091efd3-fb2c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.127/bins/bot.arm7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769482874, "uuid": "713e72ab-fb2c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.29.145:52528/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769482874, "uuid": "7165be0a-fb2c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.222.42.38:35371/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769482875, "uuid": "71bbbc79-fb2c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.151.67.244:60727/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769482931, "uuid": "93779d16-fb2c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.49.144:38885/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769482932, "uuid": "9388e1e0-fb2c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.29.172:37706/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769482993, "uuid": "b8069e4a-fb2c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.101.19:33019/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769482993, "uuid": "b854f60b-fb2c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.173.155:8081/bot.mips", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769483007, "uuid": "c0bf7f84-fb2c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.189.172.8:60649/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769483054, "uuid": "dca7d180-fb2c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.60.211.201:56047/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769483528, "uuid": "f6bcecb2-fb2d-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.231.122:33072/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769483711, "uuid": "63eb9b36-fb2e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.34.161:48265/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769484133, "uuid": "5f9cf49b-fb2f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.57.127:33453/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769484667, "uuid": "9dfb2c57-fb30-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.246.163.25:38982/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769484914, "uuid": "312b2f6a-fb31-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.120.114:33333/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769485267, "uuid": "039e5a25-fb32-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.54.34:55590/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769485450, "uuid": "70eb7bf0-fb32-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.46.44:59556/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769485590, "uuid": "c403fa47-fb32-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.243.93.100:33659/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769486348, "uuid": "881a9648-fb34-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.246.163.25:38982/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769487493, "uuid": "328b72f9-fb37-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.243.93.100:33659/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769488094, "uuid": "9867d566-fb38-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.133.129:48307/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769488275, "uuid": "04b40164-fb39-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.188.99:59584/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769488326, "uuid": "23015129-fb39-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.226.229.227:49613/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769488391, "uuid": "49dad778-fb39-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.196.229:35479/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769488516, "uuid": "93db757f-fb39-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.148.214:43439/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769488992, "uuid": "affaa7d7-fb3a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.189.55:33830/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769488992, "uuid": "b0080734-fb3a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.133.129:48307/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769489108, "uuid": "f52cad04-fb3a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.210.97:35471/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769489586, "uuid": "1225110c-fb3c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.102.167:43611/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769489896, "uuid": "ca5d62e5-fb3c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.123.209:55872/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769489905, "uuid": "cff7b5fc-fb3c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.188.99:59584/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769490133, "uuid": "5808a715-fb3d-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.226.229.227:49613/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769490255, "uuid": "a0e66cfc-fb3d-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.67.73:59171/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769490375, "uuid": "e8273037-fb3d-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.148.214:43439/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769490494, "uuid": "2efef0ce-fb3e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.189.55:33830/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769490552, "uuid": "51762d42-fb3e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.210.97:35471/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769490855, "uuid": "0622867b-fb3f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.67.73:59171/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769491336, "uuid": "24bf6a56-fb40-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.102.167:43611/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769491688, "uuid": "f6ac3ec1-fb40-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.92.76:41088/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769492348, "uuid": "8026ec9f-fb42-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.244.189:54998/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769492896, "uuid": "c6c335fd-fb43-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.92.76:41088/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769492953, "uuid": "e8ef65c8-fb43-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.234.93:35511/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769493012, "uuid": "0bf31826-fb44-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.6.83:49088/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769493197, "uuid": "79ffcf48-fb44-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.167.185.153:38449/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769493555, "uuid": "4fc99cc2-fb45-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.128.163:35483/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769493670, "uuid": "94426f84-fb45-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.137.44:44325/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769493736, "uuid": "bbbe4982-fb45-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.234.93:35511/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769494569, "uuid": "abd9f95d-fb47-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.230.3:53913/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769494937, "uuid": "872dcdc6-fb48-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.6.83:49088/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769495048, "uuid": "c9414931-fb48-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.180.198.81:41962/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769495054, "uuid": "ccfa6c3b-fb48-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.5.36:33276/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769495107, "uuid": "ec937988-fb48-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://bashupload.com/Daerjg.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769495111, "uuid": "ef4b77db-fb48-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.167.185.153:38449/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769495114, "uuid": "f0c8d5ee-fb48-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://jehovahfireworks.com/lemalfillempa.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769495233, "uuid": "37ac8741-fb49-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.128.163:35483/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769495233, "uuid": "37dbb34c-fb49-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.6.186.184:60638/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769495234, "uuid": "383c1bfd-fb49-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.62.23:56719/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769495480, "uuid": "cb30370f-fb49-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.62.23:56719/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769495897, "uuid": "c35f1cd4-fb4a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.230.3:53913/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769496021, "uuid": "0d3f68ac-fb4b-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.69.236:37776/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769496268, "uuid": "a08dd100-fb4b-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.239.173.152:50929/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769496797, "uuid": "dbf44077-fb4c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.69.236:37776/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769497458, "uuid": "65f7ac1d-fb4e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.112.220:43953/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769497999, "uuid": "a88763ba-fb4f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.239.173.152:50929/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769498833, "uuid": "99966470-fb51-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.92.77:58900/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769498890, "uuid": "bb68898b-fb51-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.0.103:52846/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769499443, "uuid": "0548c310-fb53-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.202