{ "Event": { "published": true, "date": "2025-03-23", "threat_level_id": 2, "info": "URLhaus IOCs for 2025-03-23", "timestamp": 1742774590, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "c42210a9-6e63-4fbd-a577-d9dc80d45942", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "980d8bb1-077a-11f0-9a93-82aee05be84a", "comment": "Malware payload", "timestamp": 1742688356, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742688356, "uuid": "f7a79354-79c7-4b83-a30b-3b416bd19e97", "comment": "Malware payload", "value": "f0b7a536d188bb6c12a4f36d8b9f526e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742688356, "uuid": "2fb6f2a1-7009-409c-a97f-e03a13d6ea8e", "comment": "Malware payload", "value": "73e0876324342a662980c1334b8ab2d22146413b24094b9b4dc48b09955e404c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742688356, "uuid": "184a9e66-65f9-426f-a83d-f43f327b4e8c", "value": "T118A52292E8CDD513F958CB7AD1BB3E8DCA7E1C70F3271A1861C9A1540A5F447E8824", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742688356, "uuid": "71c1a02b-a43e-47c8-8b8a-621c13eae391", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742688356, "uuid": "83039fed-880f-4ee2-8963-2f28838cee8c", "value": "49152:+5uc/KpP5AWl0ZH371dXO6X2PKJMsiahFBnA2SNBTS:+5uFGr1s6XWkMpa7BnAtHW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742688356, "uuid": "e25a5a2b-9401-4359-a51c-361cf37d5472", "value": 2118656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742688356, "uuid": "89e82183-106d-4d14-a1b9-c782a16164e4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1742688555, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742688555, "uuid": "0c40cfd0-b526-49be-b7b8-823f4d7d757a", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742688555, "uuid": "f88332c3-08cb-4b91-9311-fa501f715a6f", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742688555, "uuid": "6e0bac4f-4158-4ce0-8b38-d1a465145d5a", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742688555, "uuid": "00cefd08-074d-4710-b739-1d87b1760f2b", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742688555, "uuid": "193964a1-883b-4fed-a992-de0f46bc40f2", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1742688556, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742688556, "uuid": "17da2983-c007-4afa-ade9-585212f0a1b8", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742688556, "uuid": "29072780-8a64-436f-a98b-1685515b6389", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742688556, "uuid": "417c6939-f039-45a7-badd-2e085ffbde27", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742688556, "uuid": "d16c99b6-85d7-43cf-b09d-0aa0372175cf", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742688556, "uuid": "b695c332-8d11-488d-9ef7-c7c8e0d46927", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1742688611, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742688611, "uuid": "e148eda7-d452-4e48-bfac-a54bdf45e47e", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742688611, "uuid": "df8b35ca-1aab-4866-9d19-8ce071955349", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742688611, "uuid": "2e40aac2-f30a-4bc9-9922-321972b9605e", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742688611, "uuid": "bbbebff7-95cd-44db-b340-aa8ccde7f2d0", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742688611, "uuid": "ddcaa346-65fb-4634-addd-c651331a33bd", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dadf09fc-077b-11f0-9a93-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742688898, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742688898, "uuid": "e9aa7350-4ecd-4f3c-89e7-fd7eb8fcfe9b", "comment": "Malware payload (Mirai)", "value": "0322dbd4f5778b945ac18c04bd9cbf30", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742688898, "uuid": "70dd3716-0053-4a2b-a224-8dabbc5deadf", "comment": "Malware payload (Mirai)", "value": "9eee5f203a1dd7e7d210bd6e332c37fc615e58efe8877565939820ea3d58aa34", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742688898, "uuid": "fc86bebe-28b0-41eb-8938-2441bd20ce88", "value": "T1CB3349C2A482CDF2FC5B41F4493BEB656772F4372014DA93E3631929E871A80D7867", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742688898, "uuid": "056d57b6-9143-41be-9e0d-d8abd5526106", "value": "1536:Y55bs+viNs6Nc/nVPzFpV/khQBhIvN4ePTeBJDZ:HunPz6k6vNXPiBVZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742688898, "uuid": "8016161f-7188-41c5-96e5-0b4b498bc928", "value": 54516, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742688898, "uuid": "b64636dc-197c-4dda-99d5-69b434a69949", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "efaa9cf2-077b-11f0-9a93-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742688933, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742688933, "uuid": "adde95d9-3b54-4663-b9c8-77af9f775450", "comment": "Malware payload (Mirai)", "value": "85d70b50aba02cf6d455dc014dd30f1f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742688933, "uuid": "9d8ac9ea-a859-4f84-9d74-578553cd7859", "comment": "Malware payload (Mirai)", "value": "e2ac4f3ce5ba58c7ea9f4be0407669773d24552d8065e14243aae689ed39b679", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742688933, "uuid": "a2af5e68-b9a8-4a56-82a1-9f7dd9e2de1a", "value": "T148734C63F9829202C5D10777F90E4289B73957A5E3EF3603DD299F203BAB56A0E9F1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742688933, "uuid": "50f76f0c-ad60-46c5-a204-649c263bef89", "value": "1536:lFDMK6DAcIu6EKVz/Jxokrqi8d7TRLdR2u:kK60cIvEKVkkri/Rj2u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742688933, "uuid": "ae76a411-fa66-4cf3-94b7-54637aaf41f9", "value": 79300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742688933, "uuid": "760f48ee-b88b-403b-a6c6-18868200abbb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4a5b065b-077c-11f0-9a93-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742689085, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742689085, "uuid": "be47e9d1-9920-45e4-9865-a1a6840b6193", "comment": "Malware payload (Mirai)", "value": "857a1cd8b476c8a77275bfb57eedb239", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742689085, "uuid": "d020b0b4-adbd-440e-82e1-0faa02e06eb2", "comment": "Malware payload (Mirai)", "value": "f00f0b1745832463635f37b5cb88ecfe77b62265ef835967b03f6a0274f952cc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742689085, "uuid": "1ad222d2-83f0-47ac-bdef-d0e2726fc943", "value": "T1B283A6066E614FADF76D83340BB78E32A79D23C623E18681E66DD9001F6034D645FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742689085, "uuid": "2e4523f1-be80-433d-bc7d-8f2a7f78d658", "value": "1536:cppglgl1AsldMPJ4P6mFOE1ljPVt2dZ2e1/MlSq:c24P6mFOE1ljPP2dZDElSq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742689085, "uuid": "a09ca5da-c46f-4469-950a-139674a9496e", "value": 80924, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742689085, "uuid": "e22e27f0-3372-4160-b7ce-7aa8c7b0a6ec", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1d924c6-dfe8-11eb-bc10-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1742689451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742689451, "uuid": "2ffd2c34-1ed0-4393-bb45-10bbb2f8767d", "comment": "Malware payload", "value": "6b0fb88c187a6dbf48017f66f262edab", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742689451, "uuid": "7d157d7e-d2c2-43e9-a0f7-73d9e61fdab2", "comment": "Malware payload", "value": "ded36b111f815e57e2658bd881beaf247be1fea999902456df83840100f5ae65", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742689451, "uuid": "ecdc7f07-7559-49e0-968e-1a83b64f6513", "value": "B9D3128BEF368C1FDB002E7216DB4B9E6C6D395B41CBF4A8F9C1818F13A11C57952215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742689451, "uuid": "a648f51d-3c20-4f2a-97b4-0f525a68dc83", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioX:p3lOYoaja8xzx/0wsxzSi6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742689451, "uuid": "1b1e09ee-1f3a-493a-91b0-38f52acb3ef1", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742689451, "uuid": "dbc1f92f-ddb6-41f1-a52d-ac025ed576ce", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "979ff891-077d-11f0-9a93-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742689644, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742689644, "uuid": "597c41be-a464-4d2d-98d3-895c750e0a37", "comment": "Malware payload (Mirai)", "value": "6cd21d01335b55803c814ea16959b6b7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742689644, "uuid": "058268ad-8f0a-463a-823d-54d11a21cd2d", "comment": "Malware payload (Mirai)", "value": "04739b7e3e322f1046f696f1fe4cf8582790b75ce58b179d284327357565dc24", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742689644, "uuid": "625556f2-9db0-4674-856b-96cde64ad057", "value": "T1A7336B93CC256E08C4A4D4B275705B7EEBA3B828965B1FDA2D67C32A9443DC8F1463", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742689644, "uuid": "2ea4ed88-d8d6-4112-b627-6d8595658e54", "value": "1536:YC5plG3q30lx6baY0Bxi3AQBS6VoclKr6s0qZzJCLn0pw:J1G3q30lx6mY0Bxi3Ab6Vo5r7ZzJFpw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742689644, "uuid": "93946185-1ae5-4a98-94b1-420311892545", "value": 54724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742689644, "uuid": "6666df28-967e-43d4-8f94-1ae4156a788b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "701213c7-077f-11f0-9a93-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1742690437, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742690437, "uuid": "e6ca9faa-ea51-4592-9b42-5e36fe61930f", "comment": "Malware payload (Gafgyt)", "value": "05bf74f22f3a8dfb4b3cdef6a71d839f", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742690437, "uuid": "c1cc698a-36ad-46f2-b63a-3e9da40264d1", "comment": "Malware payload (Gafgyt)", "value": "840c1581232746beae8a004340dc28ce801eef7c74320b303a4ae8070238779a", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742690437, "uuid": "d530e01d-5b58-43f0-85e8-0af55b10a51d", "value": "T15FA34B2B6651C2BEC08316B52BCF95619C33BC3A0B32610633A5BEA93F35CDD5D6A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742690437, "uuid": "b7f2a269-1d63-4589-a102-6ce66aa4b091", "value": "3072:F1gM9Q8l670o2K/yqn+Gzy2ivPF8KQgS+AmmXVcnYFGo66:OvyYL2vPF8GAmmXVcnYFGo66", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742690437, "uuid": "3a21fd3b-7c7f-4e94-ba53-52f22e693b7b", "value": 106595, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742690437, "uuid": "76d1a489-5e3b-42be-a599-88b650936a98", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9207e7a7-077f-11f0-9a93-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742690494, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742690494, "uuid": "38865d00-c583-47a2-b53f-9355af8e8151", "comment": "Malware payload (Mirai)", "value": "2ddcc3fe88a593c62d002ad6c79406f2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742690494, "uuid": "6cafd69f-ffb9-44eb-a33c-89f4339c439e", "comment": "Malware payload (Mirai)", "value": "49fe0fd19b6c3daf04a9c7d116cfbb40e6e6508ef778f819b858a8bc8506848f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742690494, "uuid": "f57c38cd-5cdb-4209-acd7-6a2a2c191809", "value": "T1A7632A31B6710E23C1D6993E25F70732F2F5574E28BCCA2A3C621E4DBF616902557E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742690494, "uuid": "7b1b630f-cbda-4394-82a1-20429a3f9190", "value": "768:TfwhmvQpX5flVud0SKc7MakO+d5zEBhR5d1tgN7wgIARaP:TYhXX5Ntrd54BttgOgvK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742690494, "uuid": "d12ef999-5e2c-4687-8b66-a16f5c7008d0", "value": 67232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742690494, "uuid": "88eafe31-a2b0-4c57-97d9-feae40a5d471", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f711341a-0780-11f0-9a93-82aee05be84a", "comment": "Malware payload (RustyStealer)", "timestamp": 1742691093, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742691093, "uuid": "10cfd53d-c845-4100-a21a-9c7ad0885eb3", "comment": "Malware payload (RustyStealer)", "value": "9017dc183ee54710b90bb5f5becf030b", "object_relation": "md5", "Tag": [ { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742691093, "uuid": "9e6cfea2-d265-4145-b74d-1509412c6d1f", "comment": "Malware payload (RustyStealer)", "value": "e5ffd1a5581550e60d729eda2299a9daf55ca2ebb1abe134403770d9768bc9b8", "object_relation": "sha256", "Tag": [ { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742691093, "uuid": "f20e5197-f4e8-4b34-af35-e2e9022b49d3", "value": "T155F5332738EEA148DA95FC3C92DFE101E4F2856A423F6E1D3FF51D2AD33599024096", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742691093, "uuid": "17391667-b6a4-43e2-bdac-0c92d9f18951", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742691093, "uuid": "f05d9b65-c75d-492a-91df-8f49f7f55738", "value": "49152:kkIeu/enDcmB1gSEE19Gny/DS+aYMXzUo/Ly6NPB6JLNGOayE2v1m+H0H84Uk1:kqnD51gSzr/DLarYEPcNGYnv1nUB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742691093, "uuid": "6b7a27bf-525e-4c7e-90ff-b7bde1a03f63", "value": 3496448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742691093, "uuid": "f171cf43-8f91-4d1e-a778-8f5a1210931d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86b21e41-0781-11f0-9a93-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742691333, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742691333, "uuid": "1b3364e1-2387-4b1b-aa2d-4edaf2c62604", "comment": "Malware payload (Mirai)", "value": "60cccd65ed54bcc4adceef9df6b354b9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742691333, "uuid": "4c5b974b-60f5-4d15-9f0b-32ffe66cad04", "comment": "Malware payload (Mirai)", "value": "38386db1daa2d1cd73bf2b09fc3130531aecdf06c13fb8009e0643c180d0302f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742691333, "uuid": "b0375385-8625-4319-99e5-9807af78c1f1", "value": "T13D432A02B70D0C47D2632FB07A3B17C5E3DBB99121E4E685360EEB8E8571E729546E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742691333, "uuid": "529a5439-c1aa-47fb-b06a-06b5647a5427", "value": "1536:SySf4HeWkZBc6pTznxpCUtC9Bwtd2IvjgB:honCz9By2igB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742691333, "uuid": "262c4e51-205c-4435-bdd1-b81f83e41955", "value": 58924, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742691333, "uuid": "90b6bc4d-8d18-4c9e-9aa9-454a1f593aa7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dda42259-0781-11f0-9a93-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742691479, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742691479, "uuid": "059977df-3f66-41b9-ade7-05c8f81c8029", "comment": "Malware payload (Mirai)", "value": "dda9504f58ec89f90c78860b34cb8a1d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742691479, "uuid": "608ad6b0-59be-4694-9fb8-a93f96de26c0", "comment": "Malware payload (Mirai)", "value": "c5fd97fad85e830b41ad508ef3e589cdc79e62557541c0c60b28ebc4ded33c31", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742691479, "uuid": "32f3a2a5-3c6a-44f8-b232-3d11c2d1c27d", "value": "T1B6731756F8815B12D4C5167AFE0E228E3313077DE3DE72239E249B307B9B56B0E7A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742691479, "uuid": "ab763bbb-b8a0-4d55-bf90-f09591aebb4b", "value": "1536:zkn3rFKOKCKlK0KZKFtyptzetTTRRaderm8IpiyimRfhKWMr5cY6q:AFKOKCKlK0KZKFYzethRa1imRfIWMrKu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742691479, "uuid": "d85e00bc-5c0f-49bd-a802-ad7fa3ee7e7e", "value": 79232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742691479, "uuid": "c83aface-d3eb-47e9-9371-6195501cb796", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e873baab-0781-11f0-9a93-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742691498, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742691498, "uuid": "ce014745-34f5-4af8-885c-0ef485de806e", "comment": "Malware payload (Mirai)", "value": "f120c4e98a5a184ca782949361ce022a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742691498, "uuid": "cd8974a3-4130-448b-8d21-208247581145", "comment": "Malware payload (Mirai)", "value": "f7398bcf741f55b72bd1baaa1ce266221ba90f40c3ec7c39eafc2987a21f37bf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742691498, "uuid": "dfeb2daa-0a6b-4da1-9f8c-25b10af20dfe", "value": "T12493284AF8816B11D8D525BEFE0E1189335347BDE3EE7212DD208B2137CA96B0F769", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742691498, "uuid": "de00360d-b08f-4a5b-8320-69e30047c222", "value": "1536:FPniSgKKCNKLNKQKiKEKrKkBO7i9+DIZBaOV2bbKicClITiFmybT7CY7hkM:vpKCNKLNKQKiKEKri7i9+cZBaOV2bbQW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742691498, "uuid": "415bddd5-d49e-4dac-92d3-b8e0ce6dde1e", "value": 90320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742691498, "uuid": "7ee25603-6c9c-4691-b00f-3f985ebc87a1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1492c283-0782-11f0-9a93-82aee05be84a", "comment": "Malware payload", "timestamp": 1742691572, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742691572, "uuid": "c4645f92-dd46-4cc3-a9f7-c4d18a5321d0", "comment": "Malware payload", "value": "f9a8754923fce20dc3e4cc60cc136b4b", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742691572, "uuid": "7d8297a0-8430-4ad5-a198-85a576eae20d", "comment": "Malware