{ "Event": { "published": true, "date": "2026-03-12", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-03-12", "timestamp": 1773360921, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "c162b03d-84cb-434d-8da8-3ee7b6063b3c", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1773273796, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773273796, "uuid": "173e27c3-14ae-44ea-9832-6f0b49659495", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773273796, "uuid": "9e645965-72dc-401b-8792-2b788449b778", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773273796, "uuid": "bddf7287-9b58-42f9-ac85-c7979bcde3ca", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773273796, "uuid": "81de0af3-d1e2-45fd-8ed1-f1c656e652e5", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773273796, "uuid": "f478d0d7-9e31-461b-a25d-5b0c6567513c", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1773275363, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773275363, "uuid": "808ae7c3-0a27-4b9a-8e5a-ff1bbce98df6", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773275363, "uuid": "745c10bf-8bcc-4730-835e-2d63346a97f1", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773275363, "uuid": "620def73-c0d9-452e-a16e-e70baa4c33e9", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773275363, "uuid": "b2a46514-bf40-4633-9aa3-0f1a369bfccf", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773275363, "uuid": "09e069c0-805f-482c-9d33-fe223fb268f0", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99e81e43-1dac-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773276257, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276257, "uuid": "fa29dc77-9f84-441c-85ff-63dbeb3ca1ff", "comment": "Malware payload (Mirai)", "value": "6a235f4926a349d3a163e9be89a4f93c", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276257, "uuid": "abba1d7e-9794-4d34-9a7a-dd2501292845", "comment": "Malware payload (Mirai)", "value": "773a86c12f68e296e0ff5463982a59f9c0b935e7c852e796519321c7e948673a", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276257, "uuid": "67479513-ceb9-4927-89a2-afeefb10916b", "value": "T176112EDF01615F71570DCF0CA6658C349107BDD1FA670A485A4B047A8DC678A752AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276257, "uuid": "ac2c00ab-78da-435c-96b8-21f46068b904", "value": "12:xyxjw0ZNIjlTjCiKl2pFct9jUFG107Pf6Ahejh/+jBlojn:4xUMNIpnKl1B66TloLojn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773276257, "uuid": "bc1db0f7-1eba-4b96-bed0-e1235f2faaaf", "value": 861, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276257, "uuid": "5bf0be2f-e992-449a-a979-4b674f3ab135", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1773276379, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276379, "uuid": "1eb94228-cc28-4cde-85a6-b082f89764c8", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276379, "uuid": "7951c271-324b-4f1e-839e-326b8458cea8", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276379, "uuid": "7468cd19-7a58-45bb-965b-6583af5a0bff", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276379, "uuid": "3993fb5a-9ea7-4e9e-9038-97a736d65fcf", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773276379, "uuid": "485cdb68-029e-44d8-9342-41f44040927c", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b5b8a30-1dad-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773276555, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276555, "uuid": "62d640cc-b2a6-4044-96e5-d1f46c981c3b", "comment": "Malware payload (Mirai)", "value": "7d6a018db6335efd0eb5c5dda62d3cdf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276555, "uuid": "7a47ce89-28ae-469a-8144-1d32cd9fa4ef", "comment": "Malware payload (Mirai)", "value": "7b89e5dad9e79e0256193931433dc5fcf9f244b90b039036d7f2adc6098fae56", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276555, "uuid": "00780b05-ee17-4712-be0e-904bc021cec0", "value": "T1E1D34A226CBA2D57C1D461BB05B78361F1E7338E31B88A6C3DB10F4EEF4966064562", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276555, "uuid": "d3c08940-f6d4-4d99-a776-eb2f6b634606", "value": "1536:dOePtHHkCLCxUviN7N1uT48UqdGVJHqrstopWYSNgsB7+hb8QdyVi5maRBpmSI0X:9JEOiZ+dGzws6QH77Vi5mEjfBhsKmIzN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773276555, "uuid": "f47c84b1-cf4c-45e4-8184-42f787c06c79", "value": 136744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276555, "uuid": "7644d305-eb2a-43f2-864e-262f0b0de7b0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b6153d1-1dad-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773276555, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276555, "uuid": "de9bb661-017d-43d5-a1cd-0990153dd710", "comment": "Malware payload (Mirai)", "value": "26839d006b1113073437b4486d1daa3c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276555, "uuid": "79dd031c-dc50-4805-9dfc-a09b2126d1a6", "comment": "Malware payload (Mirai)", "value": "ae0156461b18c53091a971701728ed5c9b5608786e7b8b12b0b9a42026e17b37", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276555, "uuid": "6f66f6d7-de21-488b-a7e7-2aa476939e94", "value": "T1B8C34A866683E5F1DC014A79306BAB719A77E87B212BDFD6E3F46D32AC44501800B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276555, "uuid": "42e8513f-48ae-4f31-9c6c-5f7a62c439ab", "value": "3072:DnKQ5vJuQmY32Bd0X2srB1JOasBa3QCr9CHGcCj/5uycPRpeWJ:uQ9QQmY3YaNDZrt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773276555, "uuid": "ea56956e-3d9b-44f8-8080-856c3f46424d", "value": 123728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276555, "uuid": "3700304e-939f-4099-af54-47aa46eba58e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b636ede-1dad-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773276555, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276555, "uuid": "40846aa6-b508-487a-9178-3188e49e8747", "comment": "Malware payload (Mirai)", "value": "eef7f326549df5ad5d224c8e502c1a01", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276555, "uuid": "37d567bd-4f25-40fa-b301-dd5ecc005b01", "comment": "Malware payload (Mirai)", "value": "03ee7cc518be82919ac81783151870cf2624d759d4230956087f2219836a700d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276555, "uuid": "5978df51-445c-4af9-8885-85f369234721", "value": "T113C34B027B254B47F8960DF9243F27C043AFEE9561F1B6846A4B9B0E4230E762956F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276555, "uuid": "d06adbd5-dfb9-457b-be61-83c15d9e2b78", "value": "1536:8ACXzj4pAfA1aLCS363saAg99PJ7B0a5j1foBqPnpr5mt4MvGdX6i3i6DYBx:czuHS3LDg9FdBhXNpQFG4iNOx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773276555, "uuid": "ab272963-e6f1-42d0-afb5-4ae8d6c81fbc", "value": 128152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276555, "uuid": "496702b0-46c6-4b6f-9390-e59dd1c01ef7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b637ac2-1dad-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773276555, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276555, "uuid": "c90ca254-518b-4b5e-b7cd-2a788f3cfd1d", "comment": "Malware payload (Mirai)", "value": "181d230b1ad517a147acbd716ddd79d3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276555, "uuid": "79ca0519-6d0e-4cb7-b137-34b6dff699c0", "comment": "Malware payload (Mirai)", "value": "288385e105d7a23cf132c01efb137f59bf03b80d259221f87e7c12bf065c3253", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276555, "uuid": "ed7fe819-39f1-4bb2-b7d2-24313ebdf382", "value": "T1DCD33A56A787F5F0CE410AB9306BEB71A9326C375136DBE2E7E4BD27AD5520180132", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276555, "uuid": "1574b8b7-5288-4b3f-9091-d6c35812c0b1", "value": "1536:xjWUeHfTL57f8JG+blgOiNR+iQo19bQy7qDrhdOaEhfMrqorlzUO4XoieKEgtL:pWUyTN85blgOuHChUtCl4NXLJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773276555, "uuid": "c49e981a-3d3e-4823-9868-25c6a4a8ee84", "value": 131756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276555, "uuid": "66be895e-18fb-40d4-852a-433f60659fd6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b64b691-1dad-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773276555, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276555, "uuid": "782a9a9e-7cab-4f92-b7ac-63449680d12d", "comment": "Malware payload (Mirai)", "value": "678cd1b5d2a6cc3ba7213be7958efaae", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276555, "uuid": "9ea07329-9a45-4a67-8613-313481d0b744", "comment": "Malware payload (Mirai)", "value": "485ee1193baed7af4e8467b7b5b74905c830e9e2efed3d3a91bbf46c0ac6a8ca", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276555, "uuid": "adb75888-fa96-482f-848e-4e4d8590941a", "value": "T10CD31A51F88741F6C9074934B09BF73FCE32D57A81768AA9EFD49E31D62B60182073", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276555, "uuid": "e3943557-b917-4920-ba09-ba8b5f281c5f", "value": "3072:Z0P7PI/Eej2KH+0IQzpW5GHBwcNeJMeC+ujKJ:WPk/Eej2KH+fQIyBNR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773276555, "uuid": "4a52fbe7-8e70-4a5d-8f08-c463862daba7", "value": 136016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276555, "uuid": "782f2a98-64e6-4095-ba23-a0b0a86679e2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b676469-1dad-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773276555, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276555, "uuid": "4aaa49f8-c4eb-4541-a060-e821104c329e", "comment": "Malware payload (Mirai)", "value": "db7b4267366129ba8e8c45d25933a325", "object_relation": "md5", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276555, "uuid": "ed37c8e0-aada-4563-a23a-f4b2d603e684", "comment": "Malware payload (Mirai)", "value": "258f1ba1953f63dcd1ecd88455e736ae9c252597402257be7dce2d11ddeb9e7e", "object_relation": "sha256", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276555, "uuid": "2c98844a-c909-45cf-a619-dc634a499b46", "value": "T110E309B16819F2ECE8E21078E01714E325D14C183EDEE0E2B197A5B7FFB5B48B469D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276555, "uuid": "1fa55dad-09b0-4fd8-a79b-e7659f80dece", "value": "3072:M22D3C5hIs+3fJ/iZ0X6qh5GaU4PIJ7u7Ce6LNThFI9d2G:t2D4b/MFn+S7ETs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773276555, "uuid": "85beb242-a531-47e4-a9d2-f245ab3ca11c", "value": 148988, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276555, "uuid": "1af234e4-6132-4d94-a26b-4ef66e61decc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b68cb73-1dad-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773276555, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276555, "uuid": "bfc1aa2d-e1d5-4f8c-92bd-01888e03396a", "comment": "Malware payload (Mirai)", "value": "a3755cb346b9fa506db3b57b10dec936", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276555, "uuid": "5101d86b-8139-491f-b0eb-d4f5a7193411", "comment": "Malware payload (Mirai)", "value": "555c6e391a83891047d49be9e62686d96f1e345bc3bb837d95c0a573bb53efdc", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276555, "uuid": "60acf426-56a6-4d00-abdf-55e0363c8513", "value": "T18FD31986AC91D925C7D113B7FA2F10CD331593ECE2EE32429D241F686ACA85E1E377", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276555, "uuid": "74ac3848-e39b-4856-ba1f-1202c3fdaa6e", "value": "3072:pk7pb8ktr8FdogMoin4zJjZi5ub9h846xmyOGqK/uJ2cfD:avt57LZX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773276555, "uuid": "04d36a11-360d-45e3-831e-e5fab3027896", "value": 136244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276555, "uuid": "0337a4d7-6b3d-4c0d-b84d-f772b4fa07e6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b6c4f4a-1dad-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773276555, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276555, "uuid": "ee5706e2-6c5b-4b6c-bbf8-5ec2bb4ea80e", "comment": "Malware payload (Mirai)", "value": "24f523194aa51b0e67826eaca25951d2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276555, "uuid": "e8aee2cf-a655-4b19-b192-3c2331a3d69e", "comment": "Malware payload (Mirai)", "value": "a01539a9d28c6fb407f5965f091b66a29ea5b9ed8cda9875ced019482298cf21", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276555, "uuid": "ec296f32-29f8-4434-916c-648a1f14b7de", "value": "T1FDD34C94E1005F3CF4CB95FE83264E09A111524576F20F1BF6A2EDD7BC621DA9E0F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276555, "uuid": "48be2c80-dad8-4cb1-b230-c845d31098dc", "value": "3072:1N1IrZ2EK1ladDPSfIao+U4kWy9IZHzICtmmsjiVwm9oRQyDzi06xAykqn4HDNY/:1grZ2z1ladDPSfIao+U4kWymHUCtmdj+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773276555, "uuid": "2b1d8e91-b83d-410a-a4cf-480345ec5ec5", "value": 134224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276555, "uuid": "f1b46ba7-2435-43f3-9a05-1922727185f8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b71785d-1dad-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773276555, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276555, "uuid": "13d6f417-625b-4f5e-b2e4-82c985f54b18", "comment": "Malware payload (Mirai)", "value": "6139b4ece202114a69711f8fb9696ddb", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276555, "uuid": "a510353e-b43e-43c0-8cd3-ca167f6d771e", "comment": "Malware payload (Mirai)", "value": "a58d357d66ddd20286f0736e8be06e51b00dfb629f04f6fb6f404a3955cee0b9", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276555, "uuid": "6b0bc911-5ebd-46c9-aa1f-638a09e25c55", "value": "T10B244C42A9508E13C5C617B7BAAF014E3332A755E3EB72068D285F743BC7A6E4E376", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276555, "uuid": "42073d31-4c96-4375-8cd7-e3f4c9620d85", "value": "6144:v2zjSnrMhHgz2pbBI02rT+KAx2nQM/9ejg:v2z+rONBI02rTdPp/J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773276555, "uuid": "1415647d-5d41-4ff9-aad0-8e96a4baa8af", "value": 214520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276555, "uuid": "a61092d7-0ed1-4aa2-9222-20db9126f500", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b75e4f8-1dad-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773276555, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276555, "uuid": "ca49710e-2ef5-4e6b-bd05-d946cd02ff49", "comment": "Malware payload (Mirai)", "value": "eebb7f4ba78f7e406cd5647d0a126e25", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276555, "uuid": "c1287bc6-8abd-4ebc-acf2-b589e1686486", "comment": "Malware payload (Mirai)", "value": "b4e47cf735cf80b05e14dc46ca71364f00649306776b387cbfd4f9fe96c73fc3", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276555, "uuid": "d57ec8a4-6365-44c4-b093-5b34c8afa9b3", "value": "T19DE33C82AC919E15C6C527B7FA2F008E330553A9E2EF7152CD245F246BCE92F0E376", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276555, "uuid": "79293193-963d-49a0-80b4-130b984100c7", "value": "3072:qEALcgWMn6qU5VD6/V7qiQynDySDL8Aqt6n1DndiPmm8f/VLmjfvD:PYDn6fVDfYyYEiff3VL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773276555, "uuid": "e8f97df0-63b2-4e36-b398-a49771634bc5", "value": 144744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276555, "uuid": "b75a09fb-e448-46e4-8c9f-b123d3923c87", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b76339c-1dad-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773276555, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276555, "uuid": "ac4ecfb9-fffd-40e0-bb9d-4a5c11bf84c0", "comment": "Malware payload (Mirai)", "value": "a6ee47ae925ea166b005a691c9d5c0bf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276555, "uuid": "0f0ee2ac-ef4b-4a7e-9c8c-da521a0be515", "comment": "Malware payload (Mirai)", "value": "87b86dd0930adc0bb34cc8775b42e117b4311bf43d8c454175c6584a0527e714", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276555, "uuid": "91948f8c-5ce7-472a-a457-bab95586aa20", "value": "T156F3B20ABF310FF7E8AFDD3B44E92745149C1A1A26A97F71BA30D814F64A24E16D39", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276555, "uuid": "dc0ccd32-7453-4a19-9233-a04281f1c733", "value": "3072:FgehkTLuTXSSpn6uSZFa3+WS6XyaaLyFThZgIfxl2ejH:RhkTiTXfpnxdddtxl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773276555, "uuid": "d544c471-5e23-4d21-8d53-31ff71041786", "value": 171444, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276555, "uuid": "f720b185-0be3-44c6-9fea-41739b6063f1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b7ff5fa-1dad-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773276555, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276555, "uuid": "12459c14-006d-430b-a023-e080480c2fa2", "comment": "Malware payload (Mirai)", "value": "bb8e3734e88dc45350665006990a87f9", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276555, "uuid": "ea906063-675c-4145-a5ae-90048bf07283", "comment": "Malware payload (Mirai)", "value": "7cc5e9438ba482b93ab52651dadd19d294c676a6514088b7e0afe3830605880c", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276555, "uuid": "9d3ffcc9-aa1a-4089-96f5-0944c3440179", "value": "T11FC32986AC909629C7D223B7FA6F11DC3311A3E8D3EF3142DC2417686ACA55E1E377", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276555, "uuid": "a1fe0220-9e2f-4738-8a68-fbfcc1bb7998", "value": "3072:pu7WDUfrgk/uB8PQWP+G1N3Gdhq84RKyofCvkm2DfD:WPfrgkZ73MH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773276555, "uuid": "197d8749-5c8a-453e-95c8-88a7049745bb", "value": 128376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276555, "uuid": "d1ea7d9b-9c29-4b07-a8ec-6b7c144cc2c3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b817994-1dad-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773276555, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276555, "uuid": "1e8c8131-3d00-4083-a433-81e237fa1312", "comment": "Malware payload (Mirai)", "value": "0f88f7b602150a9a129860e815cbe9b8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276555, "uuid": "51b1df38-32c6-4cb9-84da-2fe7ec3636e9", "comment": "Malware payload (Mirai)", "value": "a5a8e04da88f48b957cea5b97e549dded65df11825c3734251fa38cc12e21e54", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276555, "uuid": "0aa9ce5e-54bb-43da-8276-b025302ee7ef", "value": "T168C3AE31E1A4ACE5C191067570E8E9B84761E50C71372EF2E682CF2A9407EECB51E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276555, "uuid": "cb75b173-39d7-4e3f-af8b-8bebce98d442", "value": "1536:lx/acwqIALMAahHb0GC8EdjbHHcESCWstXUd756EEzNIpYCkbLi6HhB:PicYIBahHx/ijbpSbsZo7wNpIpYhBD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773276555, "uuid": "98721273-91cc-4f63-9003-507acd480f9a", "value": 123952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276555, "uuid": "5ccd87c5-8057-42c9-8c59-9223d9177231", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b868e42-1dad-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773276555, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276555, "uuid": "e45ff5be-7833-4bb2-97f2-4269973fb16a", "comment": "Malware payload (Mirai)", "value": "02b191eb22d8a75a27d1b445a99b2361", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276555, "uuid": "24446704-f570-4d1b-b746-f4963d84149f", "comment": "Malware payload (Mirai)", "value": "698cff81df1696bf0b3823378f6a3fc771c7034bac4918e663a5bf92a47bf59b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276555, "uuid": "78077d57-558d-4a0d-b04d-25d72e6ca2c9", "value": "T1F0F3B61D2E615F3DFBACC23947B74A61928823D62AF1C5C0D16CEE015E7428A742FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276555, "uuid": "aadf7283-01ae-44d5-ba97-2081ecbd7073", "value": "3072:XGiIhYIU8zwwnnqz3UT/EuoolCFbNV8YB5k5pW9c4HbX2uXBqRGlMR6jE:8YIU8zwrbN/H9c4H/UR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773276555, "uuid": "769b19b7-cc5e-41d0-adcb-f95cefb4862e", "value": 168100, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276555, "uuid": "bc4e7aeb-f656-4d4e-8e6d-35d4139e0bd9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70067543-1dad-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773276617, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276617, "uuid": "b4099c24-012e-4a18-9ea3-80c522ef7f98", "comment": "Malware payload (Mirai)", "value": "d70a29322a31d7620ed3a5824e05c626", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276617, "uuid": "72ae6884-dcb7-478b-8163-3119f445f1c2", "comment": "Malware payload (Mirai)", "value": "8c3363479f8469cdd46f62aff02362c14abdefa16ee957fb2c768d26e7e89fdd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276617, "uuid": "c04efd32-1a59-4655-8e03-60e83357f5c9", "value": "T18EC32942B64445EDC089F53815BF6BB1C821B47E133AB5EB33D0BF1A7C19E601B2B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276617, "uuid": "1181b4ff-594a-43c8-a681-bd914b9538f7", "value": "3072:m7vkk+z0ssE74BaX/ZUZxWayUU7xUbfKp:mp+z0ssE7kaC7Wayre", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773276617, "uuid": "bf87a343-c92a-4f71-8e33-b85597b22026", "value": 126272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276617, "uuid": "83f2c131-05ed-49be-ac91-3bb92009541e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "55b68edc-1db2-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773278720, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773278720, "uuid": "79e86c76-67b4-40cb-9d97-d463aa5897fb", "comment": "Malware payload (Mirai)", "value": "c7075668786f058bd32f3d35738f368d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773278720, "uuid": "1f10ec70-def2-4898-939c-a67d97e4989b", "comment": "Malware payload (Mirai)", "value": "daeef2ffaf8474d0b7444f5074b18dfc2989cc1a5a313afaa875713d739b295d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773278720, "uuid": "d0905e2c-54ce-4134-b734-439d0584bbcf", "value": "T1DD233A13A9BC2A2BC4C0A67701A34373B5FA1B999084E74FBD660D4FAF553140A7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773278720, "uuid": "433ab795-7118-4fdc-b90f-f606c12bc1d8", "value": "768:8SO1LowLFZSF5RxYpsAIfqUS+3nniImyx8euNGpcjtezVUMIZ9TBI:41LpLnM5RxYejfvS+3niUduNGYeII", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773278720, "uuid": "3f381230-70c9-4658-be46-d9ef519afdb2", "value": 48896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773278720, "uuid": "058b533e-a1c7-4d37-b8a8-7f23f91f6074", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72bfb111-1db2-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773278769, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773278769, "uuid": "950d777a-3280-4894-9077-7a1ff3631a4a", "comment": "Malware payload (Mirai)", "value": "6b86200f41ab2755e35918a854c362d3", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773278769, "uuid": "1a3a2b80-b46c-43cd-bf04-383559793261", "comment": "Malware payload (Mirai)", "value": "7aec9c8bf986d159b47d46238e2fbda20922f5a89a3114d8d29f3b745ef34939", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773278769, "uuid": "78853c87-cd12-4cb4-94ef-d1d04f6c2723", "value": "T123333A86FC92856EC6D147B57A2E968E336263E5C2CF7343C90C1B91768AA0F4D73E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773278769, "uuid": "53f113e0-e5ee-47d6-b54a-5fc74d8d2960", "value": "768:3HuK+8KXB+FQTytEwBL/o2x5SKRTqn6rnyY4qRRMS2FqnVz:3OK+8OBkQgHtxsKRun6rnyKJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773278769, "uuid": "edb3d666-e71c-4054-86b3-fe204f670a7c", "value": 51048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773278769, "uuid": "fad94495-d5f0-4bd4-81c9-364e5cc5ccb5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72c3aade-1db2-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773278769, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773278769, "uuid": "72145c4f-c9d9-46d4-9839-e9aa59c3af1b", "comment": "Malware payload (Mirai)", "value": "a8ae27f8d725f43e2ce2583cd5f08281", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773278769, "uuid": "b39703ed-8ceb-4775-afe4-f1a5cfeaa28e", "comment": "Malware payload (Mirai)", "value": "1cf28af76f0321a34d1af06dcd70f1682bd77d01fcfd7de0c2584f2eff07b7e8", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773278769, "uuid": "5846856d-7c4b-462e-8a72-4ceef7b0ac2f", "value": "T141736C89FB47D4F0D94205B010ABFB39D671DE361014DE6BEB89FE36AC3264294563", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773278769, "uuid": "15493806-fe92-425e-a6e8-a127cfb52e01", "value": "1536:c5XmDKbNbYLV/OEMGab9683YiKowAYsgUz31NbzYr:sGAlYLtkGab97Lwkn4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773278769, "uuid": "9335f340-ea3a-4852-b70a-ad6f0999df55", "value": 78900, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773278769, "uuid": "bd412c87-b74a-4e33-a1da-46adefa76938", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72c40447-1db2-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773278769, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773278769, "uuid": "4cdc3ed7-22c4-487e-b2fe-86f2a1161208", "comment": "Malware payload (Mirai)", "value": "75b97c7be28ab1d5dc2145a650d90083", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773278769, "uuid": "6de9682e-aaa4-4ef3-8ae6-373637b103fc", "comment": "Malware payload (Mirai)", "value": "599b4d647074a6a374f7c1dab751fa5824114f8df056ee18803394189928a68b", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773278769, "uuid": "b5126eb5-139a-41c2-8727-f47cd8177466", "value": "T199734A2779C0C4FCC899C17457AFB236D873B47D0239B19A63C4FE26AE8AE501F295", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773278769, "uuid": "30787902-d3b6-4985-b06a-a97e93132ec3", "value": "1536:vi4D1E0QdjS7M6vTDEHOrGz0s3Fo93yMH1MHuCtUJR4D+bsf3R:a4pkdjyRTDEHOr2o9CK1MHuCHD+bsPR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773278769, "uuid": "0d20811e-e4c2-42f3-aaa9-b8926b6d67d5", "value": 76912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773278769, "uuid": "a7d891f2-8ca7-4322-91d8-2c37f244fb5c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72c8ce65-1db2-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773278769, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773278769, "uuid": "52750de9-b708-444c-ad5e-9f263f7c5081", "comment": "Malware payload (Mirai)", "value": "d2d9edf3145b4109220fcd71d4c82354", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773278769, "uuid": "b691a795-40b8-4e96-9536-a68f79d25ce2", "comment": "Malware payload (Mirai)", "value": "006ba11e20773edc8e32cfa37ba611c449f2db1c59911befa12bce797be85d48", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773278769, "uuid": "089cf982-bbf6-4bc6-9b79-4d5addb5abbf", "value": "T1CA7306C1BA4B80F6D80748705067F23FCB72D6398065C75DEF6AAF26DE3364292163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773278769, "uuid": "2ac000dd-684b-45e6-b624-7d7efb6f0eed", "value": "1536:HkwqgtCaQnJUSk9Id76nBkJYgkQFWfwoIatAzPg8iD:KkudWBkJsDYpatAz48e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773278769, "uuid": "b420d207-35e8-4b9a-b8d5-5d97a991458c", "value": 75244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773278769, "uuid": "c34c5f15-8ecd-478e-bfda-44e5af048586", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ab5ff2b-1db2-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773278836, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773278836, "uuid": "250ec1ee-4fa7-4392-ae70-dc8f8bf93ddf", "comment": "Malware payload (Mirai)", "value": "e585cebd5facee788cbb73b3e4327226", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773278836, "uuid": "4d0158f6-8715-4581-a241-5c90dca01c6a", "comment": "Malware payload (Mirai)", "value": "cc5c55f00c7b763bad5d3b9e9aa73614fc9c0463707ab71f01b0128eed4445ce", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773278836, "uuid": "91be4078-bda9-422b-b9e9-f659bf95a302", "value": "T18A334A86FC92856EC6D147B57B2E968E336263E5C2CF7343C9081B91768AA0F4D73E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773278836, "uuid": "c9a747d3-a5c8-41ee-ab8d-364d8c10a65b", "value": "768:HHuK+8KXh+FQTytEwBL/o2x5SKRTqn6rHyY4qRRMS2FqnVz:HOK+8OhkQgHtxsKRun6rHyKJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773278836, "uuid": "c0f0d74f-3453-42e1-b0ba-4c677affab86", "value": 51048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773278836, "uuid": "ecc0e0ae-4e4a-4241-bb3b-59f2be3cd538", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9acbccdb-1db2-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773278836, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773278836, "uuid": "6a985d2a-e0b3-4dcb-b9f6-b82c7e309ea6", "comment": "Malware payload (Mirai)", "value": "f823e121894f0995e011a859bf2d55e4", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773278836, "uuid": "bd15bf00-366d-42f8-bad3-4229fea2fa10", "comment": "Malware payload (Mirai)", "value": "59b70068a4d25d9a43758d93f29a462172be061686592b2107f3f4a9da0da790", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773278836, "uuid": "2ec51138-d5c9-4bc3-a741-76359e41f4d0", "value": "T1C7636DC6A647C4F4EC1A0571217BFB724AB3E13E1018EB86C729A93AFD13941A1367", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773278836, "uuid": "555b4eee-91f9-47cf-852d-94b257bdcc26", "value": "1536:uHn8wtibSAa34Tvg+QMAWGzBBtCB0SfFL:u/QSDoTzgWQBBkqSZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773278836, "uuid": "2fea20e1-8d85-4730-aae9-5c744d1361fb", "value": 71148, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773278836, "uuid": "adbe4774-98f6-4348-9807-cbc96d4a7e59", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9acdc003-1db2-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773278836, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773278836, "uuid": "57968731-50af-4159-970d-82097f1808f7", "comment": "Malware payload (Mirai)", "value": "432b8f0aed9c890278cc8eedbeb2fb83", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773278836, "uuid": "4764e52e-aef5-41a8-8606-065779213ecd", "comment": "Malware payload (Mirai)", "value": "040d75938c1dde9eac3d632c1b18b7c88b7818bca3fda305dea258a0bf420568", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773278836, "uuid": "733ea3cf-cc77-4613-9c6b-a42a04e67306", "value": "T1C3734B96FD814617C6C512B7FB2E428D372627A8E2DF3203DD156F21738A92B0D7B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773278836, "uuid": "752e7e39-184d-4456-82a3-f23a14a5a520", "value": "1536:9ZGbup3gY6TI2ht4UzQYcq9Zf5PFvOKKPJUvpx:9ZuuRgY6TztDzQO7BPFTosn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773278836, "uuid": "fd0a40dd-3eec-4488-bbfb-e09ef1a58fbf", "value": 80384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773278836, "uuid": "8f7b9e80-1037-43ee-9076-d314a36cc18d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bb266dc2-1db2-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773278890, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773278890, "uuid": "edfb9c8d-9811-446b-80e4-9eaa046ad1be", "comment": "Malware payload (Mirai)", "value": "76c9be901ccf57b325588cf25a5236a2", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773278890, "uuid": "9b8748e5-9179-4b92-99b6-f084f1cf0a51", "comment": "Malware payload (Mirai)", "value": "ecc54d4c1c46a7c5a1edfcad0cbdc2cb03818a0e444802e66a54578bb1e98f1a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773278890, "uuid": "5742ea90-ad94-4ad9-b593-9e8e8a2b7c5c", "value": "T1E2A3B65E6E318FBDF768823047B34B25A798238627E1D685E26CD6105F7034E245FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773278890, "uuid": "e21ef211-4a56-42b3-8258-1918e6c9044d", "value": "1536:3N2gmGdxqBfrMZ0aUIW2tOiX31wcp3eqZE6PrI+:LmugrM0mRX3ecpsGrI+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773278890, "uuid": "e0a7304c-258f-4ad6-95af-e83d7ea0dbde", "value": 101920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773278890, "uuid": "48d4b3f8-506d-4999-997a-b4af33348ebb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ace4ef49-1db5-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773280155, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773280155, "uuid": "c2d5f8ca-dfc3-4e0e-8d26-fe8a5146802f", "comment": "Malware payload (Mirai)", "value": "cc1760c1a898dd5fee088d7e37f30eb2", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773280155, "uuid": "529fdf66-a965-44b5-bfa0-b38f9e2ca48e", "comment": "Malware payload (Mirai)", "value": "5079206433607fd6dc1af3bf52cedce1a3be292048ada3338620fe9aee26283a", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773280155, "uuid": "c88682df-1281-4164-9bde-fd37e8c16302", "value": "T1EB5140D6F75206306F7AAEA7B9B64805B19990A39DD0A906F4FC7CFD528CE0C30906", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773280155, "uuid": "61c2424d-ea4c-4f10-abd2-187abd3b5ced", "value": "48:iEzLmzLVzLVzL7zL5zLtxEzLazLVzL6zLTzLtzLBzL4zLIz:iE3m3V3V37353LE3a3V363T3t3B343Iz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773280155, "uuid": "d59fa64f-d3b6-4368-b22a-ed87fc04f809", "value": 2794, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773280155, "uuid": "1f4c2763-4542-4429-83b8-45acaac3e955", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad1ca257-1db5-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773280155, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773280155, "uuid": "c3486a92-5825-4d72-8d59-b4b1f951dd97", "comment": "Malware payload (Mirai)", "value": "eae460aaf8bfe9bd8360410f2bcaab15", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773280155, "uuid": "4a0626ba-e088-41bb-a4ed-cff027f5b8bf", "comment": "Malware payload (Mirai)", "value": "8e102c0c72beeb13e0302ff51629d7e76d659fbf409fff37bacdf94532241a23", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773280155, "uuid": "98c1e2d2-174c-48f5-8c97-6e6e9c80d7ae", "value": "T1FE72BF73792EA020C1715CB9DE7DC30B7FC90ABCD6DA3224271482A5F68251B65B9F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773280155, "uuid": "34ade1af-afe2-4dfd-b97d-7f995c7f50b5", "value": "384:J7Kkx6VmPigOCvXc27/NWjhymdGUop5h8V:YkQVrCvXcGWjs3Uoz6V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773280155, "uuid": "8fd369e7-f75d-4cd7-9f51-f39049c3ed1f", "value": 16640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773280155, "uuid": "6587a98d-71d4-4685-8150-6493b747b86c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad2bad83-1db5-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773280155, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773280155, "uuid": "c1d6e7c6-c0cf-4cb3-bbd9-08b3791fa0ce", "comment": "Malware payload (Mirai)", "value": "303a8b9e86a2a938472f40a5d9da839b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773280155, "uuid": "00acfebb-5573-4475-9ef7-cc073a0d8728", "comment": "Malware payload (Mirai)", "value": "d6de8e3161a50b85bd7ba8169ed7374139fe27d08ed4695862a70a012b93e419", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773280155, "uuid": "d2075812-7ac0-46e7-9fae-d62cdd87580d", "value": "T1F233F1DEF94F65C0C7EF0D3EA1E614E28B207C8213950EA56752888593AD81F7E420", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773280155, "uuid": "7431bf09-7cea-4032-83e9-6ea656a7bb58", "value": "1536:ibayoZXFsbejmq8Cq0TX3iUUDpGkbHPjgHOR637lIL:ibWHsbeiqL3iU8GkbjgTlU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773280155, "uuid": "bdec5557-fb0a-4a9a-86ab-5c9df94e5e69", "value": 53708, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773280155, "uuid": "617bd0a9-3400-4bb9-90b9-11d0c39dca15", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad38f63a-1db5-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773280155, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773280155, "uuid": "d41f1e2d-9b51-436d-a591-442d6e1515a5", "comment": "Malware payload (Mirai)", "value": "6c2905b8aa750c857dc0a850e0bd31d7", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773280155, "uuid": "7a1dbd92-cb22-4329-9528-a1496ad4ebed", "comment": "Malware payload (Mirai)", "value": "4cf1333f5de389e2627636314215400ad59fdb34bca093d2e4e4ac8667cd9a29", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773280155, "uuid": "8b7e2f18-4a20-4ab4-8651-27fd61b90e04", "value": "T1DA43025FC2157DE35FB442792AB1450FFD00A87E85CBBB3750E04B06A997188FB263", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773280155, "uuid": "98e4d5bb-e9ab-43bc-8475-6632577a2cdd", "value": "1536:Y0lj115MBmXjkYY1C+OE0oiVgMLEGD0YLbte6LhA4TYI:Ysj11rYk+10o2gMLEh0bV9AEn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773280155, "uuid": "6aaa06b8-2a1e-4c1c-b583-527a46e09508", "value": 60576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773280155, "uuid": "3309d208-448c-43d6-891f-fa2b66842b0c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad443d0a-1db5-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773280155, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773280155, "uuid": "fdcb93ac-3403-4847-90d3-17774118293c", "comment": "Malware payload (Mirai)", "value": "f6cec8cb7947968f5583497a8d2bd5fa", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773280155, "uuid": "b25793d0-ab32-4ae7-aee6-a3fb99461855", "comment": "Malware payload (Mirai)", "value": "edd2e49303aa96953f7427eb7972348aaca4f48c8cc6498f1c1d97f699db2a25", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773280155, "uuid": "687ee93c-1e58-405d-9ae3-f7f47fb40aac", "value": "T1AB330238E1657C554EA86810EFB409059CBF2EA907A770B60B18917C79D500B3FAEF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773280155, "uuid": "d00c2bf6-70a5-43bd-ae2a-1aa4d1173c05", "value": "1536:w8sS+awMidEUps33JMzcWiZc+0dYDx7Iz0Pn1WGqR5L99:GvMidvGnYdyc+028mYG25LH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773280155, "uuid": "4956b3ea-f804-4279-8ae6-3af87061e94f", "value": 53668, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773280155, "uuid": "39f45aa8-d217-48a4-8f0f-2f7bf3286507", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad4d0b0b-1db5-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773280155, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773280155, "uuid": "e56e7121-913e-42c7-a1f5-5afca8af80e9", "comment": "Malware payload (Mirai)", "value": "5ecf370495b8a2be9c7d84f577653c9b", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773280155, "uuid": "9f6873ca-f259-455d-b363-86c1fdc2d1da", "comment": "Malware payload (Mirai)", "value": "6f27a543fd302747782dcab22e7e81ebb1b37b272ff8a460765b856c202c06a5", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773280155, "uuid": "a89edc7d-ea0f-4673-898a-2bb349d94e3c", "value": "T10C23024579036830C872FD32611B46CB51EE6B74F1B63B4815796709FB6922F10FD8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773280155, "uuid": "1b34c709-73ba-4967-b32e-06c9cf474694", "value": "768:cLdIP4zIiN/SA3cXIdKbiz41x64h3iTowq6EktlDqTcseCXiLkZyCSFKWHs3Uoz5:iWYPN/5c4del15hSTx/xXMbeKIFKrz5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773280155, "uuid": "1a92380a-f1de-4909-a8a4-e8056decd409", "value": 48380, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773280155, "uuid": "6cf37fd3-82e8-4273-a846-68f45c2471a7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad61a470-1db5-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773280156, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773280156, "uuid": "07ae33a4-6ab7-44a6-b2c1-3d2620f0adaf", "comment": "Malware payload (Mirai)", "value": "b5ffe9d764732e3ffa332dbcfa39559f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773280156, "uuid": "81cdc1d3-7a96-4c53-856b-02906d8236a6", "comment": "Malware payload (Mirai)", "value": "d07c62f2e31fdb1d62c42c2bbaa0b3140ea79218220525b784bbf399307457f9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773280156, "uuid": "d48c0cf5-2304-44a1-b4ab-9c965d185264", "value": "T1AAE328C7F800DEFDF80AE37648634909B630B79255921A377317796BEC3A0E44867E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773280156, "uuid": "99d729e0-3264-4e60-96f1-b2d847cce83e", "value": "3072:55qR2gNr+yejg9kg0rFyAVZjbiFLz5X2FLlkyok7h0ix0:OR2gNig9ktFyjLtiZkyoy0I0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773280156, "uuid": "bba1fec1-f12f-4f24-8e45-c0178945483c", "value": 150368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773280156, "uuid": "a0ff1844-311f-4776-98e4-7199b8d06c7c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad782979-1db5-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773280156, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773280156, "uuid": "2e03223a-af84-475f-bf4a-deb05802fd85", "comment": "Malware payload (Mirai)", "value": "09176b30b0e58fb54cf655c2c6b1765e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773280156, "uuid": "855c60eb-8fda-4878-8f74-549591727a96", "comment": "Malware payload (Mirai)", "value": "dd37c287059afdf784e603100a2313eb5db5f393d360577d60e29fd38d18e091", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773280156, "uuid": "025d5bb2-4836-44ea-a569-4994ada06316", "value": "T1E423F175CA0DB6BAEBBE8C384C5293E1A6F51DDB77EA88C3A7501E431647C401709A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773280156, "uuid": "a4aab68d-beb3-4102-bddc-e1de65df7e42", "value": "768:GPMGs44aRcWZJPR9UK2jGlMeEhG4p6niYcI4P6Og9C0A/qUuQOLIl34uVcqgw09Y:GPRCCLR9hl5Es4p6nbT4QC0A/qUuQAIN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773280156, "uuid": "5fba54e9-1d94-477e-a798-75433a6db898", "value": 48140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773280156, "uuid": "28ff503c-1ff4-40b4-a175-6120b52f0b4d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad7f2899-1db5-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773280156, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773280156, "uuid": "121c5aee-4efb-4dd6-b50e-627111844e4e", "comment": "Malware payload (Mirai)", "value": "44fe27b3895b1acdfa4ab16c0d77c944", "object_relation": "md5", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773280156, "uuid": "db4a3b2d-28de-4205-9239-38ea94b68ea7", "comment": "Malware payload (Mirai)", "value": "9b9832e1543cec7b332c9cc47897d16216d042a2a8ba351130a4c84c3005818a", "object_relation": "sha256", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773280156, "uuid": "719a9715-4118-4ca4-a110-3d9d3ea57a4d", "value": "T10BB3ADEFF34B1591C8628BF013C39BDE2E2722129F6B85E73C0E567A18751DB491A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773280156, "uuid": "42dd48fe-c18c-4991-bfab-838af3bbc281", "value": "1536:LLOwW5OIMbLQT/vl9NMJJ6m3WXfeoiWR9gj/LW9:uw/IMbszd9cJ6c2eoiU9gjq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773280156, "uuid": "f7b79bc4-1422-47e6-84c1-c583e1d33366", "value": 107840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773280156, "uuid": "da563194-682c-4ff0-a818-46e738c1a49e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae719c52-1db5-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773280157, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773280157, "uuid": "0e4daa5e-b362-47af-8450-81256dfa1efd", "comment": "Malware payload (Mirai)", "value": "1631af5f418577370ff81630c50d7ec9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773280157, "uuid": "7dd90ce3-5dee-4a4e-9f74-dc21d145cda4", "comment": "Malware payload (Mirai)", "value": "7ed4283a375fc874882d02089be698ec2a3c2905447d143af3bd770b248c4764", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773280157, "uuid": "0ee88d0c-a19f-4acc-a3ff-0d094a23c28a", "value": "T158F22903027D6517D4E8A63902F39757F2DA7A9CA014871FBE3A0ECBBA613D01F6A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773280157, "uuid": "359c393a-a9fd-4e90-988e-ac1801a14219", "value": "768:fyQIH1RjyptP7ehBxnGImJ34TC5tuHajtyBYYPD:fyQIH1RjyptP7e/lG31yBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773280157, "uuid": "ef104f7c-087d-4b16-8300-3f4b06c3c012", "value": 34648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773280157, "uuid": "834c5673-d65a-456a-8114-75cc24e79391", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae971161-1db5-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773280158, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773280158, "uuid": "b0f5e6a8-babf-4831-b2c3-34e32a69cf06", "comment": "Malware payload (Mirai)", "value": "16ae02e871cb88b3a312a24ca028a12d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773280158, "uuid": "b8830bf3-5a1a-43fb-b04e-e841b6383247", "comment": "Malware payload (Mirai)", "value": "3f78233884ca029b470e74c40554927465ebf539ebe8c119779f22dc8ffd1473", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773280158, "uuid": "6811e92c-9ff8-45de-b92b-f7a4749eb45e", "value": "T144B36B63CC792F98D219D174B1B48FB92B53A92192871FBE5567C3B48403D9CF90A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773280158, "uuid": "570331c6-3c97-43c9-a25e-7e4188891190", "value": "1536:QaX881Y9egayTxxR8CO9pVubTWcb/VBcUpKL6myqcn8hE9:QwY9efyTvR8ZpVsTWcLsxLU829", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773280158, "uuid": "41a882e2-1236-4b3a-87ab-1593ee1b9f81", "value": 114884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773280158, "uuid": "76f23565-a2a4-429c-a3e1-f7dd5265c1bb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae97280d-1db5-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773280158, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773280158, "uuid": "8f5ddf22-3fe5-46c4-a8d5-14266a936292", "comment": "Malware payload (Mirai)", "value": "4c0e3aa27801a33e4432def7f61c7a5f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773280158, "uuid": "56e91a33-a49e-4789-a4eb-1b4f4774c063", "comment": "Malware payload (Mirai)", "value": "8d6c715294ff2a9bda70ef9bf4c730280fbca6fe4da717116ecb0ad7d26938ab", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773280158, "uuid": "05c8b43b-d846-4a33-8846-710dd5d95e99", "value": "T1C433F19C81062425E41804B9BB998F70EE730E6B6F17ED089B04D64B48BE5F438E37", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773280158, "uuid": "ed1f9fc2-93d2-479c-b3c5-42e09a0e4bb7", "value": "1536:4V2O2A4ViCfFFqCFP7aG0joUUT8Hk6aUVJuW:+2OIcCnqe7kjBUTLFUVQW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773280158, "uuid": "2a611c29-c163-4bea-99ee-d3da685d6fcf", "value": 52872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773280158, "uuid": "ac79eee5-9654-47f0-a12a-883a6f18b33f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af8a9013-1db5-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773280159, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773280159, "uuid": "1523dbfb-211d-4f03-9ad0-4baaf6e8bae5", "comment": "Malware payload (Mirai)", "value": "5361f1af8cffbe7fb35d217d2207d616", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773280159, "uuid": "25d99c1b-09e0-420e-84b1-0e5779cd958b", "comment": "Malware payload (Mirai)", "value": "da38555c7e2a1a01ff071455be3b9a50124633aabe902b6aa3ac96f5302b3e4c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773280159, "uuid": "b8da1b8f-d14e-4ab6-b16b-dc2433108b14", "value": "T17003F1E3F5C5A51CC4EF617D1F883E259048A169187C667EA28031B529ABB9C2D3C3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773280159, "uuid": "fbd017f7-7649-43bd-b0a4-354c97add52a", "value": "768:/5zGYSTbgjCuCAP6ZgO5o12HA0gxzhO3ZaVmqh7vs/kotpGnbcuyD7UHQRjU:9GujDLwA0eEUVmyQTmnouy8HyY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773280159, "uuid": "ea6654d8-c81b-46c5-bdb4-5545de2d2609", "value": 39972, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773280159, "uuid": "468d91e9-3518-442c-8ce3-5e09a2b54691", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c5242aa-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1773281198, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773281198, "uuid": "e231650d-a8e4-44ea-a11a-4d15eaf70571", "comment": "Malware payload", "value": "70e3f6b8302027cfd1a757e02252400a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773281198, "uuid": "36535894-1a99-452c-9ea1-056ade9bf1af", "comment": "Malware payload", "value": "edd1e9268ff4961c7d0d2364d7215925d38852fa8646636d8edb3e97900e53ac", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773281198, "uuid": "fd66bfc8-89ca-4080-b85f-0e59cbb71cb0", "value": "4C731229139924A5D63141F1E3FE1B88BE591FA9CEE1EC14BC117C98ED333AD2CD6518", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773281198, "uuid": "4b311267-275d-4a92-a982-e453c44b82c4", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J1d:yYI0ARqw1qAEv7UIFM8oJorFquyjkRkr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773281198, "uuid": "52db99f0-98b5-4eb4-beea-ad31bdac5ed0", "value": 79640, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f69e79ef-1db8-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773281567, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773281567, "uuid": "77563062-18a8-4b27-ab9a-f6baf15c6b2b", "comment": "Malware payload", "value": "819baf84d967a4f9cad44d60af904238", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773281567, "uuid": "a9d46cd6-7bcd-499b-b26c-f42fb7800699", "comment": "Malware payload", "value": "9e86aaae03d1c11a8f2f7176a6e43d85321e36053f676062ed4ea4be104acc32", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773281567, "uuid": "3ecedac5-14df-42d2-891a-fb87eff365d0", "value": "T16B93093274AF052A166F436E80427B1CEBA982DBC600DBE8F4FD51595FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773281567, "uuid": "04ad1aba-a4b1-47a9-954f-522353fd9716", "value": "1536:pmyp1tF/uwMmAIa14oXusIcepeV7tb73WAxCJCStkb5fv2v05x9krfiWEsCZKR6x:pfQI7zEStkbFv2v05x9kr7EsCZC6Yy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773281567, "uuid": "b1f5d397-520a-42e8-a74b-3ecd4fca09b1", "value": 96308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773281567, "uuid": "ac46a6ef-eb97-4216-a108-ca580d8888ad", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e89a3634-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1773281929, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773281929, "uuid": "197d950d-1560-4f54-a030-521270b78e68", "comment": "Malware payload", "value": "70af65a13a14e5deb73c31c8829dd998", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773281929, "uuid": "e5fd0842-ecd4-4a0b-a8b1-2475f2841168", "comment": "Malware payload", "value": "feacba94918d32a51ff751ae4b98e9ec5823aedd525ad283ed99653b3f23545a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773281929, "uuid": "4d271d07-05e0-4e1d-b3ce-4c2e13771dcb", "value": "5923028623A63F72D52148F5D7FCEF85A14A7E94AFE5180E7C113698B07035C28C8C1E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773281929, "uuid": "c14df0a2-6985-4c8d-bf77-32516f1c64b3", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04ZTzEsDm1Xo0Wh:yYI0ARqw1qAEW67UIWi7M8gmfmJo0Wh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773281929, "uuid": "1b238b3c-5ff1-450d-a1b8-1cde9741d8cc", "value": 47784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2f7c2f2-1dba-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Quakbot)", "timestamp": 1773282366, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773282366, "uuid": "2c97a808-65ff-4aa4-9438-db8808890e85", "comment": "Malware payload (Quakbot)", "value": "1a5fa916574ab5f9c6042978a56170a2", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773282366, "uuid": "286d2aeb-d110-48ac-b257-24be8112b4f1", "comment": "Malware payload (Quakbot)", "value": "38fae8f5364298046017c4e9efb05b61b798878e40319e681fc725083a606d5e", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773282366, "uuid": "fbc94179-00d5-4992-ad71-2a437e939468", "value": "T1BE21D00267A90B19F1F30E721C35F3554723F5A2AE86A35E450090C828E0F15FD79A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773282366, "uuid": "db32fc1d-1095-430f-9985-fea9b6599a4e", "value": "24:8GhJDf3mCLqagA/6w8+0pcpnO4I0aj2MH/hp4HH0S6iHpAmE:8Ghhm2L3b8OpRIfH/hp4H56SpA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773282366, "uuid": "88338ce7-f468-41cc-a8cb-f2be4e162a3d", "value": 1343, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773282366, "uuid": "0e22f00a-8880-4045-876f-374de170bdfb", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "17fe68b6-1dbf-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773284200, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773284200, "uuid": "6aa1d5ad-c7ad-4574-bfb8-da6a69a955e0", "comment": "Malware payload", "value": "5515e574fadc1acd5f48c80df018a05f", "object_relation": "md5", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773284200, "uuid": "88c8cb63-9684-46f4-9016-a75ac54926b9", "comment": "Malware payload", "value": "4d66f2fd835646cfa42098df73fd86994b61a8095ab05f2c56d279697d7054fb", "object_relation": "sha256", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773284200, "uuid": "556d80e0-113c-48f5-a7e6-a60a319ae670", "value": "T1F2D56BA688B1BF13B7BA8E4873341E5D101426370FCB150AB4BEE7C67683975346F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773284200, "uuid": "fb1fae3e-741c-409e-a4d4-09f278ddacd5", "value": "49152:TK0rN4F4Cd6Jag2j0riZgNudjDG8ZX8LSJFTqhvFRBW84FMotq:m0eF4xaDjDONijDG8ZxFT+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773284200, "uuid": "92d74da0-86b6-4bb7-90bb-957181e4d14f", "value": 3000830, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773284200, "uuid": "cd9b0ca4-2823-47c9-b2c1-eb0b5ee4c9f0", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d795d37-1dbf-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773284236, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773284236, "uuid": "eed9cebf-8288-427b-a668-bcba84628208", "comment": "Malware payload (Mirai)", "value": "06995f08ff5b28a65cea2b96cc79965d", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773284236, "uuid": "5997f54a-79d5-41a4-b6d2-2f7ccc7dbff2", "comment": "Malware payload (Mirai)", "value": "3aedf0e24b78ce594978b9c8627772614ad68f541133554dcf33770828c08b27", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773284236, "uuid": "0b3fb3e0-e76c-458d-a2f2-725f7f7b2446", "value": "T19AB3294AF9819B12D5D922BAFA1E518D336347BCD3EE32029D149F2437CA96B0E776", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773284236, "uuid": "cedf61db-d2e5-49b1-a8ac-3dc357b64ff7", "value": "3072:sUCNUz1GvuNJ2dzPRLddN7asoOqPDbCBe6A2V5u6s41:s4gvuj2dztdT7asoOqPDV6puC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773284236, "uuid": "b3792d17-b500-45b0-84e2-951a0e095ba0", "value": 108044, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773284236, "uuid": "0a2babaf-a42f-4ec7-a8b2-830979d240b3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed810b59-1dc0-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773284988, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773284988, "uuid": "da59f488-a405-4885-b36c-94641fd220c8", "comment": "Malware payload", "value": "0051364de4dff00b725c7a3c41904b49", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773284988, "uuid": "a0a45aca-0f39-42c6-9483-6563eb032529", "comment": "Malware payload", "value": "7f3b69ff7887a875a07d98007e4e8ecd20cc71ccd42d43e06c34167192eb2bc2", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773284988, "uuid": "e071ca1e-1567-4192-849b-a3d85f2b6166", "value": "T191D3F95F97BA317572178345F8A6773492ACC133DA424AE2FCB6D25C8FC126201B72", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773284988, "uuid": "810e2424-bd5e-479f-aedd-81b01b9e730f", "value": "768:EZdapEbrTXlP3RNjcXscJGcz74k/tHcTwAl5HL5F48C3A40zPZhJgs:EapArrQ4k2wQ5HL523A4YxhJgs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773284988, "uuid": "1401483d-07cb-45d2-9637-748a04db0daf", "value": 141243, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773284988, "uuid": "55a98d67-9906-4ac9-ac66-c00a57067a86", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "24f322ed-1dc1-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773285081, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773285081, "uuid": "06d2ab7f-8e97-4525-aa67-f3afd6b14822", "comment": "Malware payload", "value": "8b96951ecaba7a113985024c88b177d8", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773285081, "uuid": "cee97250-2482-4218-91c5-cca56688694f", "comment": "Malware payload", "value": "0f767c091fcdf0a9965b942762171e4a64877af3756e6b95abb10fad528dd941", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773285081, "uuid": "09660ea4-b392-43a6-8b27-cb6ae54baa0c", "value": "T1EDD3085F97BA317571178345F8E6673492ACC133EA420AE2FCB6D65C8FC126201B72", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773285081, "uuid": "3e97b4eb-7998-4c28-b5ec-e036bd21080c", "value": "768:tZdapEbrcXlP3RNjcXscJGcz74k/tHcTwAH5Hzy148u/F40E76hYTd:lapArIQ4k2wy5HzyC/F4BWhYTd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773285081, "uuid": "2e9ad2a9-3b6b-4f90-b87e-6a0b51a085fb", "value": 141029, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773285081, "uuid": "b04b9ad6-7018-4424-b5c4-b102b01bf358", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f470b6f-1dc3-11f1-8a4c-82aee05be84a", "comment": "Malware payload (CountLoader)", "timestamp": 1773286011, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773286011, "uuid": "e06eab68-a937-429a-b3b7-be7c936d620e", "comment": "Malware payload (CountLoader)", "value": "72e8a40705dc331694b474a192e12ed7", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773286011, "uuid": "ddd648a1-bbc5-4ad9-9a41-2563a722ea84", "comment": "Malware payload (CountLoader)", "value": "fc9f8cc95039e907d1196a139746694c2795aba489335e83d4d03f92a67c3476", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773286011, "uuid": "f25a8d93-e675-47da-9e89-c460f98f02b8", "value": "T1A5C3E08ED8AEC4EA8F9F7019492F5C4AC98F9112844EC4A07E5E7F987F13C95B0359", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773286011, "uuid": "335c6ab8-1d86-4b0e-bbe7-dde73425fd0f", "value": "768:sTOUFX7t6Yd2OuCaNYq1ylK+VAAcDC39SW3WwaXyKYMSyFIBGK6Pqg1xE243qzr0:vYMS9z2xup64H952DnO7rAOk8V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773286011, "uuid": "1e9dbdba-dcde-4ae6-a5db-181589e09ecf", "value": 118511, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773286011, "uuid": "d74b161e-6a86-4bdb-8843-3ef705ddf2db", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1773288917, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773288917, "uuid": "9c2409c9-5a8d-435d-8431-1a8649cada19", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773288917, "uuid": "538ddca8-e238-4008-802f-44f3e376ca69", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773288917, "uuid": "41ac6b92-9a3b-4b31-aa5c-66f1fb220191", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773288917, "uuid": "dd7ec2be-0b09-4996-86ce-a19d1dd658ec", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773288917, "uuid": "ea16ebbb-f465-4ea9-9a58-c81f0e521660", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "65a74d2e-1ddc-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773296786, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773296786, "uuid": "36e0f5fd-aea5-416c-9705-0b75039047ba", "comment": "Malware payload", "value": "29dcdbbffd0c8c427fa8078b655313ac", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773296786, "uuid": "685de498-2b1a-4758-ae74-47ef36d9cc88", "comment": "Malware payload", "value": "a5929ba468812c04be161d597e4f77fa81c91d9e9adb98187ce8e735ce90443d", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773296786, "uuid": "27cbc9ea-a9ab-4d74-9b45-f3ee3b2a6bb8", "value": "T11A43E619D17F117F3917C8E13BE16B8332D1211FD755E9293EFCA2904F1AD6A8A81B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773296786, "uuid": "8c735496-83ea-49a7-be2e-45a01bbe0f25", "value": "768:e7jFlFvFEFEVEj3QhWV2dqQADyU8Bmhiq6GzvewlWQ1:kj3x2KVC3P2d7U1F7xlF1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773296786, "uuid": "69e89046-2180-4480-a8be-f89365f44115", "value": 57854, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773296786, "uuid": "f995a92c-0efb-4138-99d7-fca56ace7851", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e08fbb81-1ddc-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773296992, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773296992, "uuid": "66165527-94da-4e9b-ac87-4a7ba90a7bf5", "comment": "Malware payload", "value": "993fa3adec5b17ace0990e9d319c45ff", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773296992, "uuid": "d6b3e254-d997-4cdc-9aa0-ca326c54843e", "comment": "Malware payload", "value": "261b63255e3fba65872178d816f900c586e21b1c1058d128e0b8b400e6da95b1", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773296992, "uuid": "b4d35b1f-0b6a-4921-bb45-84aa4b816cec", "value": "T173F27AE46380E40366CE8BA3BF127DE8E46AA97679C4A447D5547BAC78BC513C1B0D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773296992, "uuid": "ca8d22c3-1c58-40fd-b4be-b15ac4d50d4c", "value": "768:smbpGIcyr9oIYxooguCQ78cZvJbJ+kQmpen509ZJyNZHq1MTj:yZ/wkQJS4Zf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773296992, "uuid": "30997c9e-7478-4059-92fd-cabc344ebdd5", "value": 36473, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773296992, "uuid": "acedf742-972d-45b0-b636-3efbce39ba87", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "daf6ba74-1ddf-11f1-8a4c-82aee05be84a", "comment": "Malware payload (ACRStealer)", "timestamp": 1773298271, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773298271, "uuid": "1788a8a9-4d48-40c1-840f-e406569eb7cf", "comment": "Malware payload (ACRStealer)", "value": "d00a547c27f214546837711b18c8c11b", "object_relation": "md5", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773298271, "uuid": "5740a2aa-ca0a-4239-890b-1507cd888708", "comment": "Malware payload (ACRStealer)", "value": "2cd62f3b207feb3f9aeb0ee7ccf163971859a3feb1471162322d0b6b6ae49092", "object_relation": "sha256", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773298271, "uuid": "3dcea878-5b6a-4d01-93dd-2b6945e09800", "value": "T18D759D19B6A501B5F57A5239C0DA1B9FE33978641310DEEF431089AF6D3BBD068387", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773298271, "uuid": "d216c3bc-297f-4af1-b584-bd7e527d01e7", "value": "a049dd7543f375c006c7a9111d389936", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773298271, "uuid": "bb45a5a8-796e-4c17-ae63-b2c5900afedd", "value": "24576:0B03d1pJQu6gbyMS+Xgdl1pdi6sR8Dv2EBNdXnSb2jGfhWMyLZLq1hSXg5gu2:jyMS+XgdyEjFSqsWMyLZu1hSYgu2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773298271, "uuid": "8b687074-eb9a-41dd-88bd-af15d4492c8e", "value": 1637888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773298271, "uuid": "a811df8d-3e58-4e94-a59a-ffcca60842c7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1b9d4f49-1de3-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773299668, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773299668, "uuid": "61d28948-01c5-433d-8502-9ea835e5466a", "comment": "Malware payload", "value": "b3ee5a245890fd520e8ca1397c25a03c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773299668, "uuid": "01798e32-3a06-473c-9947-bb68eec158ce", "comment": "Malware payload", "value": "4d87d9b95d9e894ec23fa033720d955356baf292f373766ef22e346320393bcc", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773299668, "uuid": "7f5168ba-f6d8-4005-ae4a-529b356e79f9", "value": "T1CB8308327589582A210B028FD263336C70FFD8E2D611E5B6F6F922344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773299668, "uuid": "ddd3a1d5-deb2-45e2-814d-cb477c707324", "value": "1536:XJyp/QdMqpYJKNoCtpxD3t2ZSDXpdyr2pbnyWaSVN/:XEKltp9t2SX/yr2pbyWbVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773299668, "uuid": "ec558516-80e6-4a11-8a23-beaf65f816b9", "value": 85051, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773299668, "uuid": "9378d592-8a33-452f-b9b0-05352004e58f", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64bb1b2c-1de3-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773299790, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773299790, "uuid": "8e80c336-7588-49b1-adc6-8b0ef16c157b", "comment": "Malware payload", "value": "3655384bb92207cee36a823c8ffdf2b5", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773299790, "uuid": "a112d025-724c-4f4c-a305-c45d57a45e20", "comment": "Malware payload", "value": "2383a0928584502d0e7188d2bb2b2195ba40e4fe26360526c9070e7b01c53428", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773299790, "uuid": "3e48965a-989e-490f-b067-8b6037b627b4", "value": "T10C24AD2A8A1483647EA1125F92B9E57213354D7679E4C24158FDE3C0CEEBF8FE6927", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773299790, "uuid": "a81f6a55-1eb6-4cdc-85c0-fa9fd7018699", "value": "6144:WN3N0x7L20dUma7JEgyTRixe15l2GHj6gTGk:WNWx7LLSt7JEgyWeTEG2qGk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773299790, "uuid": "a4600c2a-17d3-4999-88f0-b60579aa4d48", "value": 223313, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773299790, "uuid": "a08fe810-9254-487e-9951-0aa37902f537", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e7715330-1de4-11f1-8a4c-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1773300439, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773300439, "uuid": "0f100ae0-8bf8-46e4-8114-0d422564e4a6", "comment": "Malware payload (CoinMiner)", "value": "6ff5c7697f6488ea4e3a94fe281a599a", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773300439, "uuid": "ae7cada6-36c1-4916-8692-5c4854104439", "comment": "Malware payload (CoinMiner)", "value": "4a33851bcbc114c5bb20ebf2b4afbb40a93767d4b89cb8503bac34f03c278ca6", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773300439, "uuid": "b82d7b68-e48f-48e6-afcc-d4c807b5b5e0", "value": "T1243733BE1538365AF8CBD53AFC0C78973827CDC0085AA6FBDA6B146AD0600B65F907", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773300439, "uuid": "8093fcda-31c8-4f08-91d9-ea3745411d66", "value": "6ed4f5f04d62b18d96b26d6db7c18840", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773300439, "uuid": "9db4b5ad-4478-47fd-bd88-e8c9399409cc", "value": "393216:/24aWD0K2v40j4SUY5+kPKAbUJn9loVT3qajbUhPmpBOvyVCh86xrX:/sacnUYZPKXn9lOtMmpP6lX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773300439, "uuid": "6b2c2c76-2999-4f82-8b1c-a69629a0449e", "value": 23686144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773300439, "uuid": "742982a4-f1b0-4b0d-8280-780f3cc09e80", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c2b1cf3c-1de7-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773301666, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773301666, "uuid": "331c466b-7aaf-4b21-9185-71c9f2101175", "comment": "Malware payload", "value": "631f3d0d384fa640edfc46b947469932", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773301666, "uuid": "18720876-4961-4172-bdfc-f1a443f63e66", "comment": "Malware payload", "value": "e12aae679a43c26bb331c97d8ac451e5022e297a519c6fac65b727e4049023f9", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773301666, "uuid": "4bebce06-3b25-4c81-abd8-0ce4aee90c47", "value": "T186C08C26751E3C0C96A322B812C36A90D082C3304D9A1900C640020331C31168AC33", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773301666, "uuid": "fbb7222b-0591-4806-8001-ebb5bc9d4ee4", "value": "3:qVoB3tUROngsoMHXboAcMBXqWsMgs0U9ClIVLLPpuwcWWGu:q43tIigsoCXiMIWDgs01lI5LPpupfGu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773301666, "uuid": "f949de7c-39e4-43f0-a8a9-6ae1f0091c04", "value": 153, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773301666, "uuid": "bd92fd54-95aa-4a17-a740-e169453f6fb3", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c97070d5-1df2-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773306402, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773306402, "uuid": "92173310-498b-4873-b657-3370b7d5f786", "comment": "Malware payload", "value": "27f59bb0ef8bd675132d4b13bdd78cb4", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773306402, "uuid": "1d3e42f0-9e85-4aa6-8d1a-82ef97677034", "comment": "Malware payload", "value": "f577799e0e6b69cca4101f7d9ef6c2eddee52a085e18e56421bf6fca7934dd90", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773306402, "uuid": "ff562e02-68c7-4e87-ac73-e67c67422daa", "value": "T1FC34BDB76A011E601FB9427E1F21F1A63BC768790D24097C66415FAE7A0C82DFFED2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773306402, "uuid": "ae0a79d4-a56a-4919-b454-a496b9215229", "value": "3072:cGQ7ZoKbYKV7Gz3hYzTY7S1PCnv4hPlPLWGd0XjRjJ5lrw9646N1mdGGt:cNoWyz3hYV1Trrd0XYkdD/Gt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773306402, "uuid": "4d6bad0c-2568-4f74-b107-429b29d82a6d", "value": 239679, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773306402, "uuid": "5ce3a7b0-f22c-48ee-b38c-f287b3f2f891", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60a52c74-1df5-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773307515, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773307515, "uuid": "1a486817-ffc0-4680-8522-7d072982dcbf", "comment": "Malware payload (Mirai)", "value": "3228e6783d7a1856f5978d7093cbbb4d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773307515, "uuid": "630529cf-e50b-4415-8741-4465cbb7cc3f", "comment": "Malware