.7:49120/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769499614, "uuid": "6b452045-fb53-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.25.40:36866/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769500449, "uuid": "5ca0c604-fb55-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.92.77:58900/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769500636, "uuid": "cc1e8474-fb55-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.0.103:52846/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769500938, "uuid": "804c6de5-fb56-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.32.192:54988/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769501173, "uuid": "0c633de1-fb57-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.25.40:36866/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769501469, "uuid": "bcb85539-fb57-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.176.11:38395/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769501777, "uuid": "7437fd5b-fb58-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.169.161.169:42250/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769501952, "uuid": "dc9340b8-fb58-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.176.11:38395/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769502137, "uuid": "4ac1c9de-fb59-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.252.206:48487/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769502556, "uuid": "44accbc5-fb5a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.32.192:54988/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769502850, "uuid": "f3d3b6b3-fb5a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.3.89:50050/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769503039, "uuid": "64abf4fd-fb5b-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.184.117:47605/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769504121, "uuid": "e97eab81-fb5d-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.24.211:54814/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769504479, "uuid": "bebd595f-fb5e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.201.50:41814/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769504480, "uuid": "bf3c3b5a-fb5e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.3.89:50050/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769504486, "uuid": "c2f76b48-fb5e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.96.168:56407/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769504486, "uuid": "c33815e2-fb5e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.165.154:38239/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769504487, "uuid": "c3483698-fb5e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.143.199:37273/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769504487, "uuid": "c36bc528-fb5e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.252.79:49993/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769504543, "uuid": "e4b4df6d-fb5e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.142.157:50488/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769504598, "uuid": "058a91b6-fb5f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.144.198:45169/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769504598, "uuid": "058f54d3-fb5f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.125.172:48928/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769504598, "uuid": "05994c77-fb5f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.5.36:33276/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769504599, "uuid": "0613d459-fb5f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.83.239:41590/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769504612, "uuid": "0e170c8a-fb5f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.168.162.121:49584/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769504659, "uuid": "2a297379-fb5f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.152.236:43771/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769504964, "uuid": "df9a05ee-fb5f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.73.94:58141/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769506041, "uuid": "61ccd266-fb62-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.252.79:49993/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769506453, "uuid": "5727750e-fb63-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.60.173:35219/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769506638, "uuid": "c570bf68-fb63-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.73.94:58141/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769507112, "uuid": "e053eb76-fb64-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.75.214:57020/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769507468, "uuid": "b485e597-fb65-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.24.211:54814/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769508199, "uuid": "681023bd-fb67-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.101.219:41640/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769508440, "uuid": "f7fbab51-fb67-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.31.174:59385/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769508499, "uuid": "1b1e1292-fb68-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.63.96:45424/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769509453, "uuid": "53776687-fb6a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.121.87.41:53913/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769509454, "uuid": "541292d2-fb6a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.188.145:38636/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769509578, "uuid": "9e3532eb-fb6a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.6.47:54569/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769509757, "uuid": "0900e22d-fb6b-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.31.174:59385/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769509811, "uuid": "28f98fe2-fb6b-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.75.214:57020/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769511258, "uuid": "87670d2c-fb6e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.6.47:54569/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769511258, "uuid": "8767af4b-fb6e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.121.87.41:53913/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769511920, "uuid": "11cf5f96-fb70-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.228.93:40007/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769511966, "uuid": "2d29c373-fb70-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/grading-chatter-dock73/file-4-share/ver1", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769512391, "uuid": "2a8cdfa0-fb71-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.72.183:52461/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769512629, "uuid": "b8b01d39-fb71-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.183.251:40007/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769513059, "uuid": "b913abef-fb72-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.228.93:40007/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769513480, "uuid": "b3dff6f2-fb73-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.56.112:56285/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769514801, "uuid": "c6eaf47a-fb76-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.160.44:49437/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769515042, "uuid": "56b74bee-fb77-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.183.251:40007/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769515174, "uuid": "a5a94662-fb77-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.54.109.180:52546/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769515456, "uuid": "4d4cd3ac-fb78-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.214.56.173:39322/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769515943, "uuid": "6fc56ea9-fb79-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.152.35.196:38601/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769515985, "uuid": "88cbb114-fb79-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.90/web/rod.ps1", "Tag": [ { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "windows", "colour": "#f0f187", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769515987, "uuid": "89ecf211-fb79-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.90/web/STEINEW.ps1", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "NLD", "colour": "#42882D", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769515990, "uuid": "8bc6f7c2-fb79-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7665230745/PWhwmLT.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769516301, "uuid": "4527b88c-fb7a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.152.236:43771/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769516365, "uuid": "6b1df4d7-fb7a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.191.138:39862/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769516530, "uuid": "cda3dc01-fb7a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/5100472172/zObglZq.msi", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769516707, "uuid": "37737f41-fb7b-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://51.15.203.72/IMG/distant/csl/x.rar", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769516710, "uuid": "392ff95d-fb7b-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://51.15.203.72/IMG/distant/csl/cc.txt", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769516710, "uuid": "393e7cc1-fb7b-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://accrochezvous.fr/plugins-dist/safehtml/images/x.rar", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769516724, "uuid": "413ac1a9-fb7b-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://accrochezvous.fr/plugins-dist/safehtml/images/cb.txt", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769516827, "uuid": "7ecfd02e-fb7b-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://accrochezvous.fr/plugins-dist/safehtml/images/1.0.5.tar.gz", "Tag": [ { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "tar", "colour": "#fb5a2e", "exportable": true, "hide_tag": false }, { "name": "tgz", "colour": "#bfd520", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769516829, "uuid": "800de603-fb7b-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://accrochezvous.fr/plugins-dist/safehtml/images2/pnscan-1.14.1.tar.gz", "Tag": [ { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "tar", "colour": "#fb5a2e", "exportable": true, "hide_tag": false }, { "name": "tgz", "colour": "#bfd520", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769516830, "uuid": "80508e8c-fb7b-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://accrochezvous.fr/plugins-dist/safehtml/images/pnscan-1.14.1.tar.gz", "Tag": [ { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "tar", "colour": "#fb5a2e", "exportable": true, "hide_tag": false }, { "name": "tgz", "colour": "#bfd520", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769516832, "uuid": "81ce0467-fb7b-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://accrochezvous.fr/plugins-dist/safehtml/images/cr.