payload", "value": "806c70dac9839ba6db3bfed5baa503782b4bd086d71395f1ca727da9f71793d3", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742691572, "uuid": "398e81fd-a299-4f27-952a-ff55dbb22328", "value": "T1A921334A91FC624582229BE0C04462A6502F412F51969E14B2BDCA893F62F7A9BF47", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742691572, "uuid": "e59c3a46-1fdf-4db1-b0ba-be53ab47a391", "value": "24:jZELmIULR6LkPVdaA22XHHD4fcxEOm9+XpaFku224u5Fr5F3u0zFzNSInaMn:jZYmFROgVgAXXH+q+1jdzFzNRnaMn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742691572, "uuid": "d0c0ba40-0d0f-45db-9571-36ef264b247d", "value": 1414, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742691572, "uuid": "8bb19c94-b7fe-4fb0-9d62-81013119cc01", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "50790db5-0785-11f0-9a93-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742692961, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742692961, "uuid": "74037c11-75e5-435f-a047-940d2d2135e7", "comment": "Malware payload (Mirai)", "value": "b41d629c0f69e30e9fadfb1662d19011", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742692961, "uuid": "b2645a53-62fa-430c-a785-3fd2ed51212c", "comment": "Malware payload (Mirai)", "value": "9f2551c4eba779d75bbdfcb216daf458b5a5fbe2c3c597a85f132219ad19295d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742692961, "uuid": "d641ef53-c622-4640-9e96-e9a2cbc61590", "value": "T1F3A2D776577A2B13C4F0A77954A7670332653A9825A4C28FBE290D1FEFA1300AC277", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742692961, "uuid": "d9e726b1-e96d-4c66-adb4-805fe466a3c4", "value": "384:XjJNNiFdoJm62kFdCgcMZ8h3B1kqRig73xPLlSaV2w:X7odoJmWdjbZ89Fig73xPLlHYw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742692961, "uuid": "c8edb9d6-82fe-4027-a51f-ab3c231bd702", "value": 22584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742692961, "uuid": "21124201-449c-43c9-be28-439bef39e460", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a36671bd-0785-11f0-9a93-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742693100, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742693100, "uuid": "6dc90c9a-c237-403e-8995-ac9ffd65269e", "comment": "Malware payload (Mirai)", "value": "3d81253724f8ef5ba1155997cd891772", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742693100, "uuid": "788267bd-a3ed-4e10-9113-2ba0372ebba0", "comment": "Malware payload (Mirai)", "value": "95209a50e4562e273a7b6ea42293714e14388a7f3ec8edde704b7613f5aefbe3", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742693100, "uuid": "fa158a2d-c3b6-443e-aed7-5ca8d9f00f14", "value": "T1F921C9C86326226B044819147B7EDD0C5C49E9B0E5501FFDEB8CB4B2DEBC912E6C5E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742693100, "uuid": "585a9021-160e-40c1-9f41-097ae9b72de4", "value": "12:kdtSQqMdtxKxFQEMgTNNIOTvYTBAMgqX7KYjHMcMDCzqM5ONmOJOqMrMNKAMsMYY:oSQNIPQYhNIO8Ca7KY24UYn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742693100, "uuid": "ae1e4f2b-9a45-4e2b-92eb-c3dcbed72031", "value": 1156, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742693100, "uuid": "f5b3f499-4421-42a6-b44e-b8acb6f3b81c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7521816-0788-11f0-9a93-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1742694395, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742694395, "uuid": "8ef3a26a-7fa1-4a34-912f-532b585f3da7", "comment": "Malware payload (Healer)", "value": "2252254ca271dafc0e957843af657446", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742694395, "uuid": "f43af09b-94a6-4ea3-b6c5-e883b7bb4663", "comment": "Malware payload (Healer)", "value": "380786174cb7373692fd71f9805db117b6b8212687ec334d7bbcbaad64f9824a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742694395, "uuid": "16cf5f0d-e8dd-45f1-a838-41cb6baa050f", "value": "T1918533168C22ABF2FBDD47FB1BCF4B628E9E344C49AD062A33E95215171275894F8C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742694395, "uuid": "49c154ea-43fa-4390-99ac-011bcde55518", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742694395, "uuid": "665450de-7410-424c-bee8-94cec789fc38", "value": "49152:r6G4xcXlB8HrwDreqI6N6eZ7Ie6aPRgl:+GpXQHrqeBk3Z7RK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742694395, "uuid": "0eb65646-281d-4cd8-a75f-ae18a3310460", "value": 1742336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742694395, "uuid": "67a51324-4ad9-4eae-8303-cf74c7ac4db3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b71ac359-0789-11f0-9a93-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742694851, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742694851, "uuid": "8c540457-7b0c-4fd8-89cc-b023b24d7caf", "comment": "Malware payload (Mirai)", "value": "27f0bdf9e3a781aeedb553f6cf6e101b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742694851, "uuid": "c9e403b3-b501-4014-b438-eed26c025b68", "comment": "Malware payload (Mirai)", "value": "0b54d6b5301c2bd88bbee37c557e3466991aefcd46f7fb21c54bfcf1da44ffcb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742694851, "uuid": "a782d5ae-f0e8-4f8a-a733-5ab6091dd72c", "value": "T192734AC8F5D3E8F5D80419B8207AAF72AE73F17AB135E98BD3E495736801602D406B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742694851, "uuid": "d098fead-c885-4dc5-9604-f14cbe43e0f7", "value": "1536:NV8/Qs/nh9adZkrOsDYuY061vDOH3RJnWPVpSW4OB/BQJv4rmoBitQOZy7:NO/nh9adZsOsDYuY061rgDW3SW3/GheV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742694851, "uuid": "90a15b66-746f-47a3-9ebe-7b09d7162b6c", "value": 74512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742694851, "uuid": "b62ddc99-4662-43dc-b338-1db2291f6329", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7292079-0789-11f0-9a93-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742694851, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742694851, "uuid": "2774b81d-f5b4-4398-b218-dfcde05eb503", "comment": "Malware payload (Mirai)", "value": "6e177fca961ad338f3dcc48264565546", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742694851, "uuid": "374ce7c6-df9e-4192-b0b8-834f216e970c", "comment": "Malware payload (Mirai)", "value": "1b39b53b7bdd3b3540e3f10a82d75c7af62a836c7a0c9528eea40922d6d89b51", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742694851, "uuid": "d3eda6f4-bc3f-4b53-bea2-0ad26cc0d035", "value": "T1DBE33B86FA408B13C4D6177AFAEF414933229794E3D773068D285BB43FC6A5E0E63A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742694851, "uuid": "4b6edc90-3cde-46b6-bcd9-383b44506d99", "value": "3072:Kexb2im5f9FloZyNptWH69mrsplDKZU2QBKXAVanVX+F8JyvgA+hLBAE1mWAZLLl:Kexb2im5f9boZyNptU69mrsplDKZU2QL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742694851, "uuid": "8d632b54-1576-400c-a426-1ba8e8ad1f0b", "value": 156017, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742694851, "uuid": "c2b3dff0-284c-4921-aea0-13e81e8f8da4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dca4716a-0789-11f0-9a93-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742694914, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742694914, "uuid": "6890457b-417a-4b95-94d0-bd4ed07395ff", "comment": "Malware payload (Mirai)", "value": "e151e3556c6e2c68dc08b25a58ae945f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742694914, "uuid": "3439c37f-9b19-420e-a19c-a1280b121c35", "comment": "Malware payload (Mirai)", "value": "56adc4d33cf449ebc3ad60e72f7691ead73c36a4d50011693733974df316cf34", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742694914, "uuid": "cae02e67-89ad-4a3a-b9bd-bc43b977877d", "value": "T11D734B02B2584F17FAD609B42C3F1BD48BBEEED022E4B545695FC7524A35E370989E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742694914, "uuid": "894f578d-9c2e-4d00-9e45-002832f037b1", "value": "768:RD1uvWYMUNE75HH+f+KEoLYWItIlyHALslXk5MXtNdevgDVbW2+I2SS9PhdukylL:t/YMl6WIlygEk52zJb2NpduqkI0FQvu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742694914, "uuid": "9e674c64-164d-409a-89a3-1f99a12be58f", "value": 76056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742694914, "uuid": "a607aa51-8011-48bc-b535-c81c0250f9b3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dca9ab77-0789-11f0-9a93-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742694914, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742694914, "uuid": "ed214a8d-9e2a-48d5-a258-2e302a6eb920", "comment": "Malware payload (Mirai)", "value": "a9e09310b5440034373429a7df2cc132", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742694914, "uuid": "b03c4fb7-599d-46b8-b0b2-e47088f46ccd", "comment": "Malware payload (Mirai)", "value": "c8685e9c31630eabeac1bdbb3b9ecc7bffed4ad2fa7cf6e044efb0693fd97e55", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742694914, "uuid": "4fb1fdeb-4dcc-46de-a9f8-57f194f563bf", "value": "T1F7931985B8819E15C6C5177BFA6F118E331257E8E2DEB313CD245B6077CA82F0D36A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742694914, "uuid": "b2becdeb-7e82-4735-9c38-0e84fe139a60", "value": "1536:C2nR5+61e37i7AwSROX9gY8cG6MwgeRu47ZZ8WPL9mrsplDKZUEQBKXAVanBX+Fj:B5M7IAfRQ938cGLwrRLuWD9mrsplDKZe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742694914, "uuid": "e2c53d88-ed35-4430-b06d-02468e135f89", "value": 92352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742694914, "uuid": "cb3a8c30-6129-4099-af35-f0f470c52ca4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dcab6e22-0789-11f0-9a93-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742694914, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742694914, "uuid": "4a5ebb3e-ab35-4fba-8417-dbf665306f03", "comment": "Malware payload (Mirai)", "value": "6ba23e6a6f806351a479e130740b9a62", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742694914, "uuid": "40a361a6-f200-45d7-9642-53048f1a5870", "comment": "Malware payload (Mirai)", "value": "1b493235c6a188a1be748584483c851fbf759623605d6ddd274f511fe2bec48f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742694914, "uuid": "aba8f9e6-4afd-484d-a4a0-b6bc0375b16a", "value": "T121A3A54E6E219F7DFBAC823987B79E11564933D633A1D581D06CEA012E7034A381FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742694914, "uuid": "ba0aab28-451e-4318-8182-da80b4b90cfc", "value": "1536:pegXznytTDLWgKQ2ND0v+iRLNBcLPkgTrTIPm26Ka7G0Zd9:jiDkD0WKLNBXgTrTIPFzai039", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742694914, "uuid": "b1ebf181-3ee7-4ca0-88ee-24729f7b16ab", "value": 101552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742694914, "uuid": "dec5cd18-6c6d-42a0-a4ba-7764a9696ce1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dcb646d3-0789-11f0-9a93-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742694914, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742694914, "uuid": "8cd8c157-0fe4-47f0-aa58-bfc57aa7a409", "comment": "Malware payload (Mirai)", "value": "3b8a74b39168eaefe2401000c820243f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742694914, "uuid": "4efa31f5-a4f6-4146-911f-3ec0d831eaba", "comment": "Malware payload (Mirai)", "value": "5eb7959810c38dd32b34baf778cba508b7d865e5d92207358cd18927669a9afd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742694914, "uuid": "9c778502-f98d-4c82-96ca-1e5ac96fb460", "value": "T1CD73BEA5D4599E68C2154534F6849C3A4F22F04873A33DF6DA96C3A2646F9ECF009F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742694914, "uuid": "a8031bd1-70c0-45cc-abc4-3c9d82c4a9df", "value": "1536:ug/ASh5CxlFam4LUcWljbwABUsc8Fnelfs3WlobHX+wnTCaC7JnOAi:voSh8/54LUrljbC8Fnwf+gCX+wnTG9Oz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742694914, "uuid": "fb90003b-e1d0-404d-9ffc-75ea487cb9a6", "value": 75548, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742694914, "uuid": "13666cfe-705f-4fe8-bbd9-d2f2007eb1af", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fee77616-0789-11f0-9a93-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742694971, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742694971, "uuid": "b98e25b3-7bf4-4bb8-82cb-d26007fa61dc", "comment": "Malware payload (Mirai)", "value": "7143a4f917611ffc8e6dd6ff431fb5e7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742694971, "uuid": "71f5a275-f051-4b35-8140-41feb0eec585", "comment": "Malware payload (Mirai)", "value": "59875cdfc3d4cd6a787732ab5ffecc5010cc6b9a07ad572811ade9a22c2f0809", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742694971, "uuid": "952c60b3-4e26-4c2d-9984-f4921e8955d9", "value": "T12D532A8968021F2DD6D358FD50624F0E9D56235160E31B0BA7ABFDC379B326ABF11E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742694971, "uuid": "5196dc5d-e5e4-4c39-83e1-2c392481794c", "value": "768:49PmFtZ3DYe7xupCdRP1/Qor0qX8IVEcWmEhB2yNliI7VPFzq+f1prko+KGbc9Qg:imRzY0xupCdRTZS7VPFGg1p/+7bS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742694971, "uuid": "cd58086c-7193-4aed-a213-16592353dff7", "value": 62088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742694971, "uuid": "3ece1241-b423-41c9-8883-e9cd75926754", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2229c52b-078a-11f0-9a93-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742695030, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742695030, "uuid": "2e03b51c-764c-4ebe-bd02-cd8cd776bc23", "comment": "Malware payload (Mirai)", "value": "f7e9cbf436cd2ee2993934459dabfebe", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742695030, "uuid": "e3a328fb-f0fe-4513-a4a0-fe71b7a87262", "comment": "Malware payload (Mirai)", "value": "7c16609e63f77b5155b2af0d7de2a53f099360b0f88772a2638f716431e422cb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742695030, "uuid": "b4946fd4-63c1-44ac-8a79-d38bd55c46f6", "value": "T18EA3A20ABF650FB7E89FDC3709E92B0528CC501A21A97F75BA30D914F64B24F19E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742695030, "uuid": "540f15e0-55b8-4f59-847a-951523f9d9e3", "value": "1536:97fjp84dEQu3J5ZwI2X5PXpTBRRtBuSZe7zEL9Zimi:97fjp8p3Jk5uSMYkn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742695030, "uuid": "bf0059b1-4ecd-46e9-9bbf-77236a777710", "value": 105648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742695030, "uuid": "08e29bb6-272f-4cc9-92cd-1a6846c7ad8b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "223295ce-078a-11f0-9a93-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742695030, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742695030, "uuid": "6c5664e3-f513-4148-a4f2-d47abfcbd16c", "comment": "Malware payload (Mirai)", "value": "69046ec343c97c911f4593bc7775ae1f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742695030, "uuid": "5a5355f4-ede5-4883-9ad0-75875fb2cb73", "comment": "Malware payload (Mirai)", "value": "5a8e2c5293b85cb6e84c3b96dada4a85065a8299059a891316c17cbffd24036f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742695030, "uuid": "52681375-30ba-4005-b1c8-f824f19827f0", "value": "T1BE835C35B9791F26C0D0A03F21FB8B51B6E5128E26B4DA4D7CB20F5FBF2064468169", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742695030, "uuid": "d8c307fc-f234-4f7b-bb91-233fa355b26d", "value": "1536:D96uPJjE/e5uCJpY8k3LvlaSl5cySp8mM6volZApKSZOFFR:xjhqUY5cKEvoRSZSR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742695030, "uuid": "06a5e95d-e045-4ba0-a81a-2c17efce7831", "value": 86200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742695030, "uuid": "23082c8d-fc12-4198-9c60-678c8a005be3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6da26e13-078a-11f0-9a93-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742695157, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742695157, "uuid": "995b4d4c-406a-4278-9c42-ccccc241ca4b", "comment": "Malware payload (Mirai)", "value": "2356691339f422515fef795b3ba05c5a", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742695157, "uuid": "febb79af-b3c5-44de-81ac-1b9668235e10", "comment": "Malware payload (Mirai)", "value": "30327e008882a61a4f44410b0286723a4ce8e47fbd6e47a27691e6936aed8dda", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742695157, "uuid": "b62da1fe-4246-4027-bae7-a3b752b4997a", "value": "T1AE11E8886326216B16181914BB7EED0C5C46F8B0E5601FBDEB48F862CCBC103E5C8A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742695157, "uuid": "debfb362-9b15-46e9-819c-052d05f3e3ae", "value": "12:3J3Vdt/QqxVdtxKxFQExVgTNNIOTvYTBAxVgqX7KYjHxVcxVDCzqxV5ONmOJOqx6:3J3p/QKIPQFhNIO8va7KYHeOYn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742695157, "uuid": "d986dc61-4e1b-4535-adbd-cbbab16c3f94", "value": 1067, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742695157, "uuid": "0ffdd1b5-760a-4964-9dae-fb6532e448a2", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2765099b-078d-11f0-9a93-82aee05be84a", "comment": "Malware payload", "timestamp": 1742696328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742696328, "uuid": "c2ba8a7f-03cd-4017-98d4-47e56ebb12ce", "comment": "Malware payload", "value": "8f72f7b21b7eb6e2adbbb57b0f06b28e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false }, { "name": "snojan", "colour": "#e8bdf9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742696328, "uuid": "6f46d258-e845-4559-bf2b-37ec773bb8e2", "comment": "Malware payload", "value": "e05f2b45873503c962dd843de9e0beae5e0a5c75693af332892176b226e0ef5e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false }, { "name": "snojan", "colour": "#e8bdf9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742696328, "uuid": "d7176224-7d9f-41de-a58a-f11aeb04e993", "value": "T1F32633F7F818D752ECBF8031ACA1C50AAF58B840DBF45A33C1C64DBB50A695BD6946", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742696328, "uuid": "1ec8de5e-932b-4b4f-b2f2-88565f12749f", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742696328, "uuid": "737ec4dd-bad4-4cb9-9a33-95d949eaee0d", "value": "98304:5H34gYhNu7sq41PHTscxEssWri6IurFqFmjFaMFxCLlEcOG:to/31PzDxTioFqo53FgmcO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742696328, "uuid": "61a29268-faf9-4c38-9c07-0537b14097d4", "value": 4699136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742696328, "uuid": "91cd9cb2-1469-486e-bab6-9e82b959c264", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "47eca795-078e-11f0-9a93-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1742696812, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742696812, "uuid": "f1a9bfbc-52bd-49ab-bff9-5e2d346d904e", "comment": "Malware payload (Stealc)", "value": "1672ee0cb7eb13495c6e41432d6b28df", "object_relation": "md5", "Tag": [ { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742696812, "uuid": "cdda5fdf-dd00-469d-938d-a29056adef97", "comment": "Malware payload (Stealc)", "value": "a935e3a7f34d0e8271e648867087ce2b758b9b405fca4990782e739f8866e1e9", "object_relation": "sha256", "Tag": [ { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742696812, "uuid": "50b768e9-72b9-4832-a22c-66b7082d0033", "value": "T15F85332B9DB1F2F2E5072F7726F0C69720B4A9D8050B599DDF075FBB8653E8623102", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742696812, "uuid": "6c04bedc-1112-4f71-a2ce-1866fc474e44", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742696812, "uuid": "03ee4709-0b78-4586-9b92-07b7d3bec7b0", "value": "24576:PukxbqEyGxjhF8GpD0RDSJnfuXP1d8d8VHRiYwYcKB+vmLooysg7pAfzQY96hCzH:PLq9kjpgR22Xkd8Vxc91uEog7pY0YYu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742696812, "uuid": "83cd75e9-eeed-4608-8a77-b0f3580a2af3", "value": 1789440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742696812, "uuid": "f2b71b86-99c7-491c-92a5-5b476ff0d2c1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "040523a8-e5c0-11ee-b38b-82aee05be84a", "comment": "Malware payload", "timestamp": 1742697315, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697315, "uuid": "1d1d8928-2e2c-4e54-bee3-b3b90cf2beae", "comment": "Malware payload", "value": "724f25e7f93eae0ae54a80142e11b7ef", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697315, "uuid": "ac8ba146-3cca-43eb-b498-d6576942bdfe", "comment": "Malware payload", "value": "ab69ef32017a5365ee0e7faca03e1352382865c5672e989d99d2d77ec91c33ef", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697315, "uuid": "b5239b2e-fa7c-445f-929d-7fcaadf8fcd6", "value": "T16D356D56F9808EA2C5D8177BB75DC35833534B78D7DEB102CD08672877AB94A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697315, "uuid": "8c3085e0-80bc-45aa-b532-772db21c5f68", "value": "12288:00Bw2wHeeJgR3asIAksAi0uObzkzOgFr1qwRcFjV1D7a9KbsaKjpeFmz4T28bLv:00BnRED/TwOjX0a5xTdv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742697315, "uuid": "ac8f1a01-680a-45d7-a841-fc3bba51b3df", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697315, "uuid": "b494bf45-ea14-4cfb-9f18-04b740898e6e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697315, "uuid": "e5045088-48f4-416f-aa68-ed61bfd52289", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3ea0263-1a77-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1742697315, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697315, "uuid": "94c6c307-f9dd-48d4-92be-08eced825573", "comment": "Malware payload", "value": "567d3249dbe60fa9478a424a69c2c535", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697315, "uuid": "d60f7a63-f5b4-4116-a0c7-f420b2c1fc1d", "comment": "Malware payload", "value": "ff70c53dd6e9806c588d8f78ee35d406db0879bf5419a18a87c7982c79e3e9bb", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697315, "uuid": "4f704dd8-c089-47a8-b976-67f02f81c0be", "value": "T19F05E184F5E01E67E487813F9B8246720266ED5FB34AC317574876BBB4BEA34EB153", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697315, "uuid": "e648e378-028d-44e6-9e89-b53c6d49f772", "value": "12288:BZpdDbfRWxSYOkwVcqcMFT5G1z6EtYOyDIGOnd7w4bLvVc:BHlb/KwiqcMFUzYP8GU7PvVc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742697315, "uuid": "91d60fa2-b547-496f-98f2-64407b81c4ee", "value": 848048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697315, "uuid": "24d8c1d8-42e9-48b1-9806-c290dc1c8605", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697315, "uuid": "02bcdd39-ecb7-44de-9527-9b5b9a3b59a8", "value": "t189217143a83f9f3ad5a2d8b0dc6a0725512b5702b4f9e7109f3ca9d06c7a016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cae4e4b-16ee-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1742697316, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697316, "uuid": "3d62ff11-b43a-421b-803b-e5cbbd9e3fc5", "comment": "Malware payload", "value": "936b35bfee8232f437bf6b46e88401dd", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697316, "uuid": "0f5cb440-a39e-40b5-9f7b-3da05f691c4c", "comment": "Malware payload", "value": "de9a5647bdf02fa2b927566c78e54d5931e25c9f07d2ab884e135766815d53cf", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697316, "uuid": "22a2b276-9452-4ed6-89bf-9681ae295acd", "value": "T1B9356D56F9808EA2C5D8177BF75D835833134B78D7DEB102CD08672877AB95A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697316, "uuid": "de736da4-3fb5-46c7-83ea-7dc66dcb7be4", "value": "12288:E8dASOYRNCAJump208iJftl7zmnSrlcaUxQ5TVFQGl9eLtRajZa6ZTxIVD7bLv:E8dbbsO38+TfgRinIVvv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742697316, "uuid": "be69af21-4c77-4c03-adab-31e81022a795", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697316, "uuid": "0ebe2534-9004-43e2-b2fb-3b244403f1b0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697316, "uuid": "8bd50639-d500-4224-8b20-9afe836796e2", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fa7ce9e-0807-11ef-ab08-82aee05be84a", "comment": "Malware payload", "timestamp": 1742697317, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697317, "uuid": "363bdaf2-08fc-450e-a0b6-1fad4572f073", "comment": "Malware payload", "value": "df64a5c787f34c5b38c8103a67e3d97c", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "trojan.sshdkit", "colour": "#25313a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697317, "uuid": "f0de9780-a8be-43fd-b89f-d71f8052d877", "comment": "Malware payload", "value": "6f1bbcaa6efc41ee257919a85acc9ea5b1f82c8def103e39629e0b5161800ccc", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "trojan.sshdkit", "colour": "#25313a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697317, "uuid": "922fe87b-122d-4df1-94b6-f296b57b86a2", "value": "T11D356D56F9808EA2C5D8177BB75DC35833234B78D7DEB102CD08672477AB95A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697317, "uuid": "26437dd4-251e-4c30-ad00-fff0129b80b5", "value": "12288:sQFoCapOujNJ7h8SYIhU1wwy7zh36bV7CIBolbVtE7ZdXjboyjBNY3v9fQbLv:sQFbJi5Pa/CbmzotVqv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742697317, "uuid": "58b7acf3-700f-4f30-99e6-23505da947ea", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697317, "uuid": "a798b1f1-cb38-489f-8abf-03962e5a18a3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697317, "uuid": "65a61fb0-fe5d-4e83-863e-dafa5db3ca10", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "699372cc-0693-11f0-97fb-82aee05be84a", "comment": "Malware payload (Quakbot)", "timestamp": 1742697498, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697498, "uuid": "afd994a9-4aa0-43e4-8044-989a9930d13d", "comment": "Malware payload (Quakbot)", "value": "364a48d88e12dc4b1c8ae2b9994ddf6f", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697498, "uuid": "70a33235-1386-4512-8cd3-ddbff786fb2f", "comment": "Malware payload (Quakbot)", "value": "b6d3d656f207aaa4c92cbe185dd34c997fc3363316ff2b51203082c5f7e9d191", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697498, "uuid": "51e77246-8ef2-4037-921a-3e8971776829", "value": "T13C2147042D9A0311D2728E3954AAE722C83B3C02EEB55F2A001D12882B2B200E971F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697498, "uuid": "68a4e46f-8c90-4c1c-8387-940a9272538f", "value": "12:8g0m/3BVSXvk4+/n/6s/U9RWW+Uc+Ns/69WGEyZjIz0e7DiNMI0YG6lu+:8+/BF//Z/U9p+/+GWWVyZsJaYwu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742697498, "uuid": "72340f20-69e6-40e3-b16c-61ca2e5645e9", "value": 1414, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697498, "uuid": "836615be-14bf-4c63-9222-366377dceaeb", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "69a9c2e8-0693-11f0-97fb-82aee05be84a", "comment": "Malware payload (Quakbot)", "timestamp": 