payload (Mirai)", "value": "7b6143e37d3e15fe44fd446933db943db597e65ff27a5cbbad4490f13117be74", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773307515, "uuid": "5dd746fd-954b-4ee8-b8e7-70ea396420fb", "value": "T1F4833AD7F401CDBDF44AD6774423490AB131A7620A831F3A636BB963BD361A85933F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773307515, "uuid": "e7731c42-1b9f-40ef-ad7d-f54bbcdec4a6", "value": "1536:5d8Q7Iu3iHlnLv1tUpaU0Q3oj585b9s8pohaW7hn+u0MFWGp/cKzGR:PiFnL9uYU0Q3ojm9jW1nRr/cKSR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773307515, "uuid": "6a07251a-00c5-4eaf-8b38-6d2ac3ac0e90", "value": 85020, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773307515, "uuid": "e025a4bd-387e-4d9b-8377-c3b987410993", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ffa6f0e-1df5-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773307594, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773307594, "uuid": "270a03ca-2e46-40c1-90d1-be96c0578c17", "comment": "Malware payload (Mirai)", "value": "f77a7d33a2d575139ff91fcc26c5a876", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773307594, "uuid": "969cd5dd-f033-4a91-9fab-4e985de91eae", "comment": "Malware payload (Mirai)", "value": "f579a3bbe90efb0e84cce12d8cc7aabea43a155ef43f7a5df3c3fcfd8fba978b", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773307594, "uuid": "78aafcf6-43b0-446c-adae-efc1d4a1da33", "value": "T1D9733A91FD818617CAD112B7BB6F428E376613A8E2DE3203DC266F11738696F0D7B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773307594, "uuid": "c83ae49c-1588-4126-a87a-5b9357c624ba", "value": "1536:oBPxr3uEd0oCGu3U5T88mInVx9NiDn0CF3hwDHHbpK0l4:oBPxreEd+KTvmI7X60CBSr7pbW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773307594, "uuid": "842e4f9b-d343-401b-835d-69e223c91075", "value": 77304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773307594, "uuid": "720b762e-0fd5-4eaf-993b-dae2011e5847", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9005d7ef-1df5-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773307594, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773307594, "uuid": "e102e8d0-2262-4775-92d2-baae3e999b9f", "comment": "Malware payload (Mirai)", "value": "369163d775390f4b04477c3913482c5f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773307594, "uuid": "2fedcf80-9bb4-4992-bd30-3ff656e5492c", "comment": "Malware payload (Mirai)", "value": "0b1bc1e5c0f2ff8510bf7d6013348df8a4d3a0cad4018300c8ec83b2f35f9224", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773307594, "uuid": "f160117b-6aa3-4ce7-9ad8-f0344b08c328", "value": "T119A30809EF654FFBE86FDD3346E90B0125CC551A22B83F3A3974D828F14A64B1AD39", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773307594, "uuid": "7f72c944-63ec-48ce-8c12-cf829e52bb81", "value": "1536:EplafIsbHEvyxGFbY85HkKrfMKBmIWKizR+bZFDZBMfi2dY:EplafIsHGFbqhzgbO9Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773307594, "uuid": "310109ef-d2d4-4b87-82c6-0fc9f78d8e4a", "value": 102096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773307594, "uuid": "b54979de-03c8-4b7f-9216-5bb72574f7ab", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1773310338, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773310338, "uuid": "f8ee64ee-8281-4ff8-b030-5623f86f9b7d", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773310338, "uuid": "0ba4aa87-7471-4f01-a0c3-f08b14f0fe22", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773310338, "uuid": "e7c7448b-14ff-43ae-ba45-15cd31b9eca1", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773310338, "uuid": "d3d5c72d-eef1-4173-8392-3260e2e01346", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773310338, "uuid": "2f179bc5-a50f-4243-9240-c9c38d20b0a4", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "55f146da-1e14-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773320811, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773320811, "uuid": "9c188cae-1667-4f96-b255-dae301f81a71", "comment": "Malware payload (Mirai)", "value": "0b11aa796a22882aac8950b1d40d7b36", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773320811, "uuid": "149c0556-36d5-4cef-aa3e-d02d9dda1856", "comment": "Malware payload (Mirai)", "value": "200c590a998171acaeef2f0c403159d0be008ba6b774757ccc5f59b9684a66ee", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773320811, "uuid": "dc3a5c7c-213f-473b-b011-e551ba298c90", "value": "T186936C02B30D0A47E65B0FF03D3F67C9839ED6D051E4A589361F9B899271B321887E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773320811, "uuid": "401eef42-9f3c-42d9-af96-cb7acf9ae99b", "value": "1536:dn3xpZbxSUsIBppBaUV9UXlRjtGmVRy/AVwNIRH357g+q6f4BWe7lK:dd9WIBppBlUXlhoyR3VwNU3NgK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773320811, "uuid": "9778e7f8-16c0-4a52-a69c-742e56286f85", "value": 93924, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773320811, "uuid": "627cc2d7-c729-4245-845d-89165541ca28", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b359867-1e1b-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773323853, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773323853, "uuid": "5d9ec0b8-04f8-487f-990a-d59955c9ee19", "comment": "Malware payload", "value": "0f8dd46eb4fe088bb39a3b004dd64590", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773323853, "uuid": "0fbb0555-eb88-4477-a603-2aaacd1f2e14", "comment": "Malware payload", "value": "a89063616d2abffb19ad0a527190ada55eacde75af675b937ec7e420c95cd2f5", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773323853, "uuid": "ad9151ed-da0a-4490-bfef-aaf1128e272a", "value": "T1E093093274AF052A166F436E80427B1CEBA982DBC600DBE8F4FD51595FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773323853, "uuid": "98307100-dcfc-46fc-b23f-6724cd3bbfbf", "value": "1536:pmyp1tF/uwMmAIa14oXusIcepeV7tb73WAxCJCStkb5fv2v05x9krfifEsCZKM6x:pfQI7zEStkbFv2v05x9kriEsCZ76Yy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773323853, "uuid": "38f04472-14b2-4290-a42c-00b33a0d2bac", "value": 96308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773323853, "uuid": "ee006c81-c336-4f63-8a9b-f88f3994e8e7", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8547f79a-1e1b-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773323897, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773323897, "uuid": "14384a5c-5f4a-4cff-84fc-34c5efaa6bdb", "comment": "Malware payload (Mirai)", "value": "b5cd74b23fc10995cddcfd95192c727a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773323897, "uuid": "9dba2c96-d7ba-4360-a194-a5afc98714de", "comment": "Malware payload (Mirai)", "value": "a9ad2e167072c0592f7c643c27fec2e3e659f0f1ff1bb382e3bdb64ec691973a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773323897, "uuid": "9fc7d8b2-2acf-49ce-bf81-c9867d5ee775", "value": "T1F1A339D7F800DE7AF80AD37B44970906B230F7A10A8317B63313795BED391A95926F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773323897, "uuid": "c1320797-7403-416f-8ea8-7b3b6124e606", "value": "3072:FcVHjckN3lWhEwwdLkn57FjBeDDYJujycUSjRP:FcxjW/cLknZFQDaujycZt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773323897, "uuid": "c2f04902-eb14-4aab-99ae-6ebcc9187f22", "value": 104176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773323897, "uuid": "f4019e8e-d21d-4106-882f-6a4d78ff85f1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c81278b3-1e1b-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773324009, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773324009, "uuid": "785f9ce9-1150-4f75-a5f8-48db3a97dd57", "comment": "Malware payload", "value": "79edbf77743facf573d0cddb645e5560", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "cmd", "colour": "#965958", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "salat", "colour": "#5e6c8a", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773324009, "uuid": "dbbaeed7-a7e5-425a-bb4d-f5c8eae96a8c", "comment": "Malware payload", "value": "74d7086dd92cb9c1d87606203e2e63c78cbce6550e202e1de1a71cef3f59c41e", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "cmd", "colour": "#965958", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "salat", "colour": "#5e6c8a", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773324009, "uuid": "0dab3136-c56f-43e9-9676-d58f8def2eb2", "value": "T133359E15B2B500E8D4BBE078D697E41BEA313C5407309AEB63E04A591F77BE09E7BB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773324009, "uuid": "37828ab4-8516-4e99-ac6e-f6cb6259ba09", "value": "68c274f6189bb8607fcb7f4844a05ad6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773324009, "uuid": "73e499ae-555e-416b-8c12-22759e4b5ab9", "value": "24576:5Af3UyUFFEDw/A2RDbhTt0W3X8uC+ynF1UM+cmz:5Af3/w/A+dBR3X8uC/nF1URhz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773324009, "uuid": "6cc04c7a-702b-4095-907b-5aa4cd60ed11", "value": 1126400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773324009, "uuid": "8fa102dc-f4a4-4d65-99bc-64669d52a915", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cafdaa09-1e1b-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773324014, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773324014, "uuid": "26401394-8a3e-4410-a8f9-04ee364e457c", "comment": "Malware payload", "value": "5d667ee8a8833a8d0d88e74baf40b481", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773324014, "uuid": "8d431e62-4c41-43cd-b084-5d1d49bb6ee4", "comment": "Malware payload", "value": "04f61d92f0723aadbd6410e329197b7a3d245b8a31ae5f71224946aa83ef3db8", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773324014, "uuid": "b50b32a6-d9d4-4ac7-a3b0-6c7e5ab7e443", "value": "T1F6273310BA992569E5A98034C2032EB2FE36B0B547316DEF929061743F7E690B73F7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773324014, "uuid": "81b79020-e863-49c2-8df5-fc457e83baf1", "value": "70afb1a5b65a8d6233b9b5b9a59ab058", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773324014, "uuid": "3c29e7c5-817a-4f14-b08b-4fbc596d8ee3", "value": "393216:R7QJaHN1MyySJ9ihjYB2++zsxs/WMc37E4EqhJH0Je7/RAx2:WY05SHUjOUxc3XqJs/RAE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773324014, "uuid": "2bed80ea-7dbf-4563-905e-ca90c6c42aec", "value": 20667280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773324014, "uuid": "b6e7f400-c349-498b-8474-aa5b6cd96c01", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec1d5572-1e1b-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773324069, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773324069, "uuid": "77c55b92-4d3a-4425-8215-9ce54cf1c502", "comment": "Malware payload", "value": "8f4278369ae0c64cd92e07d1409a6368", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773324069, "uuid": "273f3453-de91-49cd-8ee2-ea6c5b8514f9", "comment": "Malware payload", "value": "6752bb18b980918e9e566e9abdb4ed5743cb286d489ac4503ba292a583197e7a", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773324069, "uuid": "eb6bfc2e-0852-4d38-9e02-8c52c7a39c55", "value": "T168D633D0F6CDEAF3C34E953EA826836F63643B5582129735EB01FB24759B4219D683", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773324069, "uuid": "b9db73b8-bfb5-48a0-821b-584355b24f83", "value": "196608:cVwzF++zPie1fBM5dyznmEyhn53tSAkKfA+Qp8qBeKVBP6lV9deWLKGPWPw:Iw5iQi2mE2n5NfQp8qnBP6l4u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773324069, "uuid": "e49bf544-e729-4d2b-ba22-2f6796a077a4", "value": 13016824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773324069, "uuid": "4e9969f7-6255-4976-91b8-a78b987d2a25", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "edfed252-1e1b-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773324073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773324073, "uuid": "33bc18c2-e86e-48ab-a68c-cbbc479e4092", "comment": "Malware payload", "value": "27c79074f0043865956d57b01434328b", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773324073, "uuid": "7107addf-2d3a-4d85-b589-656e07840a3c", "comment": "Malware payload", "value": "02200256f5035a922b59de58707a31ce18103e0f0feba54489d8f6a2e5253167", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773324073, "uuid": "e6ab3c69-cb8e-4ec4-a71f-37ce61f2623b", "value": "T192D274E87A155E8825A7359DEE11C885EA59807601E94800F47CC85BBFEFB1DC0E6F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773324073, "uuid": "229c61b7-80ed-443a-a0fa-cc03e86f3599", "value": "384:XuvScUStD7/NnXbfb00ydfDfnIORcnKBF/C53RdPggu58VBa6KyMaZsZRy3:I5b00yd7fnIY0K/GdPg2VIzyJ663", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773324073, "uuid": "b4cb10cc-d0fb-4a9b-ade1-488d8f4e238b", "value": 28661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773324073, "uuid": "813ce2d6-dd92-437f-82d0-e0e87765bf35", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc03c682-1e1c-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773324526, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773324526, "uuid": "4d9cf47b-e6f1-4dc1-a625-52fa69c2a10b", "comment": "Malware payload", "value": "0af76995c8736981029defcaa742af34", "object_relation": "md5", "Tag": [ { "name": "64", "colour": "#aa8ece", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773324526, "uuid": "49886fa8-4d8a-4007-8f9a-1ef1e08744ab", "comment": "Malware payload", "value": "c845b7d865b6b365181e5a2c95c7230914fbadd44bffcb8a637d98d9cbaa15f7", "object_relation": "sha256", "Tag": [ { "name": "64", "colour": "#aa8ece", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773324526, "uuid": "52f4b282-02af-468a-9adb-c7bf815fd2d5", "value": "T176B633342BE00E3BE8DD1A7BD46512A5A4B6DD6E7C5BE38E140179E29F3A050D7031", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773324526, "uuid": "d9e7499b-47c1-4f41-9c41-58a9c6b9bd91", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773324526, "uuid": "89b73866-2031-4968-b678-88162c0e5678", "value": "196608:LVfQfJX6A05oZr4beIf7jWtH2GaH1zmo1jACELuArdLNqQ36lOxmzwb2BJdA:LV4BkU4X7j2mzmoJACEL1rdLNqNbzwbF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773324526, "uuid": "faaacb0e-fb69-4886-94a4-ee4b32c016ca", "value": 11095552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773324526, "uuid": "92354735-b9d1-4086-b76c-97d03e9c7023", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1847aaa5-1e1e-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773325003, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773325003, "uuid": "226f19af-1755-4d89-9998-a52b0f199f4f", "comment": "Malware payload (Mirai)", "value": "350d858d9000a76f88127c5bb4aa3c6c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773325003, "uuid": "eab4910b-bd9f-4dca-9da0-75f3b4d33226", "comment": "Malware payload (Mirai)", "value": "fb5f1a4648ce0a36fddc817d31543ad84c4034e1c1bbdb265d514b689843ab8b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773325003, "uuid": "453746ed-1f77-46a9-93d5-ee73430a0299", "value": "T125A31859F9829B12C9C106BAFF0E518D3313176CE3EE33169D248B74378A66B0F7A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773325003, "uuid": "4a8a9c5a-06dc-40f0-ba34-123105d4d475", "value": "1536:8qn9Kw+ku6wH+FGB73DYiRsNpaLqIOXMXiZtH4uKCq07Wa5ZUfj/We7Gx:R+kpGB7TRsNpaLEtHHKC3ya0fQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773325003, "uuid": "23fad65b-8e85-439e-9c0a-22e752c673c5", "value": 104724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773325003, "uuid": "58f144ee-195e-4d9c-a391-7c192dc7fba7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "630d494b-1e20-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773325987, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773325987, "uuid": "26b14196-e066-4491-82a2-f78d5f2cb4a9", "comment": "Malware payload (Mirai)", "value": "2dd338b795b26cd32c9f41844775c31c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773325987, "uuid": "36c30636-2231-4428-a173-8448e1a35069", "comment": "Malware payload (Mirai)", "value": "25b476b41ff83ed09bb318ffd8716cfbe1739415fcb6cb50e9623f4b7f468ef9", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773325987, "uuid": "f61e3d65-0cbe-4d99-9a59-583bef46eac8", "value": "T1F9C3FA5E6E329F6DF16DC33147F79A20D35823C623E1D685E2ACC6055E6038E681FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773325987, "uuid": "4e0c06eb-df34-43e8-93a0-7586db906c6f", "value": "1536:DT/sAACw/FMdfdmrWLzYKDkG96O/aRX9Y1IfRA66OuJ11rpEzKdl3t1Ke7GD5s9b:DzzAf+AqLyRX9W7Ezilfcs9RB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773325987, "uuid": "93197b09-cdad-4102-af7c-f8b81b6ae2b7", "value": 119956, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773325987, "uuid": "a31e8f8e-891c-4f76-8937-ed6da4ef7368", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d15ef8c5-1e21-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773326602, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773326602, "uuid": "a4bb0161-b74e-460b-acea-ae3c137d5666", "comment": "Malware payload (Mirai)", "value": "ba1ba4dad35755e015a33d7acad8917e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773326602, "uuid": "fc7f1e91-99a1-496e-91c5-7c905a9f43d8", "comment": "Malware payload (Mirai)", "value": "bda9a36cb3e011954475de3b0d337f0fd0734d2da9036dc31ff32d2d592a4e05", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773326602, "uuid": "02ac14f0-7a16-42d5-83d8-3bc7e93775db", "value": "T156C31A09AF620EFBD86FCD3742AD0B0624DC5A5213B97B3A7674D828F54958B0BD3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773326602, "uuid": "0035edef-40ef-47f1-b253-6e2b63874c0a", "value": "1536:aAdJsfhqiYfbXW6GS3/hFC+Ep4O1VsUF4DFzUfFZpg/sjchCH6zzSBn8p8We7QBH:a9fhbo/GS3/C1VBF4DFzuFtcmHt+SZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773326602, "uuid": "4c358bba-d47a-436e-9d5f-1759843a17e7", "value": 120308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773326602, "uuid": "e5c73fa9-d1c1-41ba-a0be-b59fb7309521", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a747a68-1e22-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773326832, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773326832, "uuid": "21692749-9836-44dd-b921-fd3b7396c84d", "comment": "Malware payload (Mirai)", "value": "1d74fd125e8a8fa29ef5c990f4811899", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773326832, "uuid": "12c3ebdc-f059-41d5-b7e2-f29489c9325a", "comment": "Malware payload (Mirai)", "value": "ef9e367b6b48575cf46ce6bd36771647a4cadfe0a3d325032ad2a9e16aacc871", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773326832, "uuid": "fa6d3720-2b4e-46ed-a073-db8ef936662b", "value": "T1E5A34A337E324C2BC5C0657636E74326E5FA439F50B8951AFD701E8CBB6A6103217B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773326832, "uuid": "4d81de5a-7d43-40f1-87a7-24fd0652b8d0", "value": "1536:oAMc70WFJ5gwn9JjJwJB1EPQIzZn9tgytDo75QtTv0IlEtSNrEGe7jW:oeUw/jJGB1EPxpJoVgyW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773326832, "uuid": "a00dac5e-001a-4b1d-b109-336c16f2b583", "value": 100580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773326832, "uuid": "6bcc1a4f-4171-4c3e-ac61-11aaa7ba5966", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ddb191fe-1e22-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773327052, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773327052, "uuid": "a28f424b-5d91-465c-9d88-7530586b4429", "comment": "Malware payload (Mirai)", "value": "b7bb37f2a3bb7abad5338673ab9da30e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773327052, "uuid": "9a3dcbbd-6b78-4f54-bd7c-b3f06a452cfe", "comment": "Malware payload (Mirai)", "value": "98c578324fc6991692d2929af4e3250ed7f7216d088841ecae91e44741d3e261", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773327052, "uuid": "de5264fa-8638-41fe-930c-36a7a9e9eb54", "value": "T13B737DCAE643E5B1E8130531813EE7269275DA391024DB4FD7B49A37AC36904FA1B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773327052, "uuid": "d55763ce-b9e0-4ea8-83c0-5c5037ac3d0d", "value": "1536:m8DA8DccdWmytllnwplWUB7W0AJYbb8etLjSWedXauc:RrccAmynlwLWkXWEFpMVc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773327052, "uuid": "1cb8f60f-d9b4-4ff8-aff8-88b0d232ace8", "value": 80008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773327052, "uuid": "c4236ea4-2677-485f-a269-d6ce538a0438", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6443a951-1995-11f1-8a4c-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1773327727, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773327727, "uuid": "795db750-4b2c-43b9-87b7-725f76d39a88", "comment": "Malware payload (ConnectWise)", "value": "6a6033480f273b218206de691036a2a1", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773327727, "uuid": "3408f40c-0b18-4cbf-9752-69fa127b8c83", "comment": "Malware payload (ConnectWise)", "value": "302e42beb59e7f9e5695e97fc188cdbef735cdee5f3c44f080e5e52d6e2df995", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773327727, "uuid": "a4043aff-d9e7-497b-8d32-aeda9a2e441b", "value": "T12B24136B6747983EC089E072B105A1C47B24191C6A08EBBA5C5BDCCB176EDF6078B3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773327727, "uuid": "76f423cf-7b4a-445d-a2c1-b0780a1c5ea0", "value": "ee53c10aff1d01eafea53328179e33a2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773327727, "uuid": "bb90dcf1-288e-4b5d-8fcb-84c003b8e81b", "value": "6144:pfU3fZy3q1Oh3HbSTp40B1EYdaHF5ZlFsrDpZeW5:BU3fZWq1OdSz1EYdVR5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773327727, "uuid": "d301a32a-ee2b-47b7-99c0-88b7533a42ca", "value": 215552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773327727, "uuid": "877f7d00-ebfd-440c-8d50-e8ebd6bdce05", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8895020-1e24-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773327875, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773327875, "uuid": "bcf92f09-cbee-4eca-ba27-2d3f8e11fd38", "comment": "Malware payload", "value": "53fcfca9b51007a45c1976226a8576e6", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773327875, "uuid": "1ca13396-7a70-4d69-9939-3af73ecae616", "comment": "Malware payload", "value": "90ee452316ead54cc0c39ec7bfcda6b627dd4c6aaa9b9f64c6cfb41f9b426112", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773327875, "uuid": "3411ddef-71f6-462a-a0cc-24f98aa86d02", "value": "T17C8308327589582A210B028FD263336C70EFD8E2D611E5B6F6F922344BA5EE135B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773327875, "uuid": "3fd4afa3-8b45-4dfc-91ca-ed723e7555cb", "value": "1536:XJyp/QdMqpYJKNoCtpxD3t2ZSDXpdyr2pbn9Wa1VN/:XEKltp9t2SX/yr2pb9W8VN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773327875, "uuid": "e7d7df1e-fb89-47fe-ac8b-afa5f63cc66c", "value": 85051, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773327875, "uuid": "30cfc128-8c44-488b-b8e0-ff3df303afad", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16331aec-1e25-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773328006, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773328006, "uuid": "b7f94c99-6f46-4dbd-a15d-0a682ab1987e", "comment": "Malware payload", "value": "9eca5bc1dd7f6cfa2830bd1604a5b724", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773328006, "uuid": "c40d013d-7525-434a-a1d4-92a04bd3c77e", "comment": "Malware payload", "value": "189c700d4607e9b5f1f3858070b98c796e818ee6409b1a4f5a639cec6b898667", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773328006, "uuid": "af81f24c-4c15-4ed9-8877-c11af63d710d", "value": "T1CF2733A6FB89D80BE8F3833347B5452625059CA68747D7234908B63C29B3BC49F65F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773328006, "uuid": "b46a5ae2-718d-4f50-ba79-fe0216814ebb", "value": "393216:A62xwNSsf22GScg3AedhmP6Kjd61J6wZDvR5L0733G86PNx78PkRA2IX6a+OD:A62ddgfwP6KJw547G86FxwiA2a6u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773328006, "uuid": "139c8736-61bd-4f08-ab0a-e1be0de30ead", "value": 21955169, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773328006, "uuid": "0d3c41a4-2467-4be2-a64e-7d2f6cdd69d0", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ab3eea2-c4fe-11f0-85ba-82aee05be84a", "comment": "Malware payload", "timestamp": 1773328146, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773328146, "uuid": "56e4275f-703f-47b8-a11b-2e4e328a4008", "comment": "Malware payload", "value": "5bdafbd03a62b7905a0ae1ed26277a7c", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773328146, "uuid": "6facdd2d-5005-4433-8353-95dd27906a73", "comment": "Malware payload", "value": "50c063208801f6250ad0984212bbff667fa4b979b5443a639b24bc5bbdce0b5d", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773328146, "uuid": "cb3eabbf-870d-4030-a177-6fe435eab3fb", "value": "T10592A50267DD472AF17743386DB307142676FE579EA283AE25D8121F6E22B100CA3F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773328146, "uuid": "3ce8c1fa-d7ac-4159-9972-c270a7a412aa", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773328146, "uuid": "0985fccf-f8be-4f73-8203-072f7ac0b9d7", "value": "48:60bMG7ow3k5bkJV8bAPIk+DRiMOul5hSbqnvpfbNtm:7HoSKRRLbwCBzNt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773328146, "uuid": "69c42420-fabe-4cee-9430-e4b41e444e46", "value": 20000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773328146, "uuid": "5888b8ff-5e61-4952-8fba-4ddf4247e4b6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f363ab21-1a2d-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1773328147, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773328147, "uuid": "2487774b-8b53-4fe0-887e-1c23b5d24f10", "comment": "Malware payload (Vidar)", "value": "3544057ad6e754caddbdcf73d4b323ef", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773328147, "uuid": "22a28ada-ab13-4a1f-8ccf-b5e0dec30af8", "comment": "Malware payload (Vidar)", "value": "f22b213447db1a67818bfe353b6c31cdeb9b2e5e9ceb0dae1908c42499fe9873", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773328147, "uuid": "213a4921-2f9e-486a-9ff4-ef263fed881a", "value": "T1022422D1A095ED6DFD14F133F2CCADB659B149300EB1E7D1683B1C69AABC231438A2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773328147, "uuid": "fbe2c239-8b52-4553-999a-42489f18505b", "value": "ee53c10aff1d01eafea53328179e33a2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773328147, "uuid": "a3ee4228-69c1-4551-ae95-204483946229", "value": "6144:EnXKZj6BpzfjQ8bNZoqcZy09xGWZ0bY+m:4KYp/Q8b/ovyZWib6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773328147, "uuid": "66cc8114-d501-4e1c-9c20-62f807860bd4", "value": 215552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773328147, "uuid": "913fcb04-3cb6-4332-a817-af227869ef5e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90500cd2-1e25-11f1-ba1a-82aee05be84a", "comment": "Malware payload (NirCmd)", "timestamp": 1773328210, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773328210, "uuid": "c0eb4cbc-42a5-4dce-a640-f44607fb392b", "comment": "Malware payload (NirCmd)", "value": "f6689f4b04cb56b319b2f05d7e792238", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "NirCmd", "colour": "#9081ea", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773328210, "uuid": "634ba908-13e8-45f3-befa-5176dc99449f", "comment": "Malware payload (NirCmd)", "value": "c7aa62e276181099f1b258c5e675cec3a87805c9e7a3cfc18d2be5fffbfd5397", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "NirCmd", "colour": "#9081ea", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773328210, "uuid": "184d586d-0a9b-425a-a173-e27094027b48", "value": "T109A52342F8C485F3C4511C331B65A7616A7DBE202F268EDBB3856B1DE9614D0EB31A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773328210, "uuid": "484c11ac-1367-425d-b979-69371136a3a7", "value": "12e12319f1029ec4f8fcbed7e82df162", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773328210, "uuid": "7563b755-bde2-4a70-bbae-8c8dd7050c9c", "value": "49152:ABRNTpc8iYM5pF9UBB6jdLXsuuX4/cqZIiQx6lSONx:afTFM5pXUBB6BLXTuoEXx6lSONx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773328210, "uuid": "3393fdc2-bf07-418e-9f6c-5d1122dfc555", "value": 2110512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773328210, "uuid": "a73ab5af-43fc-4015-8e62-1748c9d4dd6d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "252b8dd7-1e26-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773328460, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773328460, "uuid": "d138b9bf-4052-47d3-8fb3-bf1265d60d38", "comment": "Malware payload (Mirai)", "value": "6e2c259c6e21821943c78d28a6891c6d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773328460, "uuid": "1d32bb36-9c45-4cf2-b2a0-43ee977a1ba9", "comment": "Malware payload (Mirai)", "value": "8c37b4c3fa281663b98c4e696c3252124a42ba4940db274a235e3a39ee70975d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773328460, "uuid": "88feda5b-9006-4169-ac24-996318c854e8", "value": "T164C32859F881AB02D5C625BAFF4E418933531B6CE3EA7202DD248B3533CEA5B0F765", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773328460, "uuid": "09009d50-c455-40bc-adf4-d5e28e69781b", "value": "3072:JIok7g8WYA9azbeK+c3Oep5af/cRLMprMan:A6b9azbeK+yOeXscRMprj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773328460, "uuid": "828c8b5d-d411-4ade-80e1-36626b9adffe", "value": 120292, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773328460, "uuid": "bf8c801d-a06d-4dac-92cf-e6b0a0c83943", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e44556d-1e26-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773328610, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773328610, "uuid": "0fc01f06-1027-4a73-bd7c-e7c73dc69b7b", "comment": "Malware payload (Mirai)", "value": "c1ba7d5e5620c94e5a5e4a514e8de76a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773328610, "uuid": "0ba7244c-e3bb-4545-ae17-0652c215a912", "comment": "Malware payload (Mirai)", "value": "f7c79b1807ae4a44a910289c19235ba158bea7b7b9b4e381657a0db1cdbc4c7b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773328610, "uuid": "04d7cb79-3916-4b31-8ed0-a95deb41a898", "value": "T116932A91B8819613C5C5A6B7FB5E4299371A4368D3EB3203AD244F75338F89B0F3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773328610, "uuid": "789532f3-d16c-485b-be62-f54ea2ba2a5f", "value": "1536:agniuW2lXzOrDcpTugnyXfospKfU061wBU9VsEiudG8RO/IWe70n:r3heDcpTugnyPoGKfJIVeB/n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773328610, "uuid": "a1174ec1-84fc-4475-8555-91032d6a132e", "value": 95564, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773328610, "uuid": "a017b556-ff62-45a8-8a14-7bebdbdb718f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13767c2a-1e28-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773329289, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773329289, "uuid": "e9241ffe-6c0e-48b9-96df-2d3281e43978", "comment": "Malware payload", "value": "dac201aed4ab4a7ecefedf5c162331be", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773329289, "uuid": "df95075a-2e48-4348-acfc-edf1891e0126", "comment": "Malware payload", "value": "bd0609448235061c67aba5fd59ea3796bf3ab67b0e356b55491cdcf0c55a4d45", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773329289, "uuid": "1ae99423-8930-4c8b-ab35-24717fc377d8", "value": "T14A82D0E1D18F50EEBE3E6AF14E5D52E52E16D7AC8D2416B04806CA3BC53B542C1C1A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773329289, "uuid": "fb85ed51-bab1-463c-82ba-071a9704736d", "value": "384:43MF9fQ1ocxKSPomm4gPCZRFnte2i4LPY2RNrPHK6W4pA3bBOp+lM49bn:43v1HPomPl31teQLg2RNLq6L+3bDdpn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773329289, "uuid": "08644abf-065b-4928-b5a3-887c2249561f", "value": 19200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773329289, "uuid": "187c990e-7436-49a9-b9cf-03e87b04072e", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4cfd5a36-1e28-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773329386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773329386, "uuid": "8d1582bb-0d20-4c50-a025-04a12b871e9c", "comment": "Malware payload", "value": "361e40a7ec42d8e124730196af0ae8ae", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773329386, "uuid": "166c4ffd-3aab-4d8d-bcbf-01ec86350d12", "comment": "Malware payload", "value": "f36b31925567fb4a21d5840fe80f16696d881202439ddcb7ac7de56fe8f54aa2", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773329386, "uuid": "d1d98681-fac8-472b-8ed3-9039d2c5a309", "value": "T10E34F17E7BB29782B41844C1464BCDADC619A1320EFF8D3C79D960AF4A671479F8B2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773329386, "uuid": "819a4cf3-11ed-4e54-9dfd-dff27e4a6f2f", "value": "6144:c+Bi5jXRKNxX84xIN/iQT/IsQy9SzfN1Cr2:cwihKNthGHT/IZF50q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773329386, "uuid": "11e504e1-954b-4ce8-9ccf-b1d40ff37195", "value": 247903, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773329386, "uuid": "04ef65e4-ff1a-4e6f-ba73-7d9ce6a7371e", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "22e7dfc8-1c2e-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1773329886, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773329886, "uuid": "3b4a1186-a66e-499b-ada6-cc65bb3f0e8f", "comment": "Malware payload (Vidar)", "value": "563aa7ef73d98cb02b2e2ee0635b954f", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773329886, "uuid": "ba3f850e-a210-49fb-b804-6125abff44bc", "comment": "Malware payload (Vidar)", "value": "708a2fd5811e02b760648a4dfa8d9c62581fe27e22d1d76d086202188c22e874", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773329886, "uuid": "d7ae1243-8e1a-48da-9e01-4f16ccca3591", "value": "T10024222E2692E30DDC061D314016E2C73DE9F378571E5B67BE19CA48BF726B1928A0", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773329886, "uuid": "eefb4170-6afc-4b75-8bcd-ee4b9e793b09", "value": "ee53c10aff1d01eafea53328179e33a2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773329886, "uuid": "7aaf9fa6-6c58-4e34-a094-4ab71285cea9", "value": "3072:g2DjANfSjEZ08BI49h1Y/sK3Bmc3qSjyA5eyDfd5I/nr6e8jlZ8pjcdqZUiFDZ:HXEZxBLh1mxmc/jyAAyDa8xypj66US", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773329886, "uuid": "d2b6c172-32ac-4a38-b927-2db226103290", "value": 215552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773329886, "uuid": "8fe60c66-9feb-4f3e-a334-e0ce90ce2dea", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95f266be-1e2a-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773330367, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773330367, "uuid": "84db64b1-6ebf-4b63-845b-6516769163be", "comment": "Malware