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769517019, "uuid": "f16c3843-fb7b-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.214.56.173:39322/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769517081, "uuid": "15e39e16-fb7c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://51.15.203.72/IMG/distant/csl/cr.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769517186, "uuid": "54e458fc-fb7c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://51.15.203.72/IMG/distant/csl/pnscan-1.14.1.tar.gz", "Tag": [ { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "tar", "colour": "#fb5a2e", "exportable": true, "hide_tag": false }, { "name": "tgz", "colour": "#bfd520", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769517187, "uuid": "5512fc96-fb7c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://51.15.203.72/IMG/distant/csl/1.0.5.tar.gz", "Tag": [ { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "tar", "colour": "#fb5a2e", "exportable": true, "hide_tag": false }, { "name": "tgz", "colour": "#bfd520", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769517366, "uuid": "bfed6fb5-fb7c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/grading-chatter-dock73/file-4-share/sand", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769517605, "uuid": "4ec3591a-fb7d-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8079234796/87BwvaQ.msi", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769517619, "uuid": "56fd6178-fb7d-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.163.24:49034/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769517667, "uuid": "736d89e9-fb7d-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8079234796/87BwvaQ.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769517810, "uuid": "c889a8ba-fb7d-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.191.138:39862/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769517850, "uuid": "e064537f-fb7d-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/grading-chatter-dock73/crispy-directory/boost", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769517980, "uuid": "2de930db-fb7e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.214.110:50583/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769518161, "uuid": "99f1b018-fb7e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.12.93:48634/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769518278, "uuid": "dfb36859-fb7e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.191.205:42398/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769518464, "uuid": "4e3c63e4-fb7f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.152.35.196:38601/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769518703, "uuid": "dd31305c-fb7f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.98.232.129:38974/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769518990, "uuid": "87c9358a-fb80-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/relight-73-unsigned/tk-hz-ctrl/22-api-cloud", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769518995, "uuid": "8b3298c8-fb80-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.97.128:40497/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769518996, "uuid": "8b7e97f8-fb80-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.179.37:33367/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769519357, "uuid": "62e8cb62-fb81-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.118.160:37082/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769519594, "uuid": "f03bb8c3-fb81-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.252.176:38538/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769519595, "uuid": "f0d6845a-fb81-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.4.8:49976/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769519897, "uuid": "a47a9b9d-fb82-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.133.12:46408/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769519902, "uuid": "a7a06b89-fb82-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.236.159:46986/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769520067, "uuid": "09d908bc-fb83-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.191.205:42398/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769520196, "uuid": "56e8ce39-fb83-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.12.93:48634/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769520501, "uuid": "0c7ffe58-fb84-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.116.249:49666/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769520737, "uuid": "992b4362-fb84-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.98.190:38324/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769520799, "uuid": "bdf9f806-fb84-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.98.232.129:38974/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769520919, "uuid": "05dbc91d-fb85-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.54.34:55590/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769521036, "uuid": "4bcc4d00-fb85-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.97.128:40497/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769521095, "uuid": "6e833bd8-fb85-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.244.193:53381/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769521696, "uuid": "d529cf52-fb86-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.13.121:40702/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769521755, "uuid": "f80db6a6-fb86-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.4.8:49976/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769521819, "uuid": "1e7b0583-fb87-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.136.33.51:41601/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769521927, "uuid": "5eafc268-fb87-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.116.249:49666/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769522832, "uuid": "79be2964-fb89-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.244.193:53381/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769523010, "uuid": "e4465989-fb89-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/6281589603/Q0BtI5D.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769523318, "uuid": "9b82f11c-fb8a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.119.110:44414/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769523372, "uuid": "bbb1e972-fb8a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.98.190:38324/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769523384, "uuid": "c358d0df-fb8a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.25.199:44175/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769523431, "uuid": "df15d0b3-fb8a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.13.121:40702/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769523612, "uuid": "4b161cb5-fb8b-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.132.83:56969/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769524218, "uuid": "b43df5e1-fb8c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.99.104:49407/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769524218, "uuid": "b44aa463-fb8c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.221.4:37637/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769524395, "uuid": "1ddc7700-fb8d-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.119.110:44414/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769524641, "uuid": "b00ce08c-fb8d-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.18.113:54623/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769526076, "uuid": "078de7c7-fb91-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.72.16:43733/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769526076, "uuid": "07a3619d-fb91-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.231.122:33072/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769526077, "uuid": "07f84a8f-fb91-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.73.233:35073/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769526077, "uuid": "0803c4dc-fb91-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.18.113:54623/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769526077, "uuid": "087c81e4-fb91-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.39.202:49438/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769526089, "uuid": "0f8c960c-fb91-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.54.109.180:52546/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769526136, "uuid": "2b6f4957-fb91-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.148.17:58568/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769526143, "uuid": "2f7d4236-fb91-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.42.90.50:56735/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769526246, "uuid": "6cef3751-fb91-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.116.217:42888/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769526258, "uuid": "7405c2b3-fb91-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.126.203:40285/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