1742697498, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697498, "uuid": "0c2222d4-9822-490a-9aa8-6cb3508c468f", "comment": "Malware payload (Quakbot)", "value": "154d72d18cb1406bd4d9af5b638d2d22", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697498, "uuid": "165450c2-5c78-4c80-a76f-14ed30eb36a5", "comment": "Malware payload (Quakbot)", "value": "78a411f92661be0f1bb8743066ced8fa1b5079367dd003158756a52ef734dddb", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697498, "uuid": "5a272cb3-b455-483a-80c4-caaf2622cff9", "value": "T1A021F7086DDA0311D2728E7954AAE712C82B7C02EEB55F2A015D12892B6B710F975F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697498, "uuid": "27abf6e1-557b-4033-87f2-7233cba22da2", "value": "12:8g0m/3BVSXvk4+/n/6s/U9RWW+Uc+Ns/q9WGEyZjIzUqa7DiNMI0YG6lu+:8+/BF//Z/U9p+/+GmWVyZshwaYwu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742697498, "uuid": "610ee45e-09a2-4cf4-91b8-f1cf5e6b1299", "value": 1414, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697498, "uuid": "ad8ee740-18d8-4630-a045-451d8e7d20b4", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6993a2f4-0693-11f0-97fb-82aee05be84a", "comment": "Malware payload (Quakbot)", "timestamp": 1742697498, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697498, "uuid": "bdec0dbd-1ccb-43d2-8c3c-39a52bea9d87", "comment": "Malware payload (Quakbot)", "value": "7850a733e2518f6694d2c0d131c9e1a2", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697498, "uuid": "9462867e-9ae1-41cd-85f3-991785d7e365", "comment": "Malware payload (Quakbot)", "value": "4b546d59fbe6935d940e13b2871b2756c23342030e01b669a403eac0538750cb", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697498, "uuid": "5a6cda44-7898-48be-89e1-8c77336c626f", "value": "T19F21F7086DDA0311D2728E7954AAE712C82B7C02EEB55F2A015D12892B6B710F975F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697498, "uuid": "aafeef88-dfd9-4a59-b91e-10064740d191", "value": "12:8g0m/3BVSXvk4+/n/6s/U9RWW+Uc+Nsc9WGEyZjIzAYa7DiNMI0YG6lu+:8+/BF//Z/U9p+/+GkWVyZs8YwaYwu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742697498, "uuid": "c8632cfe-af5a-4f41-a865-889498bed311", "value": 1410, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697498, "uuid": "b2b59a69-5418-4973-80d3-62340964aaef", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a29e50-7fd8-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1742697556, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697556, "uuid": "db33d234-9981-44cf-9766-35d4a82b213f", "comment": "Malware payload (Hajime)", "value": "9b6c3518a91d23ed77504b5416bfb5b3", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697556, "uuid": "e0cf7779-aae8-4bb5-9d86-ae8f71debb50", "comment": "Malware payload (Hajime)", "value": "a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697556, "uuid": "2e8337de-7812-4814-86c1-3452fed66873", "value": "6D7312E017B517CC1371A8353BED205E9128223972AE35302E97528DF957703BAB2DBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697556, "uuid": "0ab5d9e7-adcb-4e19-9607-258f4c9532ca", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQAvcYkFtZTjzBht5:8D+CAXFYQChaAUk5ljnQssL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742697556, "uuid": "00e683de-19b8-4893-b807-a74eb03c983d", "value": 80280, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16289159-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1742697789, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697789, "uuid": "6995a990-118e-404e-8721-0f9a7d674913", "comment": "Malware payload", "value": "aa5fde36cb0e26ac7973b0d983884490", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697789, "uuid": "c8bcf5d4-72fc-4cdc-acf4-ad3d4801904a", "comment": "Malware payload", "value": "69ac6c1019c3f7133eb97a21b174ba9e40dea7c36a52170a5a8353d28bdffab0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697789, "uuid": "4fc704db-91a4-4cc9-a08a-bc353e3e5caa", "value": "E703028632953F73D51148F4E7FCAFCA714ABD54EFAA142FA8113A15B07235D24C982A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697789, "uuid": "14c6ef43-bd47-4635-a787-572273023b07", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04ZTo:yYI0ARqw1qAEW67UIWi7M8gmo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742697789, "uuid": "fe0f1a81-99c0-420a-b2cb-427d5464310a", "value": 40544, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd8f8b56-0790-11f0-9a93-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742697975, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697975, "uuid": "14b9cc5d-8337-4feb-8b97-5263de4de943", "comment": "Malware payload (Mirai)", "value": "c41a79699de953380428ae97410bb85f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697975, "uuid": "f00a430a-b908-4339-844a-d07cf23b0bc9", "comment": "Malware payload (Mirai)", "value": "753c2a1eaa8b0212cd1f451ff250d96f46c0d035c02b6909aaf02018b7835ecf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697975, "uuid": "3afb09ed-da42-457e-810c-9370c8c5ae79", "value": "T1FA532982FC80D606CAD01376FA1F518E371623D9E1EA7207ED256F203BCA95B0E7B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697975, "uuid": "8fd9113b-a8e1-4f2c-b836-96315a06d884", "value": "1536:eM8keUYzbCehbkaTruWTJZZHzX4FSQKv8:eMi5zbpRlzZHT4m8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742697975, "uuid": "dea526d8-3c4a-4006-9ac4-95d5133afe76", "value": 66692, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697975, "uuid": "f47f3a22-9b15-4ce4-9130-67494ec48838", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd907b33-0790-11f0-9a93-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742697975, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697975, "uuid": "9b8f13a6-a17a-4da0-92c4-a9dcb867cb9a", "comment": "Malware payload (Mirai)", "value": "851b9745ab01339c872528e289116e54", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697975, "uuid": "1b0df8db-552a-4a68-b9a0-790f155b17c9", "comment": "Malware payload (Mirai)", "value": "4f687d5db022dbee1e1336060ae62c1066a0eccc33c57202bea2e2cedb7104e6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697975, "uuid": "cc6c27eb-2d2b-48d1-acb2-15afacb6f851", "value": "T16E631C692A55F2FCE9F54074F8531CE724D14A2C368EE0E3B096907BEFA9B0C622DD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697975, "uuid": "a0cb33d3-2f2a-4ff1-89cc-fb69140f504c", "value": "768:zM7ol7TH28RBbyusIPUblapu945/j46qjpgjzRoXVH/AN6CPPqKv2WONX6m:j7TW8fyusIPUblkucR0cU2PqWONX6m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742697975, "uuid": "70bee862-6607-4090-abf8-e892d18f6b65", "value": 66916, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697975, "uuid": "d88cd86e-5826-485b-b1ee-4f4bd0f4cc95", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd962c65-0790-11f0-9a93-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742697975, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697975, "uuid": "60850d03-5d7e-49ae-a78b-875ee2ee3ee6", "comment": "Malware payload (Mirai)", "value": "1f0a0cf47d7afd1a4a8bb7ff114e4d0b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697975, "uuid": "0f207d49-6803-44a0-81cb-899ef8c7ac86", "comment": "Malware payload (Mirai)", "value": "e060e305cce23869f5df383bde88659289d03d65697a048eb26e328f12fcc83b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697975, "uuid": "05c7160b-8199-47b6-ba83-8be475b0bfb0", "value": "T1F6533A007B5C4E43C5A66AF8293F23D487FEED9021F4F584190FD64A8272E33559AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697975, "uuid": "800db28b-b76a-4e11-aff4-e4e7e074a12d", "value": "1536:Qe3fN26gJ4WesLEJCyC7ojYrodF3SeTMHjjsE:VNWJCE7wcwSeijAE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742697975, "uuid": "e35d77f9-c058-4792-a322-19758d0b6958", "value": 60872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697975, "uuid": "cbf29d7f-6a18-4820-a56f-a341914030f6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd9aad43-0790-11f0-9a93-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742697975, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697975, "uuid": "b7d0eb86-761a-4168-a6ce-3a237cecfbf3", "comment": "Malware payload (Mirai)", "value": "b25643d9ed071bba8af0ef060b5180bf", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697975, "uuid": "d8925dec-3805-4d74-b4af-2fcef5db1924", "comment": "Malware payload (Mirai)", "value": "2e22b8d097eed40f8fd2c985b0a6fb31ed2f6ed8a022cc707ebbf9fc7be549cf", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697975, "uuid": "6f39d445-aa8f-41de-afd4-e83a2ef98ddd", "value": "T1A94191C413524F31FF96ADE726B65855F0E0D88BACC4EE2699DD38FC845CF08A149A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697975, "uuid": "1f5a5df1-68b0-43b2-baf5-0fe9fc16a110", "value": "48:vsXksg8sdT6sbAsOYsf1osU4s9csRus8osQz:vzwpPinMZlqh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742697975, "uuid": "46202741-e9a0-4c7e-93ac-97fa37cf3546", "value": 