payload", "value": "f24c10a322ce7c7783ca8a3796e480e6", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773330367, "uuid": "f6d3430e-44d4-4b73-9cc1-2c841311cdf0", "comment": "Malware payload", "value": "ff25811474e09df97dc1c7bbe2aa212cdc268eeb8a054a0daba94a499f25bc4a", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330367, "uuid": "756d0008-485a-4ae9-ad45-2ad67606ce1e", "value": "T1663412D6B935007797707E2A4F1A64DAF4E8D06814E940478FE239C810ACF7E97FBA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330367, "uuid": "6269d27e-2d3f-4557-88a4-0f553d8efb7e", "value": "6144:NNYNbJ0/yf4c+Mc5z2j8W6QUB3gQDnqfEnP/:NNAbaqwc+nkjD/UB37DnqfoP/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773330367, "uuid": "6215ca49-bda5-46a3-ae84-50175e5a8fa2", "value": 245312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330367, "uuid": "6f0edf89-e1c6-4aa9-a3ef-e038f3bf7649", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9cd3ca8-1e2a-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773330427, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773330427, "uuid": "143bf966-d4e6-47c9-b799-d168b2421377", "comment": "Malware payload", "value": "eee240332fad1c4c91c831853a5a8472", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773330427, "uuid": "f495d58d-f08f-4db2-abc8-e731b4c3c731", "comment": "Malware payload", "value": "76bbd24104e4294d89982510e1424e5aaced0f67e13f45b8231dd106023eea93", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330427, "uuid": "76e0f257-8d81-4dc0-a5e7-e4c6d3204911", "value": "T163949CBB77F77895490C76DAB31D3F7A9D32B58B8052C0A8F69BE76214405E0853B2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330427, "uuid": "8577fd21-82cd-4374-b809-0a556a376662", "value": "12288:j9KKwFIa+kEMKRmtZKJ4eScii0VGZhgxZ0jNivB:j9yFzaRmtwWi3jfw0WB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773330427, "uuid": "6d740d54-93ee-49f0-a102-0fffc847c7ee", "value": 444564, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330427, "uuid": "b03ed049-1e64-4169-b1ef-764dd42fbde9", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3de2d1fd-1d3d-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1773330607, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773330607, "uuid": "e9d27a63-0707-427c-aab5-3df62f1a430d", "comment": "Malware payload (Vidar)", "value": "d9e4fd224f5f112ff42113fc8098bb16", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773330607, "uuid": "48658ad5-d756-482e-b463-a8f705d367e2", "comment": "Malware payload (Vidar)", "value": "a6edec8bb8a1de71eff27deecd7aae78ef4514dc8e2ed3dd83aeaf25a7e4a188", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330607, "uuid": "4ab83e63-41c1-474b-bbbe-f1589248d7eb", "value": "T10C242359FFC0B15BFEB69D71D162C2E304BEF3344B194B8BAA41E4C850F9576890A2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330607, "uuid": "da64616b-113c-4f5a-83e2-51ff224b48d1", "value": "ee53c10aff1d01eafea53328179e33a2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330607, "uuid": "30a8d59b-7d9c-464f-8bea-fabf68d5fb73", "value": "6144:DEZxBLh1mxmcod9jCwBBBAhJJzqlSyAM/Kl:4BLh7X9mcbAL9yn/Kl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773330607, "uuid": "37664947-e1b8-4ebd-881c-904aea6fe093", "value": 215552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330607, "uuid": "65da7ac5-623b-41a6-a77c-676c3378208d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d867c21-1cc6-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1773330607, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773330607, "uuid": "ac4803c9-3200-4554-8c87-83b84a41326d", "comment": "Malware payload (Vidar)", "value": "f5a9693663b7f95bc6ab4a2099633a6a", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773330607, "uuid": "25888e34-a162-4733-a058-50c37b99a467", "comment": "Malware payload (Vidar)", "value": "f15f8e4701e071aced59c00803f3ca5abf30dd63fad6095aa2fd4d1d2043c909", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330607, "uuid": "f567abff-b954-4ce5-9ad0-62c7827d962b", "value": "T1132413A52758E46EE05D95B072D08491E66E1E7AFF35C73774D3A1AE0EB3DA3420A8", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330607, "uuid": "40d9a0ae-c571-479f-89f2-11add10b0064", "value": "ee53c10aff1d01eafea53328179e33a2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330607, "uuid": "9a854b57-79be-4156-843d-d46dd8cc2d65", "value": "6144:0fSlre6VrpAkoBEkxfFYnwufD7JIdTCOump8QQ:+SlrLloBXi1D7JIl5n8Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773330607, "uuid": "83a5081f-f64d-4e4c-b2e4-a478b8a3895d", "value": 215552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330607, "uuid": "b1e031e4-7903-4850-952b-123df8d7c237", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3d0b1897-1cd2-11f1-8a4c-82aee05be84a", "comment": "Malware payload (OffLoader)", "timestamp": 1773330609, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773330609, "uuid": "748ccd90-594d-4462-97b3-34a8f5a609fe", "comment": "Malware payload (OffLoader)", "value": "3a8688215724b24dd2885059abadb487", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773330609, "uuid": "6bd91529-3328-4e25-bf77-f5d42634573e", "comment": "Malware payload (OffLoader)", "value": "2862dbcdc9546ab145d444a68b8112ce79487a93bdb7c4b45dc6649b640516ce", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330609, "uuid": "682e2928-0b8b-4fb0-b0fa-421bb01b80dd", "value": "T1F396F133B24B673DE06A5A3755B292205D3B7E61A40A8C06B6E47C8CFF390E01D7E6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330609, "uuid": "50e9f336-89d7-476d-aa51-d8f2daff82e9", "value": "ac4ded70f85ef621e5f8917b250855be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330609, "uuid": "6ccca476-e63e-4bb1-a0ee-ee6d62501970", "value": "98304:3N66veMksHm9d7cgb6cDFNct15QLzCkCmqN:PDHmTctact1GzCk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773330609, "uuid": "37b78e42-6d99-4825-b724-1ee2e0b7e9c0", "value": 8921244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330609, "uuid": "0c79fee5-3b5d-484d-846c-fcdefb5dceb3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab10d0b3-1cbe-11f1-8a4c-82aee05be84a", "comment": "Malware payload (njrat)", "timestamp": 1773330727, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773330727, "uuid": "2c9a416c-35a1-4eeb-a864-ecd3cadcc43b", "comment": "Malware payload (njrat)", "value": "85c65dcbe69c05eb41c04c283428f4fd", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773330727, "uuid": "61f13115-0c46-4a7f-8629-355c09f9e246", "comment": "Malware payload (njrat)", "value": "279997c885d0624ed794d19abbe608b1601def6047ea0380112ca9a4efe33de1", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330727, "uuid": "43557a27-342f-49bd-a61b-9205ebc48588", "value": "T197F41267B1B571F6D17786BB81514A46E335B87187A1AFDF03A883502E272D08E3EF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330727, "uuid": "b7514355-6154-4041-b15c-43af55b13e1b", "value": "469e59bd592f93ae01ff61cd0d813e4e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330727, "uuid": "f222072b-7e30-4848-b0c6-2e3a4c7c2949", "value": "12288:Ir8VpxdYrEZRdGiWU3uDVdgx/NXvraXF1LPlcPVhjSzaSMZP/rtGODK/J:28VtRdGiWlDvK9ra2PVh2zpMZnrtZO/J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773330727, "uuid": "86180efb-3dd5-4faa-b0eb-89297a9eef8d", "value": 753978, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330727, "uuid": "38933cb2-cc85-4239-b29b-d56e375c2d83", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d4bfd000-1cef-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Fuery)", "timestamp": 1773330727, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773330727, "uuid": "1b65d924-327b-4eaa-89d0-16aa18a6e325", "comment": "Malware payload (Fuery)", "value": "cf7c00f102d4c6950a9896a6ee7162bb", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Fuery", "colour": "#fb3e08", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773330727, "uuid": "8ecbd308-b642-4d6a-bb37-d3a6834681eb", "comment": "Malware payload (Fuery)", "value": "6a961af4e35488055057fb199555b02b135f81b8eca22d1b500d13054aaadb63", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Fuery", "colour": "#fb3e08", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330727, "uuid": "62065e83-09c8-419a-81a3-e35bf5645b0d", "value": "T1F5854901FEC744B5E906273269EB22EF2374A8090F369B97DA407A7DF9776D609323", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330727, "uuid": "b5a68994-76fe-4217-9aed-cfa7a857c727", "value": "5af915f278815e76bad476ef32593028", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330727, "uuid": "a083fb34-206d-4638-b219-bef585e37ae7", "value": "24576:NGb+1l97xc6Ht5DecD+HcLxBZllWAFhOhgjgcdEPTlpepyFD:NnFp9xV3gcdaTlpsy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773330727, "uuid": "7a3aba8b-899e-4e41-983b-221e230b5b0c", "value": 1826304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330727, "uuid": "e680e216-d86a-429a-a94a-f46910aaaebc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72fd86f1-1e2b-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773330738, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773330738, "uuid": "572232df-d63c-49bd-a4dd-f4332b59eb10", "comment": "Malware payload (Mirai)", "value": "2957ced3989ee347b10cca937d58a04e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773330738, "uuid": "32db30f9-851b-4ad1-9e8f-e761ff8ff13b", "comment": "Malware payload (Mirai)", "value": "c0ca17e71c46206c8668ead868386c1d3032962a104e01cc054f10480d192913", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330738, "uuid": "03e40bb7-95c5-44a0-a8d6-10e1c994e7c2", "value": "T1E163BE13C8361D98D00849F471A18FB59763E911C19BAEFB196AC639C043EEDFA5A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330738, "uuid": "7c284513-1d06-4376-ade0-e8a80e20e650", "value": "1536:vp/h4xQj25BMcynFRI8qKK1WSAKYsCqrEf:vVh4xXM7nFm8tKCKYsW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773330738, "uuid": "75bcaf31-6cbf-46c9-b1a2-b386a2c2cf82", "value": 71600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330738, "uuid": "25d5646c-6a23-4651-abdd-6f53a0cd0692", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72fed759-1e2b-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773330738, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773330738, "uuid": "7e6adece-7404-4eae-a6d8-63afa2fb76c2", "comment": "Malware payload (Mirai)", "value": "860901e3d4bc9fc45fdce651c7a213ec", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773330738, "uuid": "049ba7a9-1031-4c6f-9572-e984b5307fa6", "comment": "Malware payload (Mirai)", "value": "8dc4082a6ad51747945dce306efa4addf4b4120dd635e0fc9f8dd37c5fc2b357", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330738, "uuid": "b8aa1ab4-7a7b-43cd-b01d-f5cee16151bb", "value": "T165B39E8BF74714A0C8634AF007C71B9E2E533211CF5BE8E36C1D7A3A5A7A1DB191A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330738, "uuid": "ccac86f0-8174-403f-99ed-413662d2c583", "value": "1536:FzFrNYCAFLIOoGLEWWYK0+rAG/RqlIv3V7HPTgwb3t/LWg:FRNYfFLLE7Yf+J5qudHPTgm9q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773330738, "uuid": "780d1eee-b234-4557-9915-68f070343662", "value": 116340, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330738, "uuid": "b6abd92a-6808-4db2-adeb-e0bab1c0e684", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73008acb-1e2b-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773330738, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773330738, "uuid": "5203a68b-085f-4f77-834c-57d93647a964", "comment": "Malware payload (Mirai)", "value": "96f095a917ea5eb484d32f5a2eed93a3", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773330738, "uuid": "087e69c3-123d-4fd3-8d29-bfabf762ad0a", "comment": "Malware payload (Mirai)", "value": "6a52ee9a765bd26946ebd1e1210313c8a38937070924e5b915996a54c56093a1", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330738, "uuid": "7b50ab89-2c99-4cbb-b2e6-98358a19541c", "value": "T195736D52B70C0A47E5531DF02A3F13E2C3EA66E120E8F689750EDA49D6B2E325546E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330738, "uuid": "e3e9951f-f757-4fab-9fcd-2b2147287925", "value": "1536:BROkn9NSn8uC6imCMxFtVk1wZRM//6/EYyI77uHD38xr/HL1:B4Wbilq1w7Mub77HxrD1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773330738, "uuid": "95405f4b-4eb5-4b7b-84e1-60303453f49d", "value": 79608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330738, "uuid": "3e352f96-667c-470b-aa94-cb4087b5749f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "732cd830-1e2b-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773330738, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773330738, "uuid": "92da1a97-7a78-40e6-90b4-f5faf39af278", "comment": "Malware payload (Mirai)", "value": "4fd71c3cb8c284025cc0dce45ec515f3", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773330738, "uuid": "590b18f8-d721-4198-bc6f-509b538ef80d", "comment": "Malware payload (Mirai)", "value": "45b56eb895d13bf00113c2d75d12aabd09ae26ef86a6fbac14a4eba76f564b49", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330738, "uuid": "aef132a1-6ce6-49d4-9e11-d84faa4c3f35", "value": "T181735D02B71C0D87D1631EF02A3F13D1D3EEA6E121E4F685750EAA86D1B6E361586E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330738, "uuid": "a47f8486-0e27-4fd4-82e8-a0fbd79b0db0", "value": "1536:AtAQfQUTzGrq1nCjBuQMpknJ9+k+Bdg3EG57uB1bVxGZTP:A3DTIdf+kCo7WVSP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773330738, "uuid": "6ee3ca76-b5c7-40ae-9069-a209099ad5b3", "value": 79608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330738, "uuid": "c322f78b-4312-44fd-94fb-53b4fd4eaeeb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6895b9dc-1b5b-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1773330785, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773330785, "uuid": "540dd36f-9df1-47c7-b133-7222e100597f", "comment": "Malware payload (Vidar)", "value": "188069b6a059a5b2fafd2fb3a2aa88a4", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773330785, "uuid": "330e7c16-d05c-437b-a30c-6e0e4b8a9d8a", "comment": "Malware payload (Vidar)", "value": "17d6bf4c49062995225871d44a091d0f1fa62fea653a6a6815b15a97c3327c42", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330785, "uuid": "bdc429f4-7368-4ee8-b273-118632deac2d", "value": "T190242321B902FC5CDA316177F6F363409172781542CAF5FB2ED2B98CA521F83468A6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330785, "uuid": "d8d6c86b-a107-4a3b-a529-a563297a9174", "value": "ee53c10aff1d01eafea53328179e33a2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330785, "uuid": "9a57885b-cce4-48bc-9dd0-16a3f0fcafd9", "value": "3072:hfU53ZR5xeumR8OdBi/bm1IJohPsJJ0uMJgRYCnc5SZwY9m6CGGidPzIZkhJOXnD:hfU3txADdBYSgoJbsfZwY9m6CYdrVJy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773330785, "uuid": "6ef961b3-c5a0-49eb-9e6d-9e0fc6b6a0ab", "value": 215552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330785, "uuid": "4a15d460-cf04-498f-82f4-5d185702286f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23905f40-1e33-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773334041, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773334041, "uuid": "2de0d441-4ef8-44c4-bd2d-13026703168e", "comment": "Malware payload", "value": "5eef003c62d568b4d20b4808827b861d", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch3", "colour": "#009966", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773334041, "uuid": "d61b6733-d823-4664-8549-5f649ae57fab", "comment": "Malware payload", "value": "530a67d7a942be3fe39078d3ac4e5cbd99d4583f3b68a4268cc23cb780aa6d01", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch3", "colour": "#009966", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773334041, "uuid": "e2d771c1-cd4b-4956-abb5-2c40fd538864", "value": "T1AE43B319917F117F3517D8E13BE0678632C2211FD75AE82C7FFCA2504F1ADAA8A81B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773334041, "uuid": "0c997f7a-13d7-4b52-85cc-68c46aca5309", "value": "768:e7AFlFvFEFEAJxs6NEEGZlVgWlk65OnXnFwXhaTHxtA2V/NvovF:kA3x2KAxaEgZDs1wXhaTHxtA8voN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773334041, "uuid": "ff9d8e74-84b5-48c8-8f42-fe6620996d2c", "value": 57351, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773334041, "uuid": "4c1060bc-fc79-4b14-aaa2-210309d1a9d6", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e72a344-1e3d-11f1-ba1a-82aee05be84a", "comment": "Malware payload (WallStealer)", "timestamp": 1773338408, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773338408, "uuid": "6e544bdc-7af1-403a-86cc-54fbd297da2a", "comment": "Malware payload (WallStealer)", "value": "d20be3fdff7d6cb5ceadeae92e7c5639", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "WallStealer", "colour": "#4aadef", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773338408, "uuid": "ed8f1186-ade3-40de-9b0a-1072ad137175", "comment": "Malware payload (WallStealer)", "value": "ff3bef23b6823f29c118eb3cc6e93672f6c61f3f863f0018446f238ef4c77e30", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "WallStealer", "colour": "#4aadef", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773338408, "uuid": "b668c8b2-7057-47a0-805c-9d0670781d96", "value": "T16466336E6B89FCECD76606B858365A19B3B1747503803FEB05810AA81E7B7C25C3C7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773338408, "uuid": "e5db51f6-cbd0-463a-87e4-604e1cfe6e52", "value": "5494c81f61f9ff699d47be3808e7b4e0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773338408, "uuid": "774c5d8c-ddf3-4155-93bd-666f977a1db9", "value": "24576:K3LqBVN9i1wmnFCOPqmHhD+nxvbM/kPUn1Z5zCqYXIunmCkmMikKm+UshDYYM+M6:", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773338408, "uuid": "0a9d096d-6bd8-4e11-8402-13080a3abe41", "value": 6638592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773338408, "uuid": "a861da46-9463-46f9-b649-e46672cd604b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e8220cf6-1e42-11f1-ba1a-82aee05be84a", "comment": "Malware payload (OffLoader)", "timestamp": 1773340813, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773340813, "uuid": "47b7ce2b-c980-4c6d-871a-16244d9cf7cd", "comment": "Malware payload (OffLoader)", "value": "699be1c9de4ea0bf8084221f63c4acfd", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773340813, "uuid": "ecdb6036-c247-49e5-ab6c-1098e76442c3", "comment": "Malware payload (OffLoader)", "value": "3292e4d8ce8056d31e853003aad4c7c6bb28b0c67a56725829b68e027ef2cab7", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773340813, "uuid": "3703bf91-04d2-4971-9a97-7e9f93a97b86", "value": "T189961233B289A33DE06D5A379AB2D2605D3B6E11A51B8C0796E43C5DEF2D0601E7F6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773340813, "uuid": "915dedde-8e6a-4336-9d6a-5aa4800e2dbf", "value": "ac4ded70f85ef621e5f8917b250855be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773340813, "uuid": "66246493-5ddc-40e3-a851-87a71e31dccc", "value": "98304:mN667eNjSbPP+0TF2/IdWewAnMGmz14lEbuzeLfX80C6Nsi+KUIk78O3mZZFdWb8:2AjIuaFHWmnM714ubuqDyUsY82ZYK2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773340813, "uuid": "b1d45750-71d1-4ffa-99e4-1158144862be", "value": 8920254, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773340813, "uuid": "d6853150-d8db-4bfc-9580-3b477364836f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66c30703-1e45-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Adware.Techsnab)", "timestamp": 1773341885, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773341885, "uuid": "404246ef-54da-475f-b6d7-eea24d36329f", "comment": "Malware payload (Adware.Techsnab)", "value": "55e2f63f1cc146a2140da3591090a38f", "object_relation": "md5", "Tag": [ { "name": "Adware.Techsnab", "colour": "#8bc9f0", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773341885, "uuid": "4111032d-fdad-4471-ba90-0f0d803c06bb", "comment": "Malware payload (Adware.Techsnab)", "value": "c58632a151d2ad92a91042f279108ae9b124ae1260eea3fccbf4ea9fc0e5f4ff", "object_relation": "sha256", "Tag": [ { "name": "Adware.Techsnab", "colour": "#8bc9f0", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773341885, "uuid": "5a4e9edd-dd5a-4f9e-9d5c-bd131ecfbd09", "value": "T138052545592E0A9DD18BBF7A19CC8BA072E273B00E4E9026742E79C346175FC5F638", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773341885, "uuid": "de2eaf4a-35d1-4ac9-bfa3-34b19a360add", "value": "3072:45YH/J8IGNsCQMAzOzR2EVMk5kjkdkQKGkFkNkfJmySgBVxLjt:4mfKOLid41rxLp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773341885, "uuid": "9356ccbc-f9c0-48fb-b6d1-5b1cc72ac1fa", "value": 848896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773341885, "uuid": "f8bfb36b-e104-4a0f-855b-a4c818b60748", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6331a3b2-1e46-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773342308, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773342308, "uuid": "47ed2da1-000b-4b6c-a303-c7a176c0e4da", "comment": "Malware payload", "value": "08569d8b587a8c4714e159b02986da8e", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773342308, "uuid": "f4d0f1cb-b9c5-44e6-a278-77f7c3831320", "comment": "Malware payload", "value": "bc6350a2380661c58de49f45656e5610eda7efe5f47201705692562946c0651b", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773342308, "uuid": "6908bf13-f5b1-4e5b-b85c-6e7510e5fd08", "value": "T1A43412165B27B7B9023A7078FFC1E2AC1E48DF1E539706339D0F8217E859281A176B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773342308, "uuid": "e18ddc2a-90c6-4821-87f2-a4d712aedd48", "value": "6144:DcqZORy8qL4XJQJQUFolM6qGjPZg7GOauDqwDUKixeJ:DbZwy8qL6SQUFUjhg7GgDqwDhio", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773342308, "uuid": "67ac0d48-0a22-402a-a09c-6bf9f31f2f5e", "value": 252992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773342308, "uuid": "bf418df0-f746-43c1-920e-8020a314dca0", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "638353d0-1e46-11f1-ba1a-82aee05be84a", "comment": "Malware payload (AgentTesla)", "timestamp": 1773342309, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773342309, "uuid": "0bc3331c-6c6c-49f1-9c71-dcf2de844ca6", "comment": "Malware payload (AgentTesla)", "value": "efbd6df9fa0d5bde29df9286fe7e8663", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773342309, "uuid": "3aa3bbde-89b4-42f9-9de6-8a7a52d8384d", "comment": "Malware payload (AgentTesla)", "value": "c062faec9abdfd6a969c9d4659e6717818e8816a70dc628fd4d49ff188f7102f", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773342309, "uuid": "2310df6a-5083-4dec-9358-ffc5f0461c54", "value": "T10584CE77C83A1A17C61B3448E6491CD1CC7865EB32EA73F5B9D30E050A9B6B189F61", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773342309, "uuid": "faa7e88d-2a57-4504-af89-7168b8681e65", "value": "6144:Gg3qjtX76dTR5eXYWwGGBcQC1SOhfq1X8ovM7t+0RXXeUVN1x/yXgHQXRq:L3qhXXvwleTphGzSHVJyLRq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773342309, "uuid": "bcc516a0-662e-41b4-9b1e-56f1c3bca471", "value": 406600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773342309, "uuid": "d6407e64-8c41-456b-a35b-5f32d0eba041", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63b58be2-1e46-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773342309, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773342309, "uuid": "c93887c7-f9c7-4831-a614-a7a7c09a617b", "comment": "Malware payload", "value": "40787128598ca000b2b2ba03b700d34f", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773342309, "uuid": "736feee5-73f9-48ab-83ac-78e277131934", "comment": "Malware payload", "value": "5dbda0b22e8204624be9042037e27bdfc0bfde693b3c8aba2b0b45c6731d7dd6", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773342309, "uuid": "deb00bb8-51ed-4b5b-9367-5c99716a2177", "value": "T13994E0BC62C6AD70834CDA3AD1D1947C7D896107FA475EA701333BB2E1A13A529CDA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773342309, "uuid": "320cd6d5-487a-4107-9021-140b396c2160", "value": "6144:UDJmH2kj7mlVMt62TfmfqTnNC66nw51cLUVqc1iIHRnI2Wue317QKc/f8j:rH25/M39Yw51cLUVqNIHRntW/7lyA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773342309, "uuid": "0977f703-e76b-4e5b-9743-b2172dedc537", "value": 426304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773342309, "uuid": "c72b4414-9e71-4060-8c7d-31986c62ad8f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6da68f6a-1e46-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773342326, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773342326, "uuid": "e8a17e8b-159b-49d3-97ba-840f3f9fac13", "comment": "Malware payload", "value": "73390ba587e5fd80ae6680480c00b64f", "object_relation": "md5", "Tag": [ { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773342326, "uuid": "d1a986b1-d67a-4564-99fc-09d9b890d0e9", "comment": "Malware payload", "value": "72fe700e9ec4eb79c515e275d3e7e8c5cdaa5b8e68a7fcc0e6ca55e3540cebea", "object_relation": "sha256", "Tag": [ { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773342326, "uuid": "26f5ecba-f62b-4077-982a-6a7f136b7ac1", "value": "T11CA733DBDAF742BDD50F6AAE50C0C5AC2F9473F9FB1E2985390482D25BDCA1850A77", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773342326, "uuid": "07f0105c-4905-48f7-895e-1cab8dcf15e4", "value": "786432:OKuInYLHlwINGXVYmhLi+p8byUVCMvJ0+FMcdzNal3iQnV+rU3lHdXs6TYSQ:huPGXVYmhLi+ybCM2+zsl3iOVb8FSQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773342326, "uuid": "8f76d696-a0fd-4ebf-8078-ddfb7977a827", "value": 44039244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773342326, "uuid": "d463654c-8dfc-4574-b48a-30afd92ba4e4", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5582cde-17ab-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773343148, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773343148, "uuid": "4bd7e3ff-de88-437a-a49a-897280d8a5f0", "comment": "Malware payload", "value": "ce11fe3bd4315246a6245ad326d7f816", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773343148, "uuid": "f2f0b5bf-6f3a-4d9c-99e0-e7e6dd759001", "comment": "Malware payload", "value": "a945e648556cb1ef96710cd1682c9bb989dcfa4809dd7f84f31413aeb87f144a", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773343148, "uuid": "a7850b89-860c-465b-8df6-b23eef87c76f", "value": "T19807E66B24DF59AAC3EF564149B22F1871B47712AC170A3BA1BE75C79B713B80803F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773343148, "uuid": "8c003f08-0caf-4613-892b-824a8f2e4f01", "value": "49152:8UixbItdTrJoFVPMvXGw9Z4YrArVd1fCo1beULmi+VrKct/7PSBPy25NR6M0/fcg:7iBI/JoFdMPGY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773343148, "uuid": "f7d2c22a-7ced-4dae-9c69-19f62e394792", "value": 16837457, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773343148, "uuid": "db216e18-5eb6-4abd-917f-8ff0033d6f10", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0e19e79b-1ac1-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773343148, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773343148, "uuid": "414bf9e1-1b7a-426d-abc2-85c4755e223d", "comment": "Malware payload", "value": "b74f3f0fe11891147a38fe21c3d47865", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "DarkCloud", "colour": "#91000a", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773343148, "uuid": "914a7c41-d463-4877-8dec-9aa59827d6d0", "comment": "Malware payload", "value": "b3029c856f9aa918a8af2c662cb9d86e1e182be074dbd655808f591402c788b7", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "DarkCloud", "colour": "#91000a", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773343148, "uuid": "414053c2-fd7a-40ae-adab-2574975a8ed1", "value": "T1A9C49F7B43B25C2E5D7D0A45E43417D03CA94ED7DAB0D1AA3A8270B092FA4605BBF9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773343148, "uuid": "f1784735-39c1-4a8d-be86-2777fe3f8ba0", "value": "12288:tuE9WjAEAYYOVPichabAxxnk8jotP62WoQGv2wAahZ1DIYM7dy7FkU8V:kEKic+Axxnk8jotP6H/42ZM4pk7F+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773343148, "uuid": "0b443164-1fd4-4a26-b645-b537796fea8a", "value": 584530, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773343148, "uuid": "374b58db-1219-4ef7-8324-fcf24db3959c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "592304be-1e48-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773343150, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773343150, "uuid": "5fb477b0-2880-47be-b688-98b0adb7382a", "comment": "Malware payload", "value": "85581b2811b3e3791b88fafe33ce2c20", "object_relation": "md5", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773343150, "uuid": "1056b121-370b-481d-9bfd-8110bfc618f8", "comment": "Malware payload", "value": "522a8153d86cc0b1e2c9b5dd4a9c6edbfd8c597c4ebe709bca854f9cbe385b41", "object_relation": "sha256", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773343150, "uuid": "3d89e842-fe1d-4cb5-82f2-329ed6d5bf04", "value": "T1CBA537E288B0FF17B7661D1873745E691018153B0FDB0209B8BEDBC67683DAA346F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773343150, "uuid": "58ce277c-a2b0-4b14-b5c2-fa4fb3e6a7d6", "value": "49152:TK0rN4F4Cd6Jag2j0riZgNudjDG8ZX8LSJFTK:m0eF4xaDjDONijDG8ZxFTK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773343150, "uuid": "5c67fc40-7917-4a09-8c68-92344e4fd52a", "value": 2159362, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773343150, "uuid": "50f79973-3544-4ca1-8bfc-11345c9285cf", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94589c49-1e4a-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773344109, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773344109, "uuid": "03e49109-19f2-4f0d-80b7-2a90986ce819", "comment": "Malware payload", "value": "344524222930d462a3f13562ff7be650", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773344109, "uuid": "fb78e564-e27f-4c32-914b-2d258666aed2", "comment": "Malware payload", "value": "007de74797c9b2ad0f86bfad256d39868bad84eeb833b59fb617678ebe9978d2", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773344109, "uuid": "a1f7ca26-69b9-4f5b-8cd8-d1279c387ee6", "value": "T17A21C10267A50715E2F34E721C35F3114722B5A6AE97A75D090091C828A4B15FD79A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773344109, "uuid": "9d3d9885-50a0-4506-aca2-d50486c8d976", "value": "24:8vJDf3mCLqagA/6yj+/xd+0pcp94I0Wj2MH/hp4HH0S6iHpAmE:8vhm2L3kdOpiIrH/hp4H56SpA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773344109, "uuid": "4b97e1ac-96ba-4868-99fb-55abd2bef838", "value": 1405, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773344109, "uuid": "b0db7dbe-ac16-4de4-9098-1021d89ee89a", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23027e19-1e4b-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773344348, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773344348, "uuid": "d30a943f-495b-441f-b716-779145a093ef", "comment": "Malware payload", "value": "23d734b6b4e41dc06b9b05b646eb4dc5", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773344348, "uuid": "851d5258-a14b-4431-9096-0b53eb2f53a9", "comment": "Malware payload", "value": "c74c0adf29bccdfe5c03199cb7e17370c4c77e1f271921732b35174adf397a4d", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773344348, "uuid": "d15eb220-211d-43c0-86ab-4dac60ceb218", "value": "T15E464D989A4D83681C136C757EA9B4E12ACD2287FC45F1A2F0FF56F27EA60D1D9731", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773344348, "uuid": "34a7b6db-2546-411a-a790-ec6fcfd4b733", "value": "98304:izbXPq4o1hTc/9/G4YhISVSa6c6ndeTyaCV5JsUnMLj2el7Whzr+WDbvYwD+nHRW:a9o1Fc/9/JYhISVSaLSdeTyPJsUnMxl8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773344348, "uuid": "ab8d41e4-73f0-4991-aa1d-fe4278513449", "value": 5635749, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773344348, "uuid": "4c3f4687-f51c-4f69-b9ad-3c03973a19eb", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "690e5b3e-1e4b-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773344465, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773344465, "uuid": "e8ea844b-d7d7-4c92-b38d-7e7c3a90edbf", "comment": "Malware payload", "value": "52bcc106f7c9d2997c894407b6ce76ac", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "KongTuke", "colour": "#A5AEAB", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773344465, "uuid": "cf6556fc-da28-48f6-b656-550a8308fe13", "comment": "Malware payload", "value": "e622b86fca4b6f0ebe28024ceadb387c921df1073402f67edad2e520a88c4fe5", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "KongTuke", "colour": "#A5AEAB", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773344465, "uuid": "f13eb2ee-68a6-4ed8-a908-9d7ae43ad359", "value": "T19E223A2B51696E1B6A19478F43879B07205BA5DF834AE2F1F75C09D32C03FC819DA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773344465, "uuid": "09e2ece5-0d17-45d9-8ddd-ac8072c47882", "value": "192:51XAZj60SCLaBMCW6dVgRMLqfGiU6gnARy3iQJc0x5asqjyHaIeqXXPU5RG77rrV:51Xaj6HBMF6bgg0GT6gnWyjcuHaRyXCm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773344465, "uuid": "edb3cc22-3ab9-4acf-a156-980cd56ce00b", "value": 10060, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773344465, "uuid": "05d9e223-0a91-499d-9812-4e5723509b90", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ee21972-1e4d-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773345307, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773345307, "uuid": "b6e99436-2596-47b6-b245-25de51534a92", "comment": "Malware payload", "value": "956bb3b08e2a0c19ceaf352f7abdb76e", "object_relation": "md5", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773345307, "uuid": "370dbae8-fab2-4ba1-aea1-22783fe2a0a5", "comment": "Malware payload", "value": "b7d0fadd9af34c2d83602b5ad666ab9fac4014ee1705a52d71be9aafc12e1bc4", "object_relation": "sha256", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773345307, "uuid": "8a1cfdeb-4f68-4525-9be0-918ff30f01e6", "value": "T1116465F96076ED8AC7370E80E1043F179C299ECF667847F8B78815D1C29C68C99E65", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773345307, "uuid": "addfc97d-9ff1-457a-a32c-8cfe8b8c6035", "value": "6144:7RitO7NXd+mSf0u0/epqeplDTL7nzwu+TwCJaJyyRi72BG:7UQNXd+1cuyIJyyA72w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773345307, "uuid": "c7f27296-7e71-4a14-9083-5ea542c43199", "value": 