769526258, "uuid": "7408350e-fb91-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.94.112:36843/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769526259, "uuid": "74762840-fb91-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.231.249:47722/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769526259, "uuid": "747e1e7e-fb91-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.38.176:34637/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769526259, "uuid": "7482b13c-fb91-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.38.176:34637/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769526318, "uuid": "97f8ceac-fb91-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.52.211:47039/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769526378, "uuid": "bbe14460-fb91-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.84.209:46162/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769526427, "uuid": "d910bafc-fb91-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://modaaura.store/image.jpg", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769526861, "uuid": "dba09402-fb92-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.73.68:58803/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769526979, "uuid": "219f903f-fb93-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.141.17:40324/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769527292, "uuid": "dc60695e-fb93-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.20.138:60301/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769527459, "uuid": "4038550e-fb94-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.221.4:37637/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769527883, "uuid": "3c6440c9-fb95-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.73.68:58803/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769528466, "uuid": "984387c4-fb96-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7719064868/WZKjrdW.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769528530, "uuid": "be06351b-fb96-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.84.209:46162/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769528768, "uuid": "4be33fe0-fb97-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.149.92:60315/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769529492, "uuid": "fbea4d52-fb98-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.59.148:40367/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769529679, "uuid": "6b34c012-fb99-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.141.17:40324/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769530336, "uuid": "f2b9f46c-fb9a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.237.179:46168/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769530524, "uuid": "62ee69b4-fb9b-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.60.149:60403/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769531058, "uuid": "a10dde20-fb9c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.149.92:60315/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769531252, "uuid": "1497e4b9-fb9d-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.48.119:51590/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769532197, "uuid": "483b8f6b-fb9f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.60.149:60403/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769532311, "uuid": "8bdf6edf-fb9f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.170.187:47507/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769532376, "uuid": "b2aca8f5-fb9f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.237.179:46168/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769532610, "uuid": "3e29a2b2-fba0-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://blackmore.twilightparadox.com/IriozbDZ/image.jpg", "Tag": [ { "name": "3ffae72147348ef591eb32443902cb86", "colour": "#7043c8", "exportable": true, "hide_tag": false }, { "name": "jpg-base64-loader", "colour": "#93d451", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "XenoStealer", "colour": "#f641e8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769532610, "uuid": "3e74d7f5-fba0-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://mine.repeatcar.com/AP/ddcFrgk.txt", "Tag": [ { "name": "3ffae72147348ef591eb32443902cb86", "colour": "#7043c8", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "XenoStealer", "colour": "#f641e8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769532846, "uuid": "cac7e9cd-fba0-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.usercontent.google.com/download?id=1la8rTYSg98otfXPdFKXmW6C2dZfQffBo&export=download", "Tag": [ { "name": "C2:198.23.177.196:2404", "colour": "#bece4e", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769533698, "uuid": "c6ab7474-fba2-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.33.59:38370/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769535319, "uuid": "8cbdb8ed-fba6-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.100.100:57212/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769535322, "uuid": "8eae23f4-fba6-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.28.63.30:41469/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769535456, "uuid": "de587027-fba6-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.28.63.30:41469/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769535861, "uuid": "cff631d0-fba7-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.252:45893/hoof/aisuru.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769535966, "uuid": "0e84368a-fba8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.177.94.215/root1", "Tag": [ { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769535966, "uuid": "0e9692e8-fba8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.177.94.215/hur2", "Tag": [ { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769535967, "uuid": "0f57e7ab-fba8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.177.94.215/filecheck", "Tag": [ { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536211, "uuid": "a0b48b25-fba8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.209.206.82:86/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536225, "uuid": "a9160b9c-fba8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.50.131.50:9301/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536228, "uuid": "aaba9e3b-fba8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.80.155.167/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536228, "uuid": "aae8e6cc-fba8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://197.89.38.131:8034/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536229, "uuid": "ab17f17c-fba8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.14.116:2323/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536230, "uuid": "ab9f1baf-fba8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.113.44.29:33348/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536230, "uuid": "abad9cda-fba8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.146.1.206:8084/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536230, "uuid": "abc11ae2-fba8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.235.220.96/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536230, "uuid": "abe5dd2d-fba8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.185.208.178:65345/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536231, "uuid": "ac61bc1a-fba8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.200.14.44:8080/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536231, "uuid": "ac9dd86b-fba8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.157.33.32:85/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536232, "uuid": "acded2dd-fba8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.252:45893/hoof/cat.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536232, "uuid": "ad0352ec-fba8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.252:45893/hoof/cat.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536236, "uuid": "af67b100-fba8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.252:45893/hoof/cat.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536236, "uuid": "afa909dd-fba8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.204.235:20546/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536237, "uuid": "b020278b-fba8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.252:45893/hoof/cat.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536237, "uuid": "b03713e2-fba8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.252:45893/hoof/cat.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536238, "uuid": "b061a9be-fba8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.252:45893/hoof/cat.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536238, "uuid": "b0e321e7-fba8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.252:45893/hoof/cat.