1933, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697975, "uuid": "97edb86f-28d3-499c-9898-e8fea404e34c", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd9c8c8b-0790-11f0-9a93-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742697976, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697976, "uuid": "a35551f4-a1cd-432f-8284-9fe93bc83321", "comment": "Malware payload (Mirai)", "value": "19d915863ed88ad6cfbed0a9e91875b4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697976, "uuid": "b9c0f4ac-47f7-4b1d-8dd2-0b3beba5c87b", "comment": "Malware payload (Mirai)", "value": "83ea2fbf03f0177db78259a4eadda417ec881202c66bba84f3f0ee20ed098dba", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697976, "uuid": "a2ba8085-2562-42eb-8f0a-1994312a63eb", "value": "T1B2536C21B8790D1BC0E4D57E22F3876AB2F9564E14E88B2E3D710F8EBF655D066472", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697976, "uuid": "48829417-a28e-4942-8d19-eb20b2c07951", "value": "768:YOeodjFYpRCd99ZTS6JwX+caLG58nWMOwjO8is3Bf7pVquQxnliO+75GDD2KON1D:veiOOb9dS6TOc3fVBq275ZtAc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742697976, "uuid": "b0bf625d-eabb-4a2d-8ba8-22fb7de43387", "value": 66700, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697976, "uuid": "a891913a-a774-4960-8adc-9e3b2d650062", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd9d08e9-0790-11f0-9a93-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742697976, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697976, "uuid": "54a2f1b5-fc38-4907-b70f-7059522de6de", "comment": "Malware payload (Mirai)", "value": "0a548e5e31b00bd078466d15eb16e546", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697976, "uuid": "e22dc571-6166-46cd-ae5f-54a177142e02", "comment": "Malware payload (Mirai)", "value": "3235403721303e205a16197923af1e265a884bbf847e85334f4c9e1872cc21a3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697976, "uuid": "af0ffd98-d552-4e70-8515-5553a2710c46", "value": "T1B26329DAF800EEBCF85FDABB4527590AF521A39141930F366327FD936C710A48927D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697976, "uuid": "a82a7ef4-fbea-48ea-a025-986f94f51a75", "value": "1536:y/pYCfNE2nCc49twWCJLYCKoqSg58La7C2At/LNp6z7YNw+wq:y/fW3yYyqZlKtDNgIwq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742697976, "uuid": "b2e80018-a523-4d69-b3e2-e330963264fc", "value": 67568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697976, "uuid": "18ed9f3d-9578-4538-8945-b2cf4266e04e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd9d0de2-0790-11f0-9a93-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742697976, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697976, "uuid": "ed2542a7-dfe4-4c13-9ea3-d2ec7efcabde", "comment": "Malware payload (Mirai)", "value": "a7b4473399ce74c911ec86fe9f3a2295", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697976, "uuid": "94fc7ea2-6555-40fb-a223-b95959651e5b", "comment": "Malware payload (Mirai)", "value": "5064463e3dcdc501a0cd479dcb09b24bd3bd0bf7cbacac0341f09c85f7dce81e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697976, "uuid": "1d23f6d0-792e-47df-8c93-17fb6484d444", "value": "T127437FC9E5C3E5F5EC260E712177EF738A76D93E2068DE83D3A86432D951A02E5113", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697976, "uuid": "f25eb214-ad69-4e8a-8dde-02e7646743f0", "value": "1536:l5nPRgxBusO4h25GTF005Ir45jol2DR08+OSo:qkBw25GL24+UR+Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742697976, "uuid": "6ad8fe45-eaff-43fc-9d9d-012dff2969a7", "value": 58256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697976, "uuid": "edf93ea7-f931-4f58-96bf-811be7f224fb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd9d55eb-0790-11f0-9a93-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742697976, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697976, "uuid": "55c77775-b811-4856-bf2b-fccd936ad90c", "comment": "Malware payload (Mirai)", "value": "a4f6cf4e6edb03734e3fd5d250dfa63b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697976, "uuid": "e32349fd-2d4a-4497-a952-b7999b5d4170", "comment": "Malware payload (Mirai)", "value": "5cc8e494a701a2f510cff13ec26bc59ef4c8f0812685a1ff7752a1c613f52f31", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697976, "uuid": "2f0eec2e-6090-4d3e-9ec5-e3019f0acd4f", "value": "T1CEE34A46EA408B03C4D61775BAAF424A3323AB55E3DB73068D18AFF43F8679E4E275", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697976, "uuid": "5f52d049-400b-44af-a3b2-f414f7ea2034", "value": "3072:KTg0ts0CbhXBazV4WLZIdiv9cBBXB45M/9t1Ng:WruVbZBazV4W9IYOBXBaM/9tE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742697976, "uuid": "b934e866-9084-4288-9dcb-072ba01d7e0b", "value": 144319, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697976, "uuid": "0006731d-f8eb-42f5-87a5-bbb6cdf6b494", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd9e4869-0790-11f0-9a93-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742697976, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697976, "uuid": "a65f1fc3-c73a-421f-a1a2-8711b4801b23", "comment": "Malware payload (Mirai)", "value": "1aa4143ebcf26124be79600326fd0e38", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697976, "uuid": "3be3e2be-732e-43b6-8793-9c861da9bc33", "comment": "Malware payload (Mirai)", "value": "21a3cd61d4c9043b38ac2d0afe218c89d7205855bfaa7f91a20f7872b9124e4b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697976, "uuid": "dad8e44d-e91e-4ae5-b1e8-0fbd6bc15a6c", "value": "T125438EB3D4641E58C5A846B1B5388E765723E10483877FF6466ACA799007EFCF2093", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697976, "uuid": "83f5955f-e7e9-4f94-aabf-13a2d772d36d", "value": "1536:maTpAdBDpQNLzBuHKARnRUKHi/DPBgCy5Qf:m8BZzBuqObHOBgwf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742697976, "uuid": "548e13c1-063b-4bef-b883-6385156228bb", "value": 55852, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697976, "uuid": "e3e0ad59-2d1d-4365-8587-ce10d9b72802", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd9e64a2-0790-11f0-9a93-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742697976, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697976, "uuid": "6e5112d5-8a22-4565-83ef-80425ee7293e", "comment": "Malware payload (Mirai)", "value": "7f3a7052000e43a7ea7b3831d3471c53", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697976, "uuid": "0431c94a-1686-42ff-bdd6-87ad582a1b9a", "comment": "Malware payload (Mirai)", "value": "740e42e867d99cdcdc6e3905156543ac4463f26a20a87cefa21907ffa926fd27", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697976, "uuid": "4bf335a3-b450-415e-97ed-155d7ef33401", "value": "T18B83624E6E319FBCFBBD863447B39B25A249338933D1C6C4D1ACD6011E7024A646FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697976, "uuid": "e4786f21-104e-4590-a25c-1f1e3c022135", "value": "1536:gK2YOvvHQ8krvdTHCqDYNwq70JIz2kOAERkeh7Dgb:b29vvw88VfDYNR70JIzTDEfDgb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742697976, "uuid": "03d37633-9124-40d3-a2b5-eb366b0afc81", "value": 84540, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697976, "uuid": "7f36d705-e0db-486f-86fb-ae2f1db1446a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd9f4f7d-0790-11f0-9a93-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742697976, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697976, "uuid": "1359bc32-76ff-4e19-8282-93b29cdaeb70", "comment": "Malware payload (Mirai)", "value": "2b9ff651d116fd4220b9ef064edc87ed", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697976, "uuid": "a3aafc91-c6eb-4f2a-84b2-79be2ede0f41", "comment": "Malware payload (Mirai)", "value": "a683e1c24a8f520953bd275cd7a49788e1fe492c2a1f810a85c5275f0063250e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697976, "uuid": "dd324e4d-a05c-4651-b81d-51d361dc353c", "value": "T1FB130886EC80DA1ACAD01735B96F54AE3311B3D9D2EE3217DD125F107ACAA0F0D7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697976, "uuid": "76954075-7b64-40c2-847d-e37a74ee3dca", "value": "768:Yd5KLRFSgx6e56MSkT4bW+Of5AGWErnJ3D1TtuLNR+fvBHWBNT:Gywgxn5JSkqM5trnHT+XC1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742697976, "uuid": "e753835f-beed-424d-aa05-d505abc41c93", "value": 42204, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697976, "uuid": "47715ffe-78ad-4b26-955c-6a18a25ef2b0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fda00312-0790-11f0-9a93-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742697976, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697976, "uuid": "7294fda6-9d98-4422-a0d8-42e00de5e818", "comment": "Malware