327726, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773345307, "uuid": "f2313fdf-ce2b-42dd-be3a-1e515725b622", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "823e81f0-1e4d-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773345367, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773345367, "uuid": "6dec8e32-b401-4841-8f77-a9fd1f8183d8", "comment": "Malware payload", "value": "d756631ac29da954b6d0ccc059a7f33d", "object_relation": "md5", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773345367, "uuid": "cbdf1e49-5476-4a77-bf95-80e77b9118b1", "comment": "Malware payload", "value": "c58ccc527813c65b3305513cd5ce9b48ef5ee8aff75e3e1cc75d4b198d0b9e8b", "object_relation": "sha256", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773345367, "uuid": "0c0da892-45bb-4a29-a219-a9d17844fa0b", "value": "T1D03413B3052994744BAF4D21749A394FA015478A638FB031B3F26CE66E4F90F64CDD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773345367, "uuid": "2137be89-20e9-4b3d-a2d1-8173331acb14", "value": "6144:CPhT7wUPdDxmpmgteFP6Zp68FbPdBWkj9D/8IODYBlsDcE3u:CPpVDxAftyyZCal8ugDze", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773345367, "uuid": "d51a780c-6911-43bb-9f14-a14fcd0fbb86", "value": 252992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773345367, "uuid": "6b55de52-21cf-40b5-a914-e6e71a5fbd2d", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "82606cbb-1e4d-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773345367, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773345367, "uuid": "1069ebc1-7479-4eb8-a972-401b31f05e85", "comment": "Malware payload", "value": "3a413d377f60679fb38eddf6d4ed3c7a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773345367, "uuid": "4f93aef8-e481-4844-9e04-bf81d5e8fd0e", "comment": "Malware payload", "value": "23627205fa41ce11847a52715a7a2448a33ab7f2535086721de6cf5fcf4a7d6b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773345367, "uuid": "5bd81ffc-37bd-485e-9062-e9a03acdad48", "value": "T1CD831A4ABC829B15D5D522BEFE5E118A3323677CE3EE7112DE105F2523CA91F0E7A4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773345367, "uuid": "ccae1d0f-a409-417a-a3d5-28b53f01f300", "value": "1536:zfnRIefLW2Ryc1RFvfSjx5IZHnnmDdo+OtK9OR5G5WlqbiURpvz:djJ3OV5aHn2do+OtK9OROHRNz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773345367, "uuid": "baf970ee-9768-4997-98a7-3937275950c1", "value": 85532, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773345367, "uuid": "91e4aa07-32fe-478f-828b-8e715cf171d6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa6b28fb-1e4d-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773345434, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773345434, "uuid": "ae5b364f-a7d7-4ddd-a17c-2391627af506", "comment": "Malware payload", "value": "a0246bd397c51a855aa0e09a7ec1e7ab", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773345434, "uuid": "95e27e73-c0b9-4260-a33a-af904c57a300", "comment": "Malware payload", "value": "08a86448db3c4906c56fee877d16c210e00e769673550c792c0172ce37217c97", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773345434, "uuid": "863e6847-7f03-4324-ae25-b894079e699b", "value": "T1EDD0C79EA953AA87CD375F1D70515C40D007D19570938F46D4540F7D5ECEB006034F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773345434, "uuid": "044c17fb-930f-4115-a4ee-a8f4c5f09830", "value": "3:GRFbdopDSDaL/4BXndonKzSDaL/tXXwGndoGqHmNyBDKzSDaLxWrHmNyXYq1:SbSEAEXS1A1XXw8St6yB5AM76yXD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773345434, "uuid": "20adce99-59e6-4e67-8380-6d7313e874cd", "value": 209, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773345434, "uuid": "204a6684-157a-4430-b494-16168b1c8b75", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "32621498-1e4e-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773345662, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773345662, "uuid": "898c3a6c-8911-4e85-a3ac-434adf18b8fa", "comment": "Malware payload", "value": "486e2782659bd18093db75d365437bdc", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773345662, "uuid": "891ce993-16b3-4910-8fe8-9bb65b95a7eb", "comment": "Malware payload", "value": "c29f0251fecc304e105b72278cc9af4b9e9733453025c4b308b02db74bd3fada", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773345662, "uuid": "7d7c1bc6-ce54-4010-a796-81dfc70b359b", "value": "T127920F16C39DB21385693FC484542CA76F0C42DCDC969FBB2D7478EAC4A8E3705D9E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773345662, "uuid": "7cdd6e7a-bd50-421a-a289-ced134da96ee", "value": "192:n0+7RIyk9a6JGlhbBGN/py8XL+4L7GlG21v7AIIGSoWSQD:n08RIyLQ4hb2/py8Xa4L72G2NMIIVo4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773345662, "uuid": "7f72cb99-0794-492e-ad51-07bb1ca42004", "value": 21196, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773345662, "uuid": "8fb7a400-4351-4d30-af53-c9cd2d52b654", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67d7e7fb-1e4e-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773345752, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773345752, "uuid": "56b1dc25-2a57-47d7-8aac-f9e2bcc8f9a7", "comment": "Malware payload (Mirai)", "value": "230985af20685f65a03bce203fa65b73", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773345752, "uuid": "8969fb4a-5021-4b83-81ff-cb98d14d4d5f", "comment": "Malware payload (Mirai)", "value": "2f7ab37cafd538adde724a335ea82da63a5a6b560714709e180ebf9d4a9911d4", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773345752, "uuid": "21ef741d-25d6-4c68-96b0-2abaf2b893ac", "value": "T1BAF30946B8818F15D5D616BEFF0E128E33131B7CE3EE72029D245B347B8A86B0E7A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773345752, "uuid": "aad1532d-f4f5-45f6-b201-b41fcfff5870", "value": "3072:cS4am9yJyBnpU9iw0Dfk/aXaYZ6x9ktdT9+YsZC6o9h:ccm8CpmkDfSaqYZ/tx3CCrh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773345752, "uuid": "fc1a992c-9894-43c2-8ad6-dab2a5e56289", "value": 160540, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773345752, "uuid": "10a1b922-de98-4b85-b36d-f4c4b9b71149", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af91dd3d-1e50-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773346731, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773346731, "uuid": "50b1dab3-b1e2-4ef4-b98d-e39d98849afb", "comment": "Malware payload (Mirai)", "value": "81a0a1395eefb2df051f8bdaae043832", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773346731, "uuid": "9e7bf4fc-f746-4818-b168-2e6d78e3b201", "comment": "Malware payload (Mirai)", "value": "e34c20b28202aacd5b9fe498570e6f4fc30e384b153ad2ea3a1bd9b34953c3a0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773346731, "uuid": "f25ad9cd-f55c-415e-ade0-2e53e8b92876", "value": "T168A31991B8819613C9C556B7FB5E429937170368D3EB3203AE348F72378E89A0F7A8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773346731, "uuid": "79abb2f5-e7c4-4f9e-96fa-f83603c02467", "value": "1536:iG8jibaOYcb5WbNs/BdgntXS0PpgaMHSOQvEWvAJyABj3XOO6gWe7aT:/DnGNs/BdgntC0xgaXsMMs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773346731, "uuid": "6fc18daf-e3b3-4059-977d-e0d6f63db1ba", "value": 99660, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773346731, "uuid": "aaa9cf1c-6e7a-4b5a-a039-ff8d99b42cd7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc47c9b2-1e54-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773348497, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773348497, "uuid": "292a7353-ee5a-41be-86f4-72db992899d0", "comment": "Malware payload (Mirai)", "value": "84729e9ad71edd63d78be25c614ad4a9", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773348497, "uuid": "7427a72f-b683-479d-925c-1dfc722b5d93", "comment": "Malware payload (Mirai)", "value": "4e829c3a110573232a15b20f91491ac33c2e7d375d0c8ca9f0e0d3a702780b39", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773348497, "uuid": "c8666a81-7afe-4f0d-a608-7446233cb4cd", "value": "T161E34B06B5C0C8FEC899C1744FAFE63AD971F41D4234B19B27D4AB626E8EE205F5DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773348497, "uuid": "8cc4a646-0e1c-4a76-859f-87358e0c9296", "value": "3072:tQp8XAeZCH+JagDTeIpG+AFX2VTlniNIDM3:tXAeZ9yrV2O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773348497, "uuid": "a5db59e6-0a46-4589-aa9c-fe5c74ccbb8c", "value": 155816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773348497, "uuid": "4f5874b8-a938-41cb-af2e-58763b8a884e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01ad99e4-1e57-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773349446, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773349446, "uuid": "82b04f64-1038-4e0a-8db2-1c175ecc799c", "comment": "Malware payload", "value": "b39a257c0c87c44357598492b81404a2", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773349446, "uuid": "826559c0-a87e-4341-a73f-d427b445d575", "comment": "Malware payload", "value": "43a185f368b4676cb959ee103a195d54baad4382e2795db3e4f9d5b93358b5f2", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773349446, "uuid": "f5fe118e-46a0-4568-9829-509c69cdeaa3", "value": "T15BE31A45FC509F26C6D626BBFB0E438D372A1758D3EE720389255F203B9A85B0E772", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773349446, "uuid": "e24704d3-faa3-4e6b-bf5b-c4c0b3d16eff", "value": "3072:wyz3mNd2fasjCArzGesFsBgAshgVbp2A:X3LCkCAriesFoBshgJp2A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773349446, "uuid": "8aae22db-573e-411a-82d0-416fdf48d876", "value": 146112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773349446, "uuid": "24e7b1bc-f6c7-46e3-a2d5-b57859069193", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773273796, "uuid": "df16d6f5-1da6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.165.233:51929/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773274403, "uuid": "486240b2-1da8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.60.227.246:54518/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773274761, "uuid": "1dc0b5ac-1da9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.28.83:33355/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773274810, "uuid": "3b41297a-1da9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.186.229:45201/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773275184, "uuid": "1a331bc6-1daa-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.165.233:51929/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773275363, "uuid": "84c4dc3e-1daa-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.71.211:42420/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773275850, "uuid": "a728a4ac-1dab-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.25.226:42217/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276257, "uuid": "99edd366-1dac-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.233/bins/wget.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276386, "uuid": "e6aea6ee-1dac-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.239.67:45410/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276502, "uuid": "2b891123-1dad-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.144.97:53391/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276555, "uuid": "4b8e8d7f-1dad-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://161.97.148.194/nullnet_bin_dir/nullnet_load.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276555, "uuid": "4b91260d-1dad-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://161.97.148.194/nullnet_bin_dir/nullnet_load.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276555, "uuid": "4b9140a3-1dad-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://161.97.148.194/nullnet_bin_dir/nullnet_load.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276556, "uuid": "4b9aef89-1dad-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://161.97.148.194/nullnet_bin_dir/nullnet_load.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276556, "uuid": "4ba05db1-1dad-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://161.97.148.194/nullnet_bin_dir/nullnet_load.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276556, "uuid": "4ba83ce1-1dad-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://161.97.148.194/nullnet_bin_dir/nullnet_load.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276556, "uuid": "4baa1dfa-1dad-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://161.97.148.194/nullnet_bin_dir/nullnet_load.arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276556, "uuid": "4baba1cf-1dad-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://161.97.148.194/nullnet_bin_dir/nullnet_load.arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276556, "uuid": "4babc37c-1dad-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://161.97.148.194/nullnet_bin_dir/nullnet_load.arc", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276556, "uuid": "4baebc02-1dad-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://161.97.148.194/nullnet_bin_dir/nullnet_load.arm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276556, "uuid": "4bb18897-1dad-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://161.97.148.194/nullnet_bin_dir/nullnet_load.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276556, "uuid": "4bbc967a-1dad-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://161.97.148.194/nullnet_bin_dir/nullnet_load.arm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276556, "uuid": "4bc3c783-1dad-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://161.97.148.194/nullnet_bin_dir/nullnet_load.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276556, "uuid": "4bc518bf-1dad-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://161.97.148.194/nullnet_bin_dir/nullnet_load.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276559, "uuid": "4d64e6a7-1dad-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://vmi3114056.contaboserver.net/nullnet_bin_dir/nullnet_load.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276617, "uuid": "7015374d-1dad-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://161.97.148.194/nullnet_bin_dir/nullnet_load.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276618, "uuid": "709f8240-1dad-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.239.67:45410/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276676, "uuid": "93563133-1dad-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.28.83:33355/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276793, "uuid": "d969a59e-1dad-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.103.234:46776/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276860, "uuid": "016098f8-1dae-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.210.153:47383/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773276968, "uuid": "416dfca5-1dae-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.208.166.69:41687/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773277280, "uuid": "fb553ce5-1dae-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.144.97:53391/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773277990, "uuid": "a2616519-1db0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.137.81:51423/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773277990, "uuid": "a2849c61-1db0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.11.56:35709/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773278299, "uuid": "5a8dbe62-1db1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.210.153:47383/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773278350, "uuid": "794f0618-1db1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.103.234:46776/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773278653, "uuid": "2d9f8182-1db2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.137.81:51423/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773278720, "uuid": "55c01cb2-1db2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/huhu/titanjr.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773278769, "uuid": "72c65a6b-1db2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/huhu/titanjr.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773278769, "uuid": "72c77bf5-1db2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/huhu/titanjr.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773278769, "uuid": "72c849c7-1db2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/huhu/titanjr.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773278769, "uuid": "72d33155-1db2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/huhu/titanjr.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773278836, "uuid": "9abc5252-1db2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/huhu/titanjr.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773278836, "uuid": "9ad21c8f-1db2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/huhu/titanjr.x86_32", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773278836, "uuid": "9ad389ee-1db2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/huhu/titanjr.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773278890, "uuid": "bb2df997-1db2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/huhu/titanjr.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773279187, "uuid": "6c6270f1-1db3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.2.136:51485/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773280155, "uuid": "acf3143c-1db5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.73/ohshit.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773280155, "uuid": "ad34314c-1db5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.73/bins/sora.arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773280155, "uuid": "ad393ee8-1db5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.73/bins/sora.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773280155, "uuid": "ad410cef-1db5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.73/bins/sora.arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773280155, "uuid": "ad4bb5a5-1db5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.73/bins/sora.arm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773280155, "uuid": "ad52ebe9-1db5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.73/bins/sora.arm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773280156, "uuid": "ad6c9583-1db5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.73/bins/sora.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773280156, "uuid": "ad82d896-1db5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.73/bins/sora.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773280156, "uuid": "ad87bddf-1db5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.73/bins/sora.arc", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773280157, "uuid": "ae7e457f-1db5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.73/bins/sora.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773280158, "uuid": "ae9e8a46-1db5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.73/bins/sora.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773280158, "uuid": "ae9e8bff-1db5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.73/bins/sora.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773280159, "uuid": "af931403-1db5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.73/bins/sora.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773280159, "uuid": "afbe27c9-1db5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.225.143:45621/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773280510, "uuid": "80605cac-1db6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.2.136:51485/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773280527, "uuid": "8abfb3f7-1db6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.249.140:50258/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773281356, "uuid": "78d9fee0-1db8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.0.72:40873/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773281725, "uuid": "54b23d87-1db9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.233.201:48866/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773281784, "uuid": "7849c65a-1db9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.193.117.89:42334/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773281830, "uuid": "93a37f3e-1db9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.193.117.89:42334/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773282022, "uuid": "05c47428-1dba-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.249.140:50258/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773282082, "uuid": "298c03d7-1dba-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.233.201:48866/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773282274, "uuid": "9bd62607-1dba-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.46.74:41198/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773282803, "uuid": "d7459566-1dbb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.63.30:53303/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773283524, "uuid": "85146aa5-1dbd-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.231.46:57548/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773283879, "uuid": "58f38a84-1dbe-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.63.30:53303/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773284540, "uuid": "e295430f-1dbf-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.231.46:57548/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773284842, "uuid": "9699de44-1dc0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.60.251:51973/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773285019, "uuid": "002e5436-1dc1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.208.89:60630/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773285072, "uuid": "1f9cf614-1dc1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.26.169:51968/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773285386, "uuid": "db3f5b28-1dc1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.138.204:53128/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773286166, "uuid": "aba757ff-1dc3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.116.94:35728/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773286401, "uuid": "37b06896-1dc4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.208.89:60630/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773286753, "uuid": "09e052c9-1dc5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.26.169:51968/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773286819, "uuid": "30f22cbe-1dc5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.60.251:51973/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773287963, "uuid": "db189616-1dc7-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.242.70:39250/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773288010, "uuid": "f745fb01-1dc7-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.162:58915/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773288860, "uuid": "f19dcb08-1dc9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.162:58915/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773288918, "uuid": "1422a87e-1dca-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.162.6.156:35035/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773289819, "uuid": "2d462559-1dcc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.114.152.148:43709/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773289940, "uuid": "7533e027-1dcc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.38.88:44387/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773290648, "uuid": "1b503411-1dce-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.242.70:39250/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773290650, "uuid": "1c70c7a7-1dce-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.71.131.225:34950/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773291739, "uuid": "a561b588-1dd0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.148.149:59050/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773291743, "uuid": "a8044cec-1dd0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.38.88:44387/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773292103, "uuid": "7e97ca2c-1dd1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.1.168:42005/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773292278, "uuid": "e6de8390-1dd1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.114.152.148:43709/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773292577, "uuid": "9908a0b1-1dd2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.220.62:51156/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773292954, "uuid": "79ccdc8f-1dd3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.95.215.242:54900/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773293901, "uuid": "ae8b7030-1dd5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.31.90:56748/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773294214, "uuid": "6926471f-1dd6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.220.62:51156/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773294286, "uuid": "93c076ed-1dd6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.175.227:52825/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773294970, "uuid": "2ba4f83f-1dd8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.38.32:51388/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773295340, "uuid": "0817ce45-1dd9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.74.12:45121/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773295392, "uuid": "26f856fb-1dd9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.31.90:56748/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773295459, "uuid": "4f2450a7-1dd9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.175.227:52825/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773295883, "uuid": "4bdb479b-1dda-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/8425384370/xo3ti4X.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773296065, "uuid": "b83f0b3f-1dda-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.38.32:51388/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773296185, "uuid": "ffc69bfb-1dda-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.115.219:59775/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773296423, "uuid": "8d986297-1ddb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.94.85:59879/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773296737, "uuid": "486bfe6c-1ddc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.10.153:48185/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773297682, "uuid": "7c25b7e9-1dde-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.254.106:51123/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773297922, "uuid": "0b2cb74a-1ddf-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.219.4.21:55895/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773298522, "uuid": "70bd328b-1de0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/8635093259/Fh1zHU4.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773299485, "uuid": "aecff425-1de2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.107.143:36956/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773299531, "uuid": "ca21ff84-1de2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.201.75:33606/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773299948, "uuid": "c2d61596-1de3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.219.23.145/predator-varying", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773300081, "uuid": "12032078-1de4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.79.103:38014/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773300092, "uuid": "18927fc3-1de4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.14.229:34298/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773300263, "uuid": "7e1a758c-1de4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.198.101:46328/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773300440, "uuid": "e7b3a32b-1de4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.181.60/iat.exe", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773300742, "uuid": "9b98801e-1de5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.68.58:38191/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773300746, "uuid": "9e47d5f9-1de5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.10.106:32874/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773300973, "uuid": "25c006d0-1de6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.201.75:33606/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773301593, "uuid": "97323551-1de7-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.14.229:34298/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773301820, "uuid": "1e8c06f7-1de8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.79.103:38014/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773301942, "uuid": "67232b2c-1de8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.40.160:33184/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773302000, "uuid": "89f584a4-1de8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.71.167:53556/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773302308, "uuid": "412af020-1de9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.3.223:50111/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773302547, "uuid": "cf782f13-1de9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.68.58:38191/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773302664, "uuid": "155cf50c-1dea-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.40.160:33184/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773302783, "uuid": "5c35de58-1dea-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.107.143:36956/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773303563, "uuid": "2d0785dd-1dec-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.3.223:50111/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773303678, "uuid": "71eff1fa-1dec-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.234.79:50444/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773303679, "uuid": "727b7d8e-1dec-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.218.192:47917/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773304227, "uuid": "b8dc67f9-1ded-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.5.1:35175/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773304241, "uuid": "c142ef3a-1ded-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.68.16:43822/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773304332, "uuid": "f7c9c454-1ded-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.215.152:39775/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773304387, "uuid": "18c132ca-1dee-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://7o9ige3i.documentarygo.digital/?=check&&actmn=vzwgFGeCVWLhdCNI", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773304518, "uuid": "66d520cd-1dee-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.5.1:35175/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773304522, "uuid": "68cf3543-1dee-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/8548282130/K6IpIvm.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773305365, "uuid": "5f2789cc-1df0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.218.192:47917/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773305808, "uuid": "67469b0a-1df1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.238.173.83:35828/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773306066, "uuid": "012bdc7a-1df2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67/xdlol.arm7", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773306066, "uuid": "01325762-1df2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/huhu/titanjr.", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773306066, "uuid": "014a2251-1df2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67/xdlol.arm4", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773306066, "uuid": "015779d1-1df2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.73/bins/sora.sparc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773306066, "uuid": "0157c711-1df2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.73/bins/sora.mips64", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773306134, "uuid": "29c65d21-1df2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.215.152:39775/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773306373, "uuid": "b81deceb-1df2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.68.16:43822/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773306619, "uuid": "4a9bbdec-1df3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.42.127:59312/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773307162, "uuid": "8e9b479a-1df4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.238.173.83:35828/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773307395, "uuid": "195e98d7-1df5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.50.151:57892/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773307515, "uuid": "60caab7d-1df5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/huhu/titanjr.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773307594, "uuid": "90002467-1df5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/huhu/titanjr.