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536279, "uuid": "c8f30ce1-fba8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.162.75:53983/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536281, "uuid": "ca6ba4d2-fba8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.28.180.30:26257/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536385, "uuid": "082e0071-fba9-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.178.57.244:1980/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536387, "uuid": "093abe24-fba9-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://8.133.18.61:7000/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536387, "uuid": "099a32e8-fba9-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.55.75.154/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536387, "uuid": "09acd8aa-fba9-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.204.27.39/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769536388, "uuid": "09e6de46-fba9-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.92.243.40:8080/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769537561, "uuid": "c51310e3-fbab-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.12.9:51272/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769537660, "uuid": "00473a3f-fbac-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.81.131:41310/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769538140, "uuid": "1e0d3d05-fbad-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.154.98.177/bins/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769538140, "uuid": "1e2e31b5-fbad-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.154.98.177/bins/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769538147, "uuid": "22327d79-fbad-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.154.98.177/bins/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769538153, "uuid": "25e4f7b1-fbad-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.154.98.177/bins/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769538156, "uuid": "27c99e98-fbad-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.154.98.177/bins/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769538156, "uuid": "281dd009-fbad-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.154.98.177/bins/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769538162, "uuid": "2bab0c23-fbad-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.154.98.177/bins/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769538202, "uuid": "42fb0985-fbad-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.154.98.177/bins/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769538798, "uuid": "a677df83-fbae-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.12.9:51272/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769538876, "uuid": "d53e40cb-fbae-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.81.131:41310/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769539283, "uuid": "c7b610ab-fbaf-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.148.17:58568/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769539356, "uuid": "f314e427-fbaf-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.192.226.109:47450/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769539459, "uuid": "3056bc0e-fbb0-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.1.234:40874/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769539647, "uuid": "a0a5e4d6-fbb0-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.79.11:50279/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769540951, "uuid": "a9d540c0-fbb3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.228.189.190:60347/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769541102, "uuid": "03bf613b-fbb4-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.83.156:52279/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769541128, "uuid": "130262fa-fbb4-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.66.145:39432/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769541374, "uuid": "a5bd820c-fbb4-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.4.43:44274/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769541495, "uuid": "eddc1c46-fbb4-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.56.220:58540/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769541797, "uuid": "a23672f1-fbb5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.2.172:48241/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769541923, "uuid": "ecf9cd62-fbb5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.254.225:49438/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769541979, "uuid": "0e7654ec-fbb6-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.139.72:37742/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769542352, "uuid": "ed28c165-fbb6-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.228.189.190:60347/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769542393, "uuid": "05192595-fbb7-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.66.145:39432/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769542519, "uuid": "509b8e66-fbb7-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.198.178.139:43539/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769542703, "uuid": "be3e517e-fbb7-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.4.43:44274/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769542939, "uuid": "4a91e1ad-fbb8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.56.220:58540/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769543346, "uuid": "3d529f46-fbb9-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.83.156:52279/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769543595, "uuid": "d1f7259f-fbb9-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.194.22.35:33821/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769543649, "uuid": "f1dd2ccc-fbb9-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.254.225:49438/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769544080, "uuid": "f2c1b324-fbba-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.220.201:60304/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769544196, "uuid": "3801f6db-fbbb-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.63.96:45424/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769545096, "uuid": "50a19a0f-fbbd-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.2.172:48241/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769545271, "uuid": "b8c628c3-fbbd-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.131.4:39679/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769545577, "uuid": "6edc71cd-fbbe-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.220.201:60304/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769545632, "uuid": "900348cf-fbbe-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.204.233:51785/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769546354, "uuid": "3e03d247-fbc0-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.102.151:37706/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769546944, "uuid": "9dab2b86-fbc1-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.173/load/loader.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769547252, "uuid": "55ac8314-fbc2-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.131.4:39679/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769547374, "uuid": "9e22a9bd-fbc2-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.218/avx", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769547677, "uuid": "52967546-fbc3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.59.148:40367/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769547677, "uuid": "52b1e97e-fbc3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.6.186.184:60638/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769547677, "uuid": "5305adb5-fbc3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.118.36:60197/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769547677, "uuid": "53183a4a-fbc3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.235.22:46565/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769547677, "uuid": "531a6867-fbc3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.221.63:47790/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769547678, "uuid": "532c532e-fbc3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.255.83.71:48045/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769547678, "uuid": "53347876-fbc3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.46.199.43:48711/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769547678, "uuid": "539c6779-fbc3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.251.6:53454/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769547734, "uuid": "74b0bdbd-fbc3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.243.109.236/skid.x86", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769547735, "uuid": "755ed34d-fbc3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.28.253:49854/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769547735, "uuid": "7574f8a0-fbc3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.122.204:56515/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769547735, "uuid": "75a6c50b-fbc3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.128.43:49282/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769547738, "uuid": "76ebe41a-fbc3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.164.192.128:38327/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769547738, "uuid": "774bf0fc-fbc3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.222.207:34323/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769547739, "uuid": "780fcf48-fbc3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.244.38:35706/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769547748, "uuid": "7cdbb662-fbc3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.74.148:36206/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769547788, "uuid": "94e281d8-fbc3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://homencck.com/3s5a.js", "Tag": [ { "name": "KongTuke", "colour": "#A5AEAB", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769547966, "uuid": "ff58a787-fbc3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.212.45.5/iran.x86_64", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769547968, "uuid": "00542d1c-fbc4-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.198.56:40514/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769548337, "uuid": "dc56eea6-fbc4-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.142.157:50488/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769548642, "uuid": "91bd6687-fbc5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.235.1:38270/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769549048, "uuid": "8441235d-fbc6-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.93.20.55/Public-key_73.18.9_INSTALL.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769549355, "uuid": "3b224488-fbc7-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.29.219:48128/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769549586, "uuid": "c4e051ed-fbc7-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.215.26:90/xd.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769549586, "uuid": "c4f218a7-fbc7-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.215.26:90/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769549649, "uuid": "ea20dc8e-fbc7-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.215.26:90/xd.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769549649, "uuid": "ea21dd13-fbc7-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.215.26:90/xd.arm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769549649, "uuid": "ea236282-fbc7-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.215.26:90/xd.arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769549649, "uuid": "ea26bdab-fbc7-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.215.26:90/xd.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769549649, "uuid": "ea2a07a2-fbc7-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.215.26:90/xd.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769549649, "uuid": "ea2c1de5-fbc7-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.215.26:90/xd.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769549649, "uuid": "ea2d0c14-fbc7-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.215.26:90/xd.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769549649, "uuid": "ea31cfb9-fbc7-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.215.26:90/xd.arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769549649, "uuid": "ea3562d4-fbc7-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.215.26:90/xd.arm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769549707, "uuid": "0cd5eec8-fbc8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.215.26:90/xd.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769549715, "uuid": "1153e1d4-fbc8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.194.22.35:33821/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769550019, "uuid": "c69095f2-fbc8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.50.217:33418/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769550308, "uuid": "72eb52a3-fbc9-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.167.169.144:44981/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769550495, "uuid": "e2b4c7a2-fbc9-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.231.36:49942/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769550909, "uuid": "d95c0478-fbca-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.164.192.128:38327/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769550917, "uuid": "ddff022f-fbca-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.87.229:43810/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769551387, "uuid": "f65cf06b-fbcb-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.50.217:33418/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769551576, "uuid": "66d7ad06-fbcc-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.187.225:37375/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769551697, "uuid": "af33c13a-fbcc-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.90.59:48112/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769551698, "uuid": "afacce65-fbcc-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.114.167:37666/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769551876, "uuid": "1998cb37-fbcd-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.222.42.38:35371/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769552176, "uuid": "cc29e1ed-fbcd-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.231.36:49942/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769552525, "uuid": "9c3af7ad-fbce-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.83/bins/o.xml", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "xml", "colour": "#75ec5b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769552525, "uuid": "9c79ff19-fbce-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.83/bins/nx86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769552591, "uuid": "c3d60011-fbce-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.90.59:48112/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769553009, "uuid": "bd2a3e9c-fbcf-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.118.157:57331/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769553255, "uuid": "4f4c6da2-fbd0-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.72.17:52693/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769553321, "uuid": "76f8d854-fbd0-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.114.167:37666/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769553321, "uuid": "76fadb1f-fbd0-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.72.16:43733/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769554522, "uuid": "42cc431e-fbd3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.72.17:52693/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769554939, "uuid": "3b0fa779-fbd4-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.194.226:57084/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769555058, "uuid": "827bf4ea-fbd4-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.214.23:42531/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769555966, "uuid": "9f67d25a-fbd6-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.194.226:57084/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769556967, "uuid": "f3ce9264-fbd8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.215.26:112/xd.arm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769556967, "uuid": "f3cf204e-fbd8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.215.26:112/xd.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769556967, "uuid": "f3d1d839-fbd8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.215.26:112/xd.arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769556967, "uuid": "f3da84c7-fbd8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.215.26:112/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769556967, "uuid": "f3dae777-fbd8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.215.26:112/xd.arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769556967, "uuid": "f3db8b94-fbd8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.215.26:112/xd.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769556967, "uuid": "f3db9989-fbd8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.215.26:112/xd.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769556967, "uuid": "f3dbb299-fbd8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.215.26:112/xd.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769556967, "uuid": "f3dbbd83-fbd8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.215.26:112/xd.arm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769556967, "uuid": "f3dbea86-fbd8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.215.26:112/nx86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769556967, "uuid": "f3dcb92d-fbd8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.215.26:112/nx86_64.1", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769556967, "uuid": "f3ddc66f-fbd8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.215.26:112/xd.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769556967, "uuid": "f3de0157-fbd8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.215.26:112/xd.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769556967, "uuid": "f3de1bbb-fbd8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.215.26:112/xd.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769556986, "uuid": "ff5c91b2-fbd8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.234.150:51202/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769557325, "uuid": "c96fb058-fbd9-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/relight-73-unsigned/tk-hz-ctrl/x8ippjozsethnmp6q9rvwq", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769557523, "uuid": "3f5cb714-fbda-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.128.121:38102/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769557577, "uuid": "5fc63d25-fbda-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.214.23:42531/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769557705, "uuid": "ac136fc8-fbda-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.70.215:51469/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769558122, "uuid": "a484d24c-fbdb-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.32.185:40804/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769558302, "uuid": "0fdaaaed-fbdc-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.168.162.121:49584/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536384, "uuid": "078468a0-fba9-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.178.57.244", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769489584, "uuid": "10ca43a4-fb3c-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.102.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769520485, "uuid": "02fb35ba-fb84-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.116.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769547664, "uuid": "4afea58c-fbc3-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.118.36", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769524625, "uuid": "a67e5602-fb8d-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.18.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769508425, "uuid": "ee90bb70-fb67-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.31.174", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769500924, "uuid": "78013e2e-fb56-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.32.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769533684, "uuid": "be481460-fba2-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.33.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769526245, "uuid": "6c541412-fb91-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.38.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769529484, "uuid": "f6e07134-fb98-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.59.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769557685, "uuid": "9fc19923-fbda-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.70.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769504465, "uuid": "b629fbad-fb5e-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.96.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769556965, "uuid": "f2a53bfe-fbd8-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.39.234.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769485564, "uuid": "b4ae902e-fb32-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.243.93.