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773307594, "uuid": "900a757a-1df5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/huhu/titanjr.mipsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773307995, "uuid": "7eec03d9-1df6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.254.96:43190/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773308951, "uuid": "b8ca397d-1df8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.50.151:57892/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773309488, "uuid": "f8c119cf-1df9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.238.54:41205/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773309619, "uuid": "4734282a-1dfa-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.58.53:48765/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773309858, "uuid": "d54e476d-1dfa-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.254.96:43190/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773309982, "uuid": "1f6d381b-1dfb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.190.19:53971/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773309982, "uuid": "1f830b82-1dfb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.220.112:40261/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773310339, "uuid": "f3fd51b8-1dfb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.107.16:59289/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773310819, "uuid": "126b93eb-1dfd-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.233.204.183:55369/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773310998, "uuid": "7ca6f714-1dfd-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.167.222:49208/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773311177, "uuid": "e7dd4c9b-1dfd-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.190.19:53971/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773311177, "uuid": "e7df7600-1dfd-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.186.113:52365/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773311240, "uuid": "0ce4cdd7-1dfe-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.181.226.40:56308/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773311426, "uuid": "7bcf4421-1dfe-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.56.145:32793/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773311537, "uuid": "be20dd6e-1dfe-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.56.145:32793/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773311595, "uuid": "e0bd4462-1dfe-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.165.84:43871/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773312021, "uuid": "ded38b46-1dff-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.107.16:59289/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773312085, "uuid": "04d773e0-1e00-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.215.201:44827/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773312430, "uuid": "d2443b46-1e00-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.233.204.183:55369/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773312569, "uuid": "2539d60d-1e01-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.5.128:45327/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773312618, "uuid": "42c4562f-1e01-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.186.113:52365/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773312737, "uuid": "895e318a-1e01-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.27.218.208:46393/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773312742, "uuid": "8caf1e89-1e01-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.148.149:59050/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773313094, "uuid": "5e67eb5d-1e02-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.237.185:60227/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773313573, "uuid": "7c01642f-1e03-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.98.204.142:37071/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773313640, "uuid": "a3770093-1e03-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.215.201:44827/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773313869, "uuid": "2c4018c7-1e04-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.192.222:38948/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773314129, "uuid": "c6e333d3-1e04-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.27.203:38034/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773314351, "uuid": "4b34f225-1e05-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.166.224:60875/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773314419, "uuid": "74389943-1e05-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.34.109.121:35372/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773314539, "uuid": "bb7c3d53-1e05-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.135.247:53655/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773314768, "uuid": "441748c7-1e06-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.237.185:60227/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773314896, "uuid": "9030c5a2-1e06-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.98.204.142:37071/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773315022, "uuid": "db21e45f-1e06-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.142.209:58812/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773315439, "uuid": "d42fba3e-1e07-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.166.224:60875/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773315490, "uuid": "f2399a7c-1e07-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.192.222:38948/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773315621, "uuid": "404b80b4-1e08-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.101.152:50101/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773315797, "uuid": "a99d2650-1e08-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.236.66:53139/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773315980, "uuid": "16447105-1e09-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.27.203:38034/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773316094, "uuid": "5a63c120-1e09-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.34.109.121:35372/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773316151, "uuid": "7c0ff55c-1e09-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.161.209:44761/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773316288, "uuid": "cdf431d1-1e09-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.86.225:37842/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773316454, "uuid": "30fa697f-1e0a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.135.247:53655/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773316522, "uuid": "596eae9f-1e0a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.101.152:50101/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773316751, "uuid": "e1d418aa-1e0a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.122.149:53730/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773316879, "uuid": "2e031b56-1e0b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.198.101:46328/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773317185, "uuid": "e48f6192-1e0b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.236.66:53139/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773317649, "uuid": "f91e2bd4-1e0c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.190.248:47176/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773317711, "uuid": "1e1f0219-1e0d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.64.184.26:49753/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773318085, "uuid": "fce1a407-1e0d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.122.149:53730/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773318141, "uuid": "1e884377-1e0e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.49.65.2:34903/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773318250, "uuid": "5f84c92d-1e0e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.93.227:38851/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773318551, "uuid": "13283884-1e0f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.190.248:47176/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773318669, "uuid": "58e97927-1e0f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://strictinspect.jacksend.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773318815, "uuid": "afef649b-1e0f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.136.67:48533/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773318909, "uuid": "e859093a-1e0f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://refineterminal.jacksend.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773318921, "uuid": "ef7121a0-1e0f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.45.49:57256/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773319398, "uuid": "0bd44313-1e11-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.93.227:38851/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773319398, "uuid": "0be925a7-1e11-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.231.69:42463/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773319399, "uuid": "0c99251a-1e11-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.131.123:57726/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773319630, "uuid": "95bfdf9d-1e11-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.49.65.2:34903/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773319815, "uuid": "04302d4d-1e12-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.166.59:51496/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773320110, "uuid": "b3e8d53c-1e12-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://growt1-field.calloak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773320167, "uuid": "d62a9422-1e12-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.131.123:57726/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773320300, "uuid": "2561917c-1e13-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.231.69:42463/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773320359, "uuid": "489f8cfb-1e13-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.172.23:43919/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773320408, "uuid": "65eff383-1e13-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://9jmu.calloak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773320649, "uuid": "f52bf015-1e13-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.172.23:43919/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773320708, "uuid": "186df42f-1e14-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://eubz.calloak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773320728, "uuid": "246e1339-1e14-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.177.97.111:37055/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773321025, "uuid": "d5791dde-1e14-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://01n680.calloak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773321188, "uuid": "36b70fd6-1e15-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://vorspire4ex.restpay.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773321367, "uuid": "a189e744-1e15-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://brasyn.restpay.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773321380, "uuid": "a91ef282-1e15-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.76.224.52:37151/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773321381, "uuid": "a9d0fe34-1e15-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.75.173:50759/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773321436, "uuid": "ca8d10a5-1e15-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.45.49:57256/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773322224, "uuid": "a02542c1-1e17-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://urt925.restpay.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773322236, "uuid": "a723286b-1e17-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.198.158:35111/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773322748, "uuid": "d85cc970-1e18-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://qdqhkub.restpay.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773323116, "uuid": "b3e508e4-1e19-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.69.0:52428/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773323345, "uuid": "3c490b3c-1e1a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://sa17ql.sunpit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773323912, "uuid": "8e47998f-1e1b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.201.246:44560/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773323947, "uuid": "a31da550-1e1b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://2g1jl.sunpit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773324009, "uuid": "c8208427-1e1b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://baritonclick.online/uploads/sharp.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "cmd", "colour": "#965958", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "salat", "colour": "#5e6c8a", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773324014, "uuid": "cb3421b4-1e1b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.150.co.il/rustdesk-1.2.3-2-x86_64.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773324021, "uuid": "cf621125-1e1b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/8167064937/TOFxZfq.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773324068, "uuid": "eb73055e-1e1b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.255.83.29:57970/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773324070, "uuid": "ec2a9119-1e1b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://aaa4b.com/bullk/BRUTER.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773324070, "uuid": "ec6ea891-1e1b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://proappv2.com/apk/apppro.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773324073, "uuid": "ee386286-1e1b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://1827897262.v.123pan.cn/1827897262/MH/INJECT3.PS1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773324608, "uuid": "2d1e433f-1e1d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dep0t9-well.sunpit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773325387, "uuid": "fd5f4464-1e1e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://glzabh.sunpit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773325460, "uuid": "28c00fab-1e1f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.238.54:41205/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773325949, "uuid": "4c5a400d-1e20-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.113.20:46568/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773325963, "uuid": "54fc3ccd-1e20-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.190.238.89:54340/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773326245, "uuid": "fcd51ed8-1e20-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.252.5:34652/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773326303, "uuid": "1f3f0e1b-1e21-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.154.248:33965/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773326709, "uuid": "1175b2ea-1e22-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://summ-rural.oakbay.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773327023, "uuid": "cc7b0464-1e22-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.163.181.104:47481/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773327031, "uuid": "d175dcd7-1e22-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.84.112.228:54477/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773327271, "uuid": "6070475d-1e23-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.164.107:47329/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773327323, "uuid": "7f991a70-1e23-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.190.238.89:54340/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773327434, "uuid": "c14bfb34-1e23-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://proto-re4ge.oakbay.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773327566, "uuid": "107f6896-1e24-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.247.18:45308/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773327609, "uuid": "299946d9-1e24-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://slate-marsh.oakbay.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773327728, "uuid": "70a643ff-1e24-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/vidar/random.exe", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773328147, "uuid": "6a428454-1e25-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/test/random.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773328147, "uuid": "6a5dce61-1e25-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://binar-vector.redpit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773328147, "uuid": "6aa07be1-1e25-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/rdx/random.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773328210, "uuid": "8fd8b5c3-1e25-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/unique2/random.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773328210, "uuid": "905741d2-1e25-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/final/random.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "NirCmd", "colour": "#9081ea", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773328354, "uuid": "e62239d9-1e25-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.242.66.130:40151/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773328510, "uuid": "4299a05b-1e26-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://valleyreb.redpit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773328706, "uuid": "b7ba5ab4-1e26-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.187.101.227:52076/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773328760, "uuid": "d80debce-1e26-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.86.225:37842/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773328760, "uuid": "d81bd96c-1e26-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.84.112.228:54477/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773328822, "uuid": "fcdcc581-1e26-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/7903503838/hsy2OKS.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773328823, "uuid": "fdb97346-1e26-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.113.211:34856/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773328869, "uuid": "18a7ec15-1e27-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://tmzmig.redpit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773329002, "uuid": "682bc08d-1e27-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.187.101.227:52076/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773329061, "uuid": "8b9620d7-1e27-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.252.5:34652/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773329061, "uuid": "8b9787e2-1e27-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.164.107:47329/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773329109, "uuid": "a7a89a71-1e27-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dydqa.windbay.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773329826, "uuid": "531be4c7-1e29-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://exteneur.windbay.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773329886, "uuid": "77562338-1e29-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/5900855435/eNLe4nm.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773329888, "uuid": "780e79a5-1e29-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/1424975206/grFJpUR.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773329889, "uuid": "78ef889b-1e29-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/8441193572/I8N8jbR.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773330066, "uuid": "e2384069-1e29-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://joqyh.windbay.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773330308, "uuid": "728343dc-1e2a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.173.47.137/177/ceo/wellthingsformebest.js", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773330368, "uuid": "964cf5f0-1e2a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.54.102.132/ILitOryfRMXTjathX140.bin", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773330428, "uuid": "b9dc883a-1e2a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.54.102.132/Sexister.hhk", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773330607, "uuid": "24ce895f-1e2b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/7453936223/KAQ8PQ5.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773330607, "uuid": "24e4db61-1e2b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/oblivora/random.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773330609, "uuid": "261754a4-1e2b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/7782139129/4Qrxrgo.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773330666, "uuid": "4835793b-1e2b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://endpo2-craft.goldpit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773330668, "uuid": "494837d3-1e2b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/8167064937/L2BuR1u.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773330727, "uuid": "6c2429fd-1e2b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/7411337060/ZCGm9Ky.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773330727, "uuid": "6c766023-1e2b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/8499672124/b1JNsvy.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Fuery", "colour": "#fb3e08", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773330738, "uuid": "7306bab8-1e2b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/huhu/titanjr.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773330738, "uuid": "7306d6a8-1e2b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/huhu/titanjr.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773330738, "uuid": "7308336b-1e2b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/huhu/titanjr.ppc440", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773330739, "uuid": "733725bc-1e2b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/huhu/titanjr.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773330785, "uuid": "8ee36365-1e2b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/gop/random.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773330980, "uuid": "02f129d6-1e2c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.242.66.130:40151/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773331267, "uuid": "ae22a55a-1e2c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/7903503838/6NMKhZu.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "WallStealer", "colour": "#4aadef", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773331326, "uuid": "d18fdefb-1e2c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://fbge7x.goldpit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773331689, "uuid": "a9aefe65-1e2d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.210.245:40339/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773331746, "uuid": "cbb2fcfc-1e2d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://couriframe.goldpit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773331755, "uuid": "d1483a9a-1e2d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.181.78:57846/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773331939, "uuid": "3ef21ceb-1e2e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.83.247:56094/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773332133, "uuid": "b25ccdb3-1e2e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.86.105:49993/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773332346, "uuid": "3172f50e-1e2f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://2umw.bluebay.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773332709, "uuid": "096f86e2-1e30-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://loaderdrive.bluebay.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773332946, "uuid": "96e3e5ef-1e30-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://anch0r-switch.bluebay.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773333013, "uuid": "bf09a122-1e30-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.46.74:41198/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773333027, "uuid": "c722d850-1e30-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.114.153.179:50363/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773333247, "uuid": "4a4070af-1e31-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/8548282130/O43GJVa.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773333256, "uuid": "4fb86d6a-1e31-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.83.247:56094/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773333367, "uuid": "91976393-1e31-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.24/v4343.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773333429, "uuid": "b70f8fa6-1e31-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.39.231:37075/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773333859, "uuid": "b72ff988-1e32-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.86.105:49993/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773334035, "uuid": "1fc92aab-1e33-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.247.18:45308/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773334277, "uuid": "b002d460-1e33-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.95.118:57265/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773334338, "uuid": "d4c5c691-1e33-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.208.233:40026/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773334577, "uuid": "6320de8f-1e34-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.95.118:57265/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773334747, "uuid": "c84d06e3-1e34-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://bygesuy9.rockbay.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773335185, "uuid": "cd506d11-1e35-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.176.82.119:54420/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773335348, "uuid": "2e61f1d2-1e36-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://shieldretainer.rockbay.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773335658, "uuid": "e7843a7e-1e36-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.208.233:40026/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773335947, "uuid": "9387b6c8-1e37-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://offerclinic.rockbay.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773336008, "uuid": "b7e75c43-1e37-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://andrefelipedonascime1772127941945.0062186.meusitehostgator.com.br/eFvijUeNvf_27_02_Meus_ArquivosDeTexto/02.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773336008, "uuid": "b82eade7-1e37-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://andrefelipedonascime1772127941945.0062186.meusitehostgator.com.br/eFvijUeNvf_27_02_Meus_ArquivosDeTexto/03.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773336009, "uuid": "b8cd7acb-1e37-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://andrefelipedonascime1772127941945.0062186.meusitehostgator.com.br/eFvijUeNvf_27_02_Meus_ArquivosDeTexto/01.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773336437, "uuid": "b80b2278-1e38-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.212.61:53152/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773336672, "uuid": "43e51efd-1e39-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.176.82.119:54420/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773337567, "uuid": "591058a2-1e3b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://nl6rhf.lakepit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773337879, "uuid": "1354f6cc-1e3c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.131.163.246:56962/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773337882, "uuid": "14c353fc-1e3c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.180.84.90:44168/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773338357, "uuid": "3046d2d1-1e3d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.30.81:44613/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773338408, "uuid": "4e7d864b-1e3d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/8167064937/7P402xV.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "WallStealer", "colour": "#4aadef", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773339314, "uuid": "6a96456a-1e3f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.131.163.246:56962/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773339552, "uuid": "f8b0e310-1e3f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.198.193:32945/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773339609, "uuid": "1a5297a4-1e40-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.180.84.90:44168/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773339921, "uuid": "d441e3d3-1e40-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.152.83:51113/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773340813, "uuid": "e82b738e-1e42-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/8425384370/cpX8aAx.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773340996, "uuid": "550f26d6-1e43-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.244.36.34:40065/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773341355, "uuid": "2afc9107-1e44-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.244.36.34:40065/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773341478, "uuid": "7483073b-1e44-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.152.83:51113/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773341721, "uuid": "04fcc809-1e45-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.198.193:32945/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773341885, "uuid": "66c76b17-1e45-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/8220471530/Ads5xOS.exe", "Tag": [ { "name": "Adware.Techsnab", "colour": "#8bc9f0", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773342306, "uuid": "62048c9d-1e46-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/8425384370/mnVpX0P.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773342306, "uuid": "621280bb-1e46-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/7903503838/hsy2OKS.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773342307, "uuid": "62be1e1a-1e46-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://applicationhost17.com/downloads/WN-9EC52640-ADFF-4623-A958-6A7133186985.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773342307, "uuid": "62c3ba7b-1e46-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://applicationhost17.com/downloads/MS-D2DC127D-084C-44D1-8615-6142396987BB.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773342308, "uuid": "62e90fab-1e46-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://applicationhost17.com/downloads/UPD-48C5A1C5-DDD4-465E-9C66-27EFC1D5A846.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773342308, "uuid": "62f86a91-1e46-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://applicationhost17.com/downloads/UPD-F643A043-41C0-4AD0-94D1-B06C8286A9AB.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773342308, "uuid": "63452211-1e46-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.54.102.132/qobCLhzlKw24.bin", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773342309, "uuid": "63aaeee5-1e46-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.54.102.132/Granad244.pcz", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773342309, "uuid": "63d057eb-1e46-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.54.102.132/Progressi.hhk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773342311, "uuid": "64e972b6-1e46-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://applicationhost17.com/downloads/SY-5921A7EB-16A3-46CC-9EE6-0D8677D807DF.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773342323, "uuid": "6c1ff67e-1e46-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://applicationhost17.com/downloads/DA-62FE02B5-5618-420E-A7B8-3D97012A72B9.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773342326, "uuid": "6e1bd172-1e46-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.nmysq.top/oss/usha/ope/openclawAI%207beAolenc.zip", "Tag": [ { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773342669, "uuid": "3a472cb4-1e47-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://du5t0-frame.lakepit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773343089, "uuid": "34edea49-1e48-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.179.97:11697/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773343149, "uuid": "581e1e25-1e48-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://teslasuit.to/optimized_MSIyu.png", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773343149, "uuid": "58233236-1e48-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://valfanto.com/somthids/ejgddFd.