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769537524, "uuid": "af4acefb-fbab-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.12.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769520725, "uuid": "92218402-fb84-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.236.98.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769482984, "uuid": "b2a9cecd-fb2c-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.237.101.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536265, "uuid": "c0793034-fba8-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.237.162.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769507106, "uuid": "dc80d14c-fb64-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.238.75.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769540944, "uuid": "a5a43c0e-fbb3-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.228.189.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769496245, "uuid": "92d12450-fb4b-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.239.173.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769483705, "uuid": "606a9dea-fb2e-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.34.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769499605, "uuid": "65f2c645-fb53-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.25.40", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769493006, "uuid": "082f5b97-fb44-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.6.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769475605, "uuid": "84bc35d0-fb1b-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.157.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769503025, "uuid": "5c5c8000-fb5b-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.184.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769530505, "uuid": "57ad5561-fb9b-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.59.60.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769483044, "uuid": "d68279a0-fb2c-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.60.211.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769541364, "uuid": "a036ad57-fbb4-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.61.4.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769523606, "uuid": "4775dc47-fb8b-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.132.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769499424, "uuid": "f9fc6fa2-fb52-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.139.202.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769482806, "uuid": "4875cce8-fb2c-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.2.58.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473206, "uuid": "eee9f8c1-fb15-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.167.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536206, "uuid": "9d7a49c4-fba8-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.204.235", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769497444, "uuid": "5de0a2c3-fb4e-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.112.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769477944, "uuid": "f690c2b4-fb20-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.244.232.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769518985, "uuid": "84f00563-fb80-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.115.179.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769530324, "uuid": "eb7ddf39-fb9a-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.179.237.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769482984, "uuid": "b2a9e7af-fb2c-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.189.172.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536206, "uuid": "9d79b199-fba8-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.157.33.32", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536384, "uuid": "0784952b-fba9-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.55.75.154", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769557506, "uuid": "35403cb6-fbda-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.128.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769504465, "uuid": "b62a231c-fb5e-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.13.165.154", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769547723, "uuid": "6e86431b-fbc3-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.244.38", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769526065, "uuid": "00fd3cb9-fb91-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.39.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769547723, "uuid": "6e85cd77-fbc3-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.188.74.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769541064, "uuid": "ed2cdb31-fbb3-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.188.83.156", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536206, "uuid": "9d83381c-fba8-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.209.206.82", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769493545, "uuid": "49634162-fb45-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.128.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769483525, "uuid": "f50948f3-fb2d-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.231.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769541905, "uuid": "e2b4d566-fbb5-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.254.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769558106, "uuid": "9ace5702-fbdb-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.42.32.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769526844, "uuid": "d13ae4a2-fb92-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.73.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769504465, "uuid": "b62c2a3f-fb5e-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.252.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769547664, "uuid": "4afe58e2-fbc3-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.46.199.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473565, "uuid": "c4ac527d-fb16-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.56.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536384, "uuid": "07847007-fba9-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "129.204.27.39", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769549584, "uuid": "c3709c5b-fbc7-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "144.31.215.26", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769547723, "uuid": "6e85db9a-fbc3-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "151.243.109.236", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536206, "uuid": "9d81ebac-fba8-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "171.235.220.96", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769482864, "uuid": "6afd9318-fb2c-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.151.67.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769547723, "uuid": "6e861544-fbc3-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.164.192.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769493184, "uuid": "72a725a3-fb44-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.167.185.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769501764, "uuid": "6c757505-fb58-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.169.161.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536206, "uuid": "9d7e3659-fba8-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.50.131.50", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536206, "uuid": "9d81e812-fba8-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "181.200.14.44", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769547664, "uuid": "4afe1ffd-fbc3-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.221.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769547723, "uuid": "6e85f678-fbc3-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.28.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769479445, "uuid": "75211e54-fb24-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.170.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769550005, "uuid": "be379329-fbc8-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.50.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769496005, "uuid": "042001d9-fb4b-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.69.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769541784, "uuid": "9a7fa989-fbb5-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.2.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769508484, "uuid": "123285b2-fb68-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.63.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769480824, "uuid": "ab71faff-fb27-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.248.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769504524, "uuid": "d9d8f828-fb5e-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.123.142.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769551685, "uuid": "a78dbd5b-fbcc-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.114.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769547723, "uuid": "6e8632df-fbc3-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.128.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536265, "uuid": "c0792027-fba8-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "189.28.180.30", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769515924, "uuid": "64c06932-fb79-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.152.35.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769535964, "uuid": "0d63d759-fba8-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "195.177.94.215", "Tag": [ { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536206, "uuid": "9d7c64c4-fba8-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "197.89.38.131", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769489105, "uuid": "f362c54b-fb3a-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.210.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769504585, "uuid": "fdc017cd-fb5e-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.83.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769504644, "uuid": "21192619-fb5f-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.152.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769485264, "uuid": "01c96069-fb32-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.54.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769519584, "uuid": "ea2fa7ef-fb81-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.4.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769521805, "uuid": "15ea2529-fb87-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.136.33.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769546343, "uuid": "37ed77e7-fbc0-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.102.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769504105, "uuid": "dffb09d0-fb5d-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.24.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769479024, "uuid": "7aa0fd83-fb23-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.176.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769521684, "uuid": "cde9f49f-fb86-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.13.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769545624, "uuid": "8b07ac65-fbbe-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.204.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769543585, "uuid": "cb96484b-fbb9-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.194.22.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769481123, "uuid": "5db7c14a-fb28-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.120.114", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769547723, "uuid": "6e86577f-fbc3-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.122.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769482864, "uuid": "6afd9578-fb2c-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.222.42.38", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769523365, "uuid": "b78bc13c-fb8a-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.25.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769477944, "uuid": "f690aa54-fb20-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.81.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769550906, "uuid": "d7ac9b91-fbca-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.87.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769477525, "uuid": "fcad17a9-fb1f-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.52.172.245", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769488505, "uuid": "8d8d6afe-fb39-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.90.148.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536206, "uuid": "9d78b517-fba8-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "41.146.1.206", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769537645, "uuid": "f7175c72-fbab-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.178.81.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769477406, "uuid": "b5cf2acb-fb1f-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.179.148.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769495045, "uuid": "c7d3cab0-fb48-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.180.198.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769526965, "uuid": "1988759a-fb93-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.141.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769531225, "uuid": "047d9bce-fb9d-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.48.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769504465, "uuid": "b62a491a-fb5e-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.233.143.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769504944, "uuid": "d42e4984-fb5f-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.73.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769528764, "uuid": "49f5ee08-fb97-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.149.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769490245, "uuid": "9a6b26cd-fb3d-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.67.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769532305, "uuid": "88981364-fb9f-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.170.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769509444, "uuid": "4e1c167b-fb6a-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.188.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769515144, "uuid": "93ad2e3d-fb77-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.54.109.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769495225, "uuid": "32c66167-fb49-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.55.62.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769495225, "uuid": "32c684b8-fb49-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.6.186.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769545264, "uuid": "b476af87-fbbd-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.7.131.4", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769512624, "uuid": "b5c71467-fb71-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.85.183.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769535844, "uuid": "c60af6bc-fba7-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.153.34.252", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769515984, "uuid": "882e4963-fb79-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.153.34.90", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "NLD", "colour": "#42882D", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "windows", "colour": "#f0f187", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769538124, "uuid": "14e48783-fbad-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.154.98.177", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769516706, "uuid": "36f20b4a-fb7b-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "51.15.203.72", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "tar", "colour": "#fb5a2e", "exportable": true, "hide_tag": false }, { "name": "tgz", "colour": "#bfd520", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769544064, "uuid": "e969a183-fbba-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.220.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769526125, "uuid": "24a02bec-fb91-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.42.90.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769493665, "uuid": "9163f9cb-fb45-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.137.44", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769501464, "uuid": "b9d6c806-fb57-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.176.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769518685, "uuid": "d24febc7-fb7f-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.98.232.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769547723, "uuid": "6e863532-fbc3-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.19.222.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769554924, "uuid": "3250c1a7-fbd4-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.194.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769548624, "uuid": "8716af87-fbc5-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.235.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769547664, "uuid": "4afe61d3-fbc3-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.235.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769519885, "uuid": "9d74c3e3-fb82-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.236.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769508185, "uuid": "5fa46964-fb67-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.101.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769504585, "uuid": "fdc028ae-fb5e-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.168.162.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769488084, "uuid": "928fb24e-fb38-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.133.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769553006, "uuid": "bb173c8f-fbcf-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.118.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769489884, "uuid": "c34921ce-fb3c-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.123.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769547963, "uuid": "fd92c9e3-fbc3-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.198.56", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769491684, "uuid": "f48dfbdc-fb40-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.92.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769482984, "uuid": "b2aa02b6-fb2c-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "62.171.173.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769547365, "uuid": "98ab60cd-fbc2-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "64.89.163.218", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536384, "uuid": "078578b1-fba9-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "8.133.18.61", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536206, "uuid": "9d7e8e47-fba8-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "85.113.44.29", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769473684, "uuid": "0bb2f616-fb17-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "85.12.205.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769547963, "uuid": "fd92a67b-fbc3-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.212.45.5", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769536206, "uuid": "9d8125a6-fba8-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.80.155.167", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1769532607, "uuid": "3c399ab2-fba0-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "blackmore.twilightparadox.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1769547786, "uuid": "93f49645-fbc3-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "homencck.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1769495109, "uuid": "edfabcfb-fb48-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "jehovahfireworks.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1769532606, "uuid": "3c0e09c7-fba0-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "mine.repeatcar.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1769526425, "uuid": "d75ace01-fb91-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "modaaura.store" } ] } }