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "DarkCloud", "colour": "#91000a", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773343150, "uuid": "593ec81a-1e48-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.teslasuit.to/img_012505yubtcc.png", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773343268, "uuid": "9f6e00e2-1e48-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://id3702579photo-image-docs.com/", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "ua-ps", "colour": "#32D6F6", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773343282, "uuid": "a7b90d6f-1e48-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.149.210:47624/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773343328, "uuid": "c33402de-1e48-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://solspireis6.lakepit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773343342, "uuid": "cb74de3e-1e48-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.146.222.249:51553/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773343351, "uuid": "d0b9b1ad-1e48-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.176.188.44:36861/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773343449, "uuid": "0b4e59d1-1e49-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.128.62:51568/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773343507, "uuid": "2de18181-1e49-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pine-fix.lakepit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773343509, "uuid": "2f1b93b9-1e49-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gharnt.com/poss5645/ENCRYPT.Ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773343820, "uuid": "e8570317-1e49-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.249.56:38512/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773343879, "uuid": "0b99bbef-1e4a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.67.71:52197/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773343927, "uuid": "28391be9-1e4a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.71.224.185/kakrarg/sneakerassembly.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773343986, "uuid": "4b79a3e1-1e4a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.71.224.185/kakrarg/buckwheatsociology.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773343988, "uuid": "4c51ab41-1e4a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dispatc-puls.ironbay.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773344109, "uuid": "94691283-1e4a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://documentos.microsoft-waresystems.com/Comprovante-Pix-12-03-2026.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773344348, "uuid": "2348923e-1e4b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.175.246.3/36/seethebestoptionforeverybodytounder.js", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773344411, "uuid": "48bcc499-1e4b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.5.122:52243/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773344466, "uuid": "695b31bd-1e4b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://salelegalsteroids.com/enterprise/IWkkAiQbHycFEXkIKAgCLTASCwUTXS0YMl13Q3EaNFEKaTsRRx9wBy08VBwNFjNQCgo6LDEDBiQCLxBBCzQbSlB1USwfM3QCEABSHzklFwgmKicFPHcVLiEsDzwUEx0DVQFSekVpdkJIdwdrTn5hU1RvRnVGAWlHf1hzQXZXUANVAVI=", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "KongTuke", "colour": "#A5AEAB", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773344766, "uuid": "1bf50a80-1e4c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pine2-cast.ironbay.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773344828, "uuid": "4160e26a-1e4c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.40.185.33:33084/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773344899, "uuid": "6b5e8aa6-1e4c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.128.62:51568/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773344899, "uuid": "6bbe4a0f-1e4c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.146.222.249:51553/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773345074, "uuid": "d3831995-1e4c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.113.20:46568/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773345141, "uuid": "fbc1538b-1e4c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.3.227:52148/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773345186, "uuid": "16a97bcc-1e4d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://jycyry1b.ironbay.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773345307, "uuid": "5eecb63e-1e4d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://valfanto.com/bgdgvrb/amIdnja.txt", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773345310, "uuid": "6097a790-1e4d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://teslasuit.to/img_012505yubtcc.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773345367, "uuid": "82435e87-1e4d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.54.102.132/ZFSkDn73.bin", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773345367, "uuid": "8267c676-1e4d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.85/rebirthstresswashere", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773345434, "uuid": "aa74d3ac-1e4d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.85/dvr.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773345488, "uuid": "caaa985f-1e4d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.175.246.3/35/seethebstoptionforbetterwyasto.js", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773345495, "uuid": "cee04f9f-1e4d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.3.227:52148/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773345624, "uuid": "1b87778f-1e4e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.67.71:52197/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773345631, "uuid": "1fcc06d7-1e4e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.234.141:48142/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773345666, "uuid": "3497a5eb-1e4e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dpaste.com/46DHTVYZ5.txt", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773345726, "uuid": "5871e39d-1e4e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://p5pywt.ironbay.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773345735, "uuid": "5e043935-1e4e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://tradingmastery.info/txt/king.txt", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773345802, "uuid": "85b87610-1e4e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.246.84:56191/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773345811, "uuid": "8b041647-1e4e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.78.229.0:46367/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773345922, "uuid": "cd64a9f2-1e4e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.213.240.159/bins/pppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773345985, "uuid": "f28d3500-1e4e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.5.122:52243/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773346147, "uuid": "53125961-1e4f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://7lqpjwbx.starpit.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773346343, "uuid": "c848b38f-1e4f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.65.82:46579/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773346393, "uuid": "e5f976ed-1e4f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.40.185.33:33084/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773346446, "uuid": "058c0eaf-1e50-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://runvv4-forge.starpit.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773346460, "uuid": "0e233bc6-1e50-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.65.82:46579/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773346545, "uuid": "40df3867-1e50-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.197.49:53125/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773346687, "uuid": "955e33cc-1e50-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://zennex7is.starpit.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773346761, "uuid": "c16f778e-1e50-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.234.141:48142/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347046, "uuid": "6b31c037-1e51-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pricethread.starpit.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347346, "uuid": "1dda7c62-1e52-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://mod3-trace.invulshuga.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347473, "uuid": "69931e2e-1e52-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/ksnapd0", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347473, "uuid": "69abb8f4-1e52-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/deferwqd", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347473, "uuid": "69c3d73b-1e52-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/devfreqd0", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347473, "uuid": "69d3bc48-1e52-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/vredisd0", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347495, "uuid": "77093fec-1e52-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/kpsmoused0", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347495, "uuid": "7716c32b-1e52-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/mdsync1", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347495, "uuid": "771f519c-1e52-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/ethd0", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347495, "uuid": "771f7bee-1e52-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/ttmswapd", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347495, "uuid": "77204807-1e52-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/ip6addrd", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347496, "uuid": "778bf235-1e52-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/kvmirqd", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347496, "uuid": "778bf581-1e52-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/biosd0", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347496, "uuid": "77906277-1e52-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/kintegrity0", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347533, "uuid": "8d799a99-1e52-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.234.99.24/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347533, "uuid": "8d86c3bd-1e52-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.234.99.24/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347533, "uuid": "8d893e8f-1e52-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.234.99.24/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347533, "uuid": "8d9f2250-1e52-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.234.99.24/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347603, "uuid": "b7368ec3-1e52-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.234.99.24/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347603, "uuid": "b7553d4d-1e52-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.234.99.24/cat.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347603, "uuid": "b76026d7-1e52-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.234.99.24/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347603, "uuid": "b766cc1e-1e52-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.234.99.24/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347647, "uuid": "d147e8e0-1e52-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://spoolfox.invulshuga.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347660, "uuid": "d931c572-1e52-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.234.99.24/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347720, "uuid": "fd30ceb2-1e52-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.175.223.124/bbc", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347721, "uuid": "fda02e8e-1e52-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.253.255:43283/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347766, "uuid": "18a42479-1e53-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/titanjr.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347767, "uuid": "18ca0701-1e53-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/titanjr.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347767, "uuid": "18cd7eb6-1e53-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/titanjr.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347767, "uuid": "18d64309-1e53-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/titanjr.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347767, "uuid": "18f4b11a-1e53-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/titanjr.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347768, "uuid": "19cb32bb-1e53-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/titanjr.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347768, "uuid": "19cf50eb-1e53-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/titanjr.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347768, "uuid": "19cf974e-1e53-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/titanjr.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347768, "uuid": "19d0606b-1e53-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/titanjr.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347768, "uuid": "19d1cdde-1e53-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/titanjr.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347780, "uuid": "20b43903-1e53-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/titanjr.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347783, "uuid": "22572b43-1e53-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/titanjr.ppc440", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347783, "uuid": "2265a6f7-1e53-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/titanjr.mipsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347783, "uuid": "2275cbed-1e53-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/titanjr.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347789, "uuid": "25d95d37-1e53-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/titanjr.x86_32", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347791, "uuid": "273851be-1e53-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/titanjr.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347894, "uuid": "64c08411-1e53-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://chanchanmiraixd.duckdns.org/huhu/titanjr.x86_32", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347894, "uuid": "64c08830-1e53-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://chanchanmiraixd.duckdns.org/titanjr.mipsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347894, "uuid": "64c60e97-1e53-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://chanchanmiraixd.duckdns.org/huhu/titanjr.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347894, "uuid": "64c61119-1e53-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://chanchanmiraixd.duckdns.org/huhu/titanjr.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347899, "uuid": "677defab-1e53-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://chanchanmiraixd.duckdns.org/titanjr.i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347899, "uuid": "677e0e9b-1e53-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://chanchanmiraixd.duckdns.org/huhu/titanjr.i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347899, "uuid": "678e474c-1e53-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://chanchanmiraixd.duckdns.org/titanjr.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347903, "uuid": "69cd2a1d-1e53-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://chanchanmiraixd.duckdns.org/huhu/titanjr.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347903, "uuid": "69cd2ba7-1e53-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://chanchanmiraixd.duckdns.org/huhu/titanjr.ppc440", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347903, "uuid": "69d752d4-1e53-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://chanchanmiraixd.duckdns.org/titanjr.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347903, "uuid": "69dd0868-1e53-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://chanchanmiraixd.duckdns.org/titanjr.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347905, "uuid": "6aec3771-1e53-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://chanchanmiraixd.duckdns.org/titanjr.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347905, "uuid": "6aff7887-1e53-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://chanchanmiraixd.duckdns.org/huhu/titanjr.x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347905, "uuid": "6b04de29-1e53-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://chanchanmiraixd.duckdns.org/titanjr.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347905, "uuid": "6b04f672-1e53-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://chanchanmiraixd.duckdns.org/huhu/titanjr.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347905, "uuid": "6b04fbde-1e53-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://chanchanmiraixd.duckdns.org/huhu/titanjr.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347905, "uuid": "6b3949c0-1e53-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://chanchanmiraixd.duckdns.org/huhu/titanjr.i486", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347905, "uuid": "6b6fe639-1e53-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://chanchanmiraixd.duckdns.org/huhu/titanjr.arc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347906, "uuid": "6bb8cc4f-1e53-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://chanchanmiraixd.duckdns.org/titanjr.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347906, "uuid": "6bb94c5c-1e53-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://chanchanmiraixd.duckdns.org/titanjr.i486", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347906, "uuid": "6bbfef3d-1e53-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://chanchanmiraixd.duckdns.org/titanjr.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347906, "uuid": "6bc86989-1e53-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://chanchanmiraixd.duckdns.org/huhu/titanjr.mipsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773347911, "uuid": "6f0562e4-1e53-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://chanchanmiraixd.duckdns.org/huhu/titanjr.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773348847, "uuid": "9ca0855d-1e55-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://fxafcfe.invulshuga.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773348847, "uuid": "9caa0381-1e55-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://hhqh.invulshuga.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773348847, "uuid": "9cb15c75-1e55-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://temp-urban.directkorchaga.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773348848, "uuid": "9d1ff932-1e55-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.23.238.149/run.bat", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773348848, "uuid": "9d3bb552-1e55-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.23.238.149/support.ps1", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773348861, "uuid": "a5407a84-1e55-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://chanchanmiraixd.duckdns.org/huhu/titanjr.spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773348861, "uuid": "a5407e7a-1e55-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://chanchanmiraixd.duckdns.org/titanjr.x86_32", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773348862, "uuid": "a566dbb1-1e55-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://chanchanmiraixd.duckdns.org/titanjr.arc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773348862, "uuid": "a573d6f4-1e55-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://chanchanmiraixd.duckdns.org/titanjr.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773348862, "uuid": "a5763050-1e55-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.78.229.0:46367/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773348863, "uuid": "a60df847-1e55-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://fxtlp6so.eyedmerlushka.digital/?=check&&actmn=FaOSZWMSjcYBfpmX", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773348863, "uuid": "a6108822-1e55-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.78.250:53155/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773348863, "uuid": "a6328318-1e55-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://chanchanmiraixd.duckdns.org/titanjr.x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773348863, "uuid": "a6378ba0-1e55-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://chanchanmiraixd.duckdns.org/huhu/titanjr.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773348865, "uuid": "a72c76dd-1e55-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://chanchanmiraixd.duckdns.org/titanjr.ppc440", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773348865, "uuid": "a7337fbc-1e55-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://chanchanmiraixd.duckdns.org/huhu/titanjr.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773348865, "uuid": "a73a2f23-1e55-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://chanchanmiraixd.duckdns.org/titanjr.spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773348868, "uuid": "a97714b1-1e55-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.179.13:53615/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773349237, "uuid": "855edcf2-1e56-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.245.2:38823/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773349327, "uuid": "baa8a320-1e56-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gzgqdb.directkorchaga.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773349567, "uuid": "49bb7a1b-1e57-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://186.169.43.64/SOSTENER.bat", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773349570, "uuid": "4b90b0f5-1e57-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://186.169.43.64/SOSTENER.vbs", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773349572, "uuid": "4c9d9912-1e57-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://186.169.43.64/SOSTENER.js", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773349605, "uuid": "609dd101-1e57-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://186.169.43.64/a.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773349627, "uuid": "6d4e744d-1e57-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://arknexen.directkorchaga.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773349927, "uuid": "20a039d3-1e58-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://stitchroo.directkorchaga.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773349942, "uuid": "29814fd4-1e58-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.78.250:53155/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773350167, "uuid": "afb42f9e-1e58-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://nor-nexet.synchronting.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773350528, "uuid": "866dfee4-1e59-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://viykdw01.synchronting.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773350946, "uuid": "7fc4bf77-1e5a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://arkspire4um.synchronting.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773351022, "uuid": "ad30d1f5-1e5a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.235.94:60919/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773351308, "uuid": "576ed4a8-1e5b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://merline3ar.synchronting.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773351727, "uuid": "518e2c1c-1e5c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://piouzv.blowdisassem.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773352027, "uuid": "04288826-1e5d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://fgctlmw.blowdisassem.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773352152, "uuid": "4eb026dd-1e5d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.46.128.198:47333/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773352398, "uuid": "e15347f8-1e5d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.235.94:60919/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773352399, "uuid": "e1ec6967-1e5d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.10.74:60629/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773352519, "uuid": "297ee685-1e5e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.238.172:58989/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773352699, "uuid": "947cbc10-1e5e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.142.166:32887/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773352821, "uuid": "dd1653a8-1e5e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.231.40:43073/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773353107, "uuid": "87e90d7a-1e5f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://uga9ai.blowdisassem.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773353711, "uuid": "efdd67a1-1e60-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.111.58:41411/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773353902, "uuid": "61a8b577-1e61-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.59.202.28:35757/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773354077, "uuid": "c9e72049-1e61-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.124.40:38077/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773354189, "uuid": "0ca4b3c5-1e62-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://lay3r4-cache.blowdisassem.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773354191, "uuid": "0e1ada0c-1e62-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.111.58:41411/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773354192, "uuid": "0e82889f-1e62-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.142.166:32887/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773354193, "uuid": "0edbd6b6-1e62-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.84.213.157:53783/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773354316, "uuid": "58842f37-1e62-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.231.40:43073/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773354428, "uuid": "9aef1e80-1e62-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.196.32.55/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773354428, "uuid": "9b019f9a-1e62-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.196.32.55/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773354428, "uuid": "9b022b7e-1e62-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.196.32.55/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773354428, "uuid": "9b1c16cb-1e62-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.196.32.55/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773354439, "uuid": "a1ff2a2e-1e62-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.196.32.55/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773354439, "uuid": "a1ff592d-1e62-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.196.32.55/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773354439, "uuid": "a202e92e-1e62-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.196.32.55/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773354439, "uuid": "a2067726-1e62-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.196.32.55/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773354439, "uuid": "a20cbcce-1e62-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.196.32.55/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773354440, "uuid": "a217634b-1e62-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.196.32.55/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773354495, "uuid": "c3506e41-1e62-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.196.32.55/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773354496, "uuid": "c3a22ca8-1e62-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.46.128.198:47333/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773354546, "uuid": "e14d3d0a-1e62-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://rq4pe.concretemixer.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773354751, "uuid": "5b7468c4-1e63-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.177.101.253:51659/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773354848, "uuid": "95d22891-1e63-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://getjwrv.concretemixer.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773354858, "uuid": "9b8e40a8-1e63-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.84.213.157:53783/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773354922, "uuid": "c16b410e-1e63-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.253.255:43283/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773355155, "uuid": "4c67ba6d-1e64-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.97.32:36215/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773355328, "uuid": "b375058d-1e64-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ypzwu43.concretemixer.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773355692, "uuid": "8ca5a96a-1e65-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.124.40:38077/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773355873, "uuid": "f87b22b8-1e65-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.2.188:40239/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773355996, "uuid": "418ced4e-1e66-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.27.87:53252/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773356118, "uuid": "8a8117fa-1e66-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.27.87:53252/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773356527, "uuid": "7e55c1ad-1e67-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://zen-crestex.concretemixer.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773356946, "uuid": "77fba27e-1e68-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://eih59fij.idyllmuscat.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773356959, "uuid": "7fc9a252-1e68-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.243.177:58431/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773357486, "uuid": "ba14fd9c-1e69-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://d3ploy-mesh.idyllmuscat.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773357610, "uuid": "03b2f22a-1e6a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.2.188:40239/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773357731, "uuid": "4bf0616d-1e6a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.116.8:44175/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773357850, "uuid": "929cd8f6-1e6a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://kh9zgked.idyllmuscat.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773357910, "uuid": "b65c8f1b-1e6a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/1591294058/VmVo8PF.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773358039, "uuid": "037d3ddb-1e6b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.163.130.60:43789/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773358209, "uuid": "68af1017-1e6b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vyyrr.idyllmuscat.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773358211, "uuid": "69f2e571-1e6b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/7048186296/SASBjh2.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773358217, "uuid": "6d98e18f-1e6b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.76.99.238:47347/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773358271, "uuid": "8d950b30-1e6b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.157.111:43638/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773358637, "uuid": "67efe211-1e6c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.110.15.80:52323/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773358686, "uuid": "8563774a-1e6c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://61yede8.migratetulle.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773358764, "uuid": "b366725d-1e6c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.2.55.4:46688/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773358818, "uuid": "d3a12d84-1e6c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.163.130.60:43789/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773359108, "uuid": "80f4617e-1e6d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://alt-0tter.migratetulle.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773359121, "uuid": "886972e7-1e6d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.98.194:53047/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773359170, "uuid": "a5808369-1e6d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.73/hb8ipc.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773359468, "uuid": "577cb072-1e6e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.211.184:33116/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773359474, "uuid": "5b20e3ad-1e6e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.211.184:33116/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773359475, "uuid": "5bc3af8f-1e6e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.115.67:32935/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773359648, "uuid": "c2ba8a52-1e6e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://threadtrend.migratetulle.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773359714, "uuid": "ea0128ec-1e6e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.157.111:43638/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773359715, "uuid": "ea82785d-1e6e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.50.70:47839/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773359782, "uuid": "12b8ccab-1e6f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.112.134:32968/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773359786, "uuid": "14a5306a-1e6f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.76.99.238:47347/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773321021, "uuid": "d2dd5212-1e14-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "01n680.calloak.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773311225, "uuid": "0470fb10-1dfe-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.181.226.40", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773348845, "uuid": "9b7a1f4e-1e55-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.184.179.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773311406, "uuid": "7007f062-1dfe-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.184.56.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330306, "uuid": "71412005-1e2a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.173.47.137", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773344344, "uuid": "20e208b5-1e4b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.175.246.3", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773346325, "uuid": "bd344ed7-1e4f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.65.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773285005, "uuid": "f81b8400-1dc0-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.38.208.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773309966, "uuid": "159744c0-1dfb-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.38.220.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773321366, "uuid": "a0a0d25b-1e15-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "111.76.224.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773305765, "uuid": "4e107bbd-1df1-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.238.173.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773349206, "uuid": "72e54ae9-1e56-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.245.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773325926, "uuid": "3eaccdbd-1e20-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.228.113.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773318786, "uuid": "9ecc8709-1e0f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.136.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773339905, "uuid": "caf1c994-1e40-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.152.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773293885, "uuid": "a50ea171-1dd5-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.31.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773343805, "uuid": "df489158-1e49-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.51.249.56", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773314524, "uuid": "b2794642-1e05-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.54.135.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773315606, "uuid": "378f0538-1e08-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.101.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773316745, "uuid": "de32bafe-1e0a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.122.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773359107, "uuid": "7ff21fa9-1e6d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.98.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773352805, "uuid": "d4227529-1e5e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.231.40", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773359706, "uuid": "e4f95518-1e6e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.61.50.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773317645, "uuid": "f6dc3238-1e0c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.190.248", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773358206, "uuid": "6737c93d-1e6b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.76.99.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773285065, "uuid": "1b906c19-1dc1-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.139.26.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773358745, "uuid": "a81134da-1e6c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.2.55.4", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276785, "uuid": "d43de6ac-1dad-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.195.103.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773359465, "uuid": "55431976-1e6e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.195.115.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773319384, "uuid": "03a133ad-1e11-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.131.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773279184, "uuid": "6a32fbbe-1db3-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.2.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773274807, "uuid": "39232e6c-1da9-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.186.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773315006, "uuid": "d1951fcc-1e06-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.142.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276365, "uuid": "d9ffa391-1dac-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.239.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773300726, "uuid": "921a8682-1de5-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.10.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773314106, "uuid": "b99dc4b7-1e04-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.27.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773312545, "uuid": "17123336-1e01-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.5.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773316265, "uuid": "c0257500-1e09-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.86.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773333425, "uuid": "b4abe31c-1e31-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.39.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773352684, "uuid": "8bef04a6-1e5e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.142.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773275825, "uuid": "98092e2a-1dab-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.25.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773281706, "uuid": "49b8b0e7-1db9-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.244.233.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773301985, "uuid": "80ad19ec-1de8-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.71.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773292924, "uuid": "6844d5a7-1dd3-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.95.215.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773333006, "uuid": "bad95146-1e30-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.114.153.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773354187, "uuid": "0bbc1465-1e62-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.84.213.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773300248, "uuid": "755855f2-1de4-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.198.101", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773352505, "uuid": "20cc6fa4-1e5e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.238.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773285366, "uuid": "cef93884-1dc1-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.189.138.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773343266, "uuid": "9ddb1523-1e48-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.189.149.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773313866, "uuid": "2a2c54a4-1e04-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.192.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773327546, "uuid": "0425bb8c-1e24-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.247.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773299466, "uuid": "a32c18ad-1de2-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.107.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773359465, "uuid": "5542ff58-1e6e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.211.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773352145, "uuid": "4a4d8cad-1e5d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.46.128.198", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773300426, "uuid": "df6007ab-1de4-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "130.12.181.60", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773324065, "uuid": "e9c29956-1e1b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "158.255.83.29", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773327726, "uuid": "6faeb63d-1e24-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "158.94.208.7", "Tag": [ { "name": "Adware.Techsnab", "colour": "#8bc9f0", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Fuery", "colour": "#fb3e08", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "NirCmd", "colour": "#9081ea", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "WallStealer", "colour": "#4aadef", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276545, "uuid": "457bbe1e-1dad-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "161.97.148.194", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773288906, "uuid": "0cc66464-1dca-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.162.6.156", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773300726, "uuid": "921af143-1de5-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.141.68.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773286145, "uuid": "9f655cce-1dc3-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.116.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773343445, "uuid": "08d2bc7c-1e49-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.128.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773304206, "uuid": "aca9610c-1ded-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.68.16", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773322221, "uuid": "9e613b07-1e17-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.198.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773307985, "uuid": "793d42b7-1df6-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.254.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773320345, "uuid": "4043ea6a-1e13-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.122.172.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773345606, "uuid": "10b5edd4-1e4e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.234.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773314344, "uuid": "477f53b8-1e05-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.166.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773318906, "uuid": "e6a7ab59-1e0f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.45.49", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773343325, "uuid": "c134470e-1e48-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.146.222.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773335165, "uuid": "c19d69a0-1e35-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.176.82.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773328324, "uuid": "d4277d82-1e25-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.242.66.130", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773324070, "uuid": "ec886fe8-1e1b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "1827897262.v.123pan.cn" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773348845, "uuid": "9b7e146b-1e55-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.23.238.149", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773349565, "uuid": "48b51449-1e57-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "186.169.43.64", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773344824, "uuid": "3ec94a7e-1e4c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "190.40.185.33", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773328685, "uuid": "ab2a7cae-1e26-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.187.101.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773333365, "uuid": "909d2ca9-1e31-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "196.251.107.24", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330365, "uuid": "94bca1d7-1e2a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "209.54.102.132", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773332105, "uuid": "a1df005f-1e2e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "216.126.86.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773277984, "uuid": "9eeae881-1db0-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.11.56", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773326286, "uuid": "150b3e57-1e21-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.154.248", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773327246, "uuid": "515da515-1e23-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.164.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773304206, "uuid": "acaa722c-1ded-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.5.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773291725, "uuid": "9d7c6649-1dd0-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.148.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773281766, "uuid": "6d394d05-1db9-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.193.117.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773331684, "uuid": "a693b151-1e2d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.210.245", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773292564, "uuid": "91a10bb4-1dd2-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.220.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773311165, "uuid": "e09de521-1dfd-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.186.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773357725, "uuid": "488b08e7-1e6a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.116.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773282786, "uuid": "cd523884-1dbb-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.63.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773348845, "uuid": "9b7e4ad7-1e55-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.78.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773323945, "uuid": "a1cb99ad-1e1b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "2g1jl.sunpit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773332344, "uuid": "30042dba-1e2f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "2umw.bluebay.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773327006, "uuid": "c2854cbf-1e22-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.84.112.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773345784, "uuid": "7b1080f7-1e4e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.78.229.0", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276486, "uuid": "22400778-1dad-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.144.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773294272, "uuid": "8b8d1b15-1dd6-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.175.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773287945, "uuid": "d0183ab0-1dc7-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.242.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773356944, "uuid": "769a64ff-1e68-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.243.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773334324, "uuid": "cc692239-1e33-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.208.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773336424, "uuid": "b00656e6-1e38-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.212.61", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773326225, "uuid": "f0e47e33-1e20-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.252.5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773301925, "uuid": "5cc0bf5c-1de8-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.40.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773331924, "uuid": "35f1c823-1e2e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.83.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773283506, "uuid": "7a96c5a8-1dbd-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.231.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773310985, "uuid": "75229389-1dfd-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.56.167.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773353885, "uuid": "575f0634-1e61-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.59.202.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276845, "uuid": "f84e7072-1dad-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.85.210.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773307386, "uuid": "13bc964b-1df5-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.85.50.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773343086, "uuid": "32af491e-1e48-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.164.179.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773337864, "uuid": "0a9a6a1a-1e3c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.180.84.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773359165, "uuid": "a2b27e42-1e6d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.151.182.73", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773354725, "uuid": "4c82250d-1e63-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.177.101.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773320705, "uuid": "1701f49d-1e14-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.177.97.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773312065, "uuid": "f8fe6f7e-1dff-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.215.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773323105, "uuid": "ad02e49f-1e19-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.69.0", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773309966, "uuid": "1597219d-1dfb-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.190.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773277984, "uuid": "9eeb58e3-1db0-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.137.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773313565, "uuid": "76f8e9ee-1e03-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.98.204.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773352384, "uuid": "d92ec374-1e5d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.18.10.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773315785, "uuid": "a2244c1d-1e08-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.236.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773312725, "uuid": "824d7eec-1e01-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.27.218.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773310325, "uuid": "ebeb4072-1dfb-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.107.16", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773358026, "uuid": "fb902650-1e6a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.163.130.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773343325, "uuid": "c1343273-1e48-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.176.188.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773274746, "uuid": "14c9d0d5-1da9-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.28.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773282246, "uuid": "8b8b218e-1dba-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.46.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773358685, "uuid": "84a8fedf-1e6c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61yede8.migratetulle.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773346144, "uuid": "51cb9d5c-1e4f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "7lqpjwbx.starpit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773304385, "uuid": "177385d0-1dee-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "7o9ige3i.documentarygo.digital" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773343926, "uuid": "279ed013-1e4a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "80.71.224.185", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773310807, "uuid": "0ae15d1e-1dfd-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.233.204.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773278706, "uuid": "4d6e969f-1db2-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "87.121.79.23", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773354425, "uuid": "9955ac4e-1e62-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.196.32.55", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276965, "uuid": "3f9c8519-1dae-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "93.208.166.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773320406, "uuid": "64ca1278-1e13-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "9jmu.calloak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773324066, "uuid": "e9f7b6b5-1e1b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "aaa4b.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773359107, "uuid": "7ffb6285-1e6d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "alt-0tter.migratetulle.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773332944, "uuid": "95daee93-1e30-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "anch0r-switch.bluebay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773336007, "uuid": "b73bb18f-1e37-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "andrefelipedonascime1772127941945.0062186.meusitehostgator.com.br" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773342306, "uuid": "62058126-1e46-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "applicationhost17.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773349625, "uuid": "6c5d3842-1e57-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "arknexen.directkorchaga.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773350945, "uuid": "7f02c193-1e5a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "arkspire4um.synchronting.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773324006, "uuid": "c689bab7-1e1b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "baritonclick.online" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773328145, "uuid": "6973f491-1e25-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "binar-vector.redpit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773321366, "uuid": "a0aa080e-1e15-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "brasyn.restpay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773334745, "uuid": "c6f3ab1a-1e34-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "bygesuy9.rockbay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773331745, "uuid": "cad211b1-1e2d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "couriframe.goldpit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773357485, "uuid": "b9169c79-1e69-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "d3ploy-mesh.idyllmuscat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773324607, "uuid": "2c55754f-1e1d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dep0t9-well.sunpit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773343986, "uuid": "4b487bd7-1e4a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dispatc-puls.ironbay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773342665, "uuid": "37de0c99-1e47-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "du5t0-frame.lakepit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773329106, "uuid": "a654dec0-1e27-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dydqa.windbay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773356944, "uuid": "76eff1fb-1e68-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "eih59fij.idyllmuscat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330665, "uuid": "476cbcb1-1e2b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "endpo2-craft.goldpit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773320706, "uuid": "170da888-1e14-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "eubz.calloak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773329824, "uuid": "5258690d-1e29-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "exteneur.windbay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773331325, "uuid": "d08bc8e4-1e2c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "fbge7x.goldpit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773352025, "uuid": "030ca083-1e5d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "fgctlmw.blowdisassem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773348845, "uuid": "9b95fb27-1e55-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "fxafcfe.invulshuga.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773348847, "uuid": "9cdb3330-1e55-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "fxtlp6so.eyedmerlushka.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773354845, "uuid": "93c28c26-1e63-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "getjwrv.concretemixer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773343506, "uuid": "2d4cae22-1e49-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "gharnt.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773325385, "uuid": "fc718821-1e1e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "glzabh.sunpit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773320108, "uuid": "b2b519cf-1e12-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "growt1-field.calloak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773349325, "uuid": "b9bd0dd0-1e56-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "gzgqdb.directkorchaga.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773348845, "uuid": "9b8af5bd-1e55-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "hhqh.invulshuga.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773343266, "uuid": "9de9f579-1e48-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "id3702579photo-image-docs.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773330064, "uuid": "e12c747f-1e29-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "joqyh.windbay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773345185, "uuid": "15c15874-1e4d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "jycyry1b.ironbay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773357848, "uuid": "9185d4dd-1e6a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "kh9zgked.idyllmuscat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773354187, "uuid": "0bc49593-1e62-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "lay3r4-cache.blowdisassem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773332706, "uuid": "07f147e6-1e30-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "loaderdrive.bluebay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773351306, "uuid": "56800d3b-1e5b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "merline3ar.synchronting.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773347344, "uuid": "1d16cdc6-1e52-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "mod3-trace.invulshuga.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773337565, "uuid": "57e4eaad-1e3b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "nl6rhf.lakepit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773350165, "uuid": "ae5fffd5-1e58-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "nor-nexet.synchronting.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773335945, "uuid": "92ba53d8-1e37-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "offerclinic.rockbay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773345725, "uuid": "578e42a3-1e4e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "p5pywt.ironbay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773343505, "uuid": "2cc8dc9a-1e49-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pine-fix.lakepit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773344764, "uuid": "1abecdbb-1e4c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pine2-cast.ironbay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773351726, "uuid": "50cea568-1e5c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "piouzv.blowdisassem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773347045, "uuid": "6a77c811-1e51-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pricethread.starpit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773324066, "uuid": "e9e1c1df-1e1b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "proappv2.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773327425, "uuid": "bc1f3021-1e23-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "proto-re4ge.oakbay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773322744, "uuid": "d6595a1e-1e18-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "qdqhkub.restpay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773318906, "uuid": "e6b0488c-1e0f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "refineterminal.jacksend.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773354544, "uuid": "e02c1dc8-1e62-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "rq4pe.concretemixer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773346444, "uuid": "044b43dc-1e50-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "runvv4-forge.starpit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773323344, "uuid": "3b8fa62c-1e1a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "sa17ql.sunpit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773344464, "uuid": "6803336f-1e4b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "salelegalsteroids.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773324011, "uuid": "c90973a8-1e1b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "secvvssly12.cyou" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773335345, "uuid": "2d16ae0e-1e36-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "shieldretainer.rockbay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773327607, "uuid": "287f41f7-1e24-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "slate-marsh.oakbay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773343325, "uuid": "c13f2098-1e48-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "solspireis6.lakepit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773347645, "uuid": "d07480f2-1e52-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "spoolfox.invulshuga.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773349926, "uuid": "1fbca438-1e58-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "stitchroo.directkorchaga.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773318666, "uuid": "576adf7b-1e0f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "strictinspect.jacksend.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773326706, "uuid": "0fbc1d06-1e22-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "summ-rural.oakbay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773348845, "uuid": "9b97318c-1e55-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "temp-urban.directkorchaga.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773359645, "uuid": "c07f996a-1e6e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "threadtrend.migratetulle.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773328865, "uuid": "16c7f54b-1e27-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "tmzmig.redpit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773345725, "uuid": "579a16e2-1e4e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "tradingmastery.info" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773353106, "uuid": "87081519-1e5f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "uga9ai.blowdisassem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773322221, "uuid": "9e6d81e4-1e17-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "urt925.restpay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773328508, "uuid": "416c6992-1e26-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "valleyreb.redpit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773350526, "uuid": "854b6339-1e59-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "viykdw01.synchronting.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773276546, "uuid": "45bbf3da-1dad-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "vmi3114056.contaboserver.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773321185, "uuid": "3514775c-1e15-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "vorspire4ex.restpay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773358206, "uuid": "67410b3b-1e6b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vyyrr.idyllmuscat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773324006, "uuid": "c6794bd3-1e1b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.150.co.il" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773342307, "uuid": "6241ce04-1e46-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.nmysq.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773343148, "uuid": "57ed79c9-1e48-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.teslasuit.to" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773355326, "uuid": "b26c166e-1e64-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ypzwu43.concretemixer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773356525, "uuid": "7d4b68c3-1e67-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "zen-crestex.concretemixer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773346685, "uuid": "93bee1cc-1e50-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "zennex7is.starpit.in.net" } ] } }