payload (Mirai)", "value": "9b4a9ffc8981f7af2b338260b47f8ae7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697976, "uuid": "7965f566-5b72-47bf-9734-e8c77af336b8", "comment": "Malware payload (Mirai)", "value": "b76c2cbe3d2450fea49fd42f29c29bc18bced3ef0001f9ac10e057d3a590056d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697976, "uuid": "16ed4f5b-31ed-4d08-abd1-6027f6ee1bbc", "value": "T146731986BC819E11D5C50279FA2E218E3313276CF2DEB2139E14AF2077C796B0E7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697976, "uuid": "f404f9c5-a135-45d4-9dea-005c4077c5f3", "value": "1536:WxnsoVfMKN4w6acs1ZopYaWTubbJMmidw38PZU725vYE:gVfMqJbEuaww38PZU72xb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742697976, "uuid": "bc8daac6-c3f7-4dd2-b10a-27eaa68d5209", "value": 74892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697976, "uuid": "3c342cdb-2c06-49ce-be66-5c91b4ff2ab1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fdc1ee3f-0790-11f0-9a93-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742697976, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697976, "uuid": "44e1af34-49b2-49fe-92bc-9117d54b389b", "comment": "Malware payload (Mirai)", "value": "d10cde406bb6e741caa075ae3eb1b59b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697976, "uuid": "949ca6d8-1eef-4c2a-a303-d32d0ae93bef", "comment": "Malware payload (Mirai)", "value": "33aaa80f492242f0a5e3e8edec511d11b09910e21d044b7425f2b19c79885275", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697976, "uuid": "e918ce24-dcc8-40f7-a654-ba7443e6a273", "value": "T10C83A309BFA15EB7E8ABCC3705E9175625CD5A1B21A83F35B934D828F24B20F16D38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697976, "uuid": "cbc91d4f-d20f-4918-9927-480c4625dded", "value": "768:Awr5KJUlYduHE4gJT9LZjVrZsWESEm8u7epaA8tFcxqRxqrcveTE5y3odGbsB6fX:Awr5c8pa4it85gHsMq9Io/4KNg93", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742697976, "uuid": "6bedc3ac-2d70-44ca-9cfd-5d3ff3a8a109", "value": 84540, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697976, "uuid": "0a50c584-90b8-41d4-8ea5-6057aaa59574", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6509ba83-0791-11f0-9a93-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1742698149, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698149, "uuid": "0c18f867-e6bb-4842-b732-d593375c962f", "comment": "Malware payload (Gafgyt)", "value": "5a6806fd5613db0ccae50b2e71e91734", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698149, "uuid": "8b8c9ca3-6534-4239-960f-86d34ba73ed5", "comment": "Malware payload (Gafgyt)", "value": "b9a764fff637cfe51683a4cda721901f9513aef9e851dd06dde9c545e6adc644", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698149, "uuid": "181d229c-6069-415a-bc98-38bc950569d1", "value": "T116E3D96B7961EBFAD05DC2310BF7AF6096A521E217D09345F2ACDB185E2034E1C5FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698149, "uuid": "b4f8e688-e679-4917-8bf1-877b3bdf1d97", "value": "3072:sGGNZfCos2pA4FCd5hvikTam0/5ApYADn:hACyK40d5hvi9m0/5ASADn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742698149, "uuid": "45b9ba9b-a56c-408c-b217-a754cd299af9", "value": 144442, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698149, "uuid": "ee95c48a-5161-4561-9886-9be546764e37", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6509caeb-0791-11f0-9a93-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1742698149, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698149, "uuid": "c63239f2-a32f-4c12-9b30-839b3fcc8837", "comment": "Malware payload (Gafgyt)", "value": "a618d94836430fbf235dac719e7d7f8b", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698149, "uuid": "4151022e-5004-4e2e-849b-21b7c4cfcaf9", "comment": "Malware payload (Gafgyt)", "value": "9153d093b6f5b29553a0638d36c96a23db14874c9ec14f024a4d60bb9eac0e47", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698149, "uuid": "50cdbe1a-5029-4888-9b21-7a2ff87d4db9", "value": "T15BE34C09F7408B57C0D22776B6DF524633239BA9A3DB33069524AFF43FC27A94E229", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698149, "uuid": "24b798d8-0706-4308-804d-5c43abdf51a8", "value": "3072:Tdbmn8aAEHqgSkano1DTAP5hWTGZWYxVlxXmpwTsL/QMyn:he8aAEHKkdDTS5hWTGZWYxVldmpwTsLS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742698149, "uuid": "9725a9f6-4645-4ffc-bfce-80d6d63aafbc", "value": 154520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698149, "uuid": "550daff9-e207-4054-a279-4c8a0a23841c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "650d39ae-0791-11f0-9a93-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1742698149, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698149, "uuid": "343fe1b9-b0cc-4ada-a30e-0c200599d8ce", "comment": "Malware payload (Gafgyt)", "value": "82ac4101cd86719b1bcdb214075c4f4a", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698149, "uuid": "a3385781-56cb-4efb-a432-74407fbf5da6", "comment": "Malware payload (Gafgyt)", "value": "b6368dd96f0ea5813cf24b8c9f98729abf8f36bc28f3da447cd1109169b77e74", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698149, "uuid": "c1a7db79-0e2a-422c-9079-44f8678d5a44", "value": "T1E5B35C07DA21807AC09B43B21BDF96219D23B4FD1772310B33E5AEE4AF095859F9D7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698149, "uuid": "5b3f8a07-3ed3-4fac-ae35-ee42dc0f22bc", "value": "3072:j6dye4BmJQmphaZw/1vc45AzkSXmdRWaLHgb4:dmphaZcErmdRWaDgb4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742698149, "uuid": "c7d81190-a203-4c64-808e-bf8b3197553c", "value": 108630, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698149, "uuid": "504cda43-5096-4646-a5bb-9273c47449f6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6510bdd7-0791-11f0-9a93-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1742698149, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698149, "uuid": "f5cc904c-83b1-45be-ba01-31a2064e98d8", "comment": "Malware payload (Gafgyt)", "value": "d23973af5e14eb9b18bef1dee037fd27", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698149, "uuid": "69369053-946a-48a0-aa86-ddf876fb0b68", "comment": "Malware payload (Gafgyt)", "value": "2e9eb24c697d1ea37e355233e5d478c3390427fac1e486c41f21c29e2c0b2ca8", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698149, "uuid": "b543cc2d-6df6-4960-9abe-dd78970a5684", "value": "T139E3F907EB614DB7C84FCE3202D68525148EA5A653D56FABB278CB5CFB0798B49E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698149, "uuid": "cb427d89-46de-4139-a1d2-8394222d58ea", "value": "3072:lBXpqf9VHGn7vsV5htpRvHpVFm0/5ApYADn:llp4WvsV5htvp7m0/5ASADn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742698149, "uuid": "b196a668-c404-4898-b8d1-f44fbeed19ea", "value": 144442, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698149, "uuid": "3b6b0bdd-dda1-4957-99fa-869c168aca35", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "65127e7b-0791-11f0-9a93-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1742698149, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698149, "uuid": "9d4de801-3c25-4918-9fa6-40722d2eb183", "comment": "Malware payload (Gafgyt)", "value": "a04a0d416593814fb9e11fec56e1d439", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698149, "uuid": "ff7b57dd-fd35-431c-bc09-19ae6efb240d", "comment": "Malware payload (Gafgyt)", "value": "3468c4874ea099682d26f3f2fba9c423df33a674dc8d8ce68184fc68f66cd972", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698149, "uuid": "cb25dddc-09ef-4c3e-b6a8-2e4152b98213", "value": "T124B34C03A3190F43D5CB49B02DEB27F143AAE9E112B36182A61EAF9457B37791153F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698149, "uuid": "acdbb4bc-23d0-4ed5-ad5f-a58b2336eaee", "value": "3072:gQiBqcL95J6qEWLE3Sw5h7wLYm7ArEfT3n:gQiBClWLM5hkEm7ArEfT3n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742698149, "uuid": "5f8de66d-0de3-445c-8cac-27d64cb9a306", "value": 108983, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698149, "uuid": "7ef808db-6a63-4039-9a0f-8fd73cc08ed6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6514f862-0791-11f0-9a93-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742698149, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698149, "uuid": "bf2b06a9-289c-4d2c-9e3e-b9d468d976de", "comment": "Malware payload (Mirai)", "value": "45d30b7587f1b33271887413797c084d", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698149, "uuid": "6a370760-1d6c-4999-a8dd-36d5132301d9", "comment": "Malware payload (Mirai)", "value": "a828fb3efd86d151b4c4e5bfddccc6d86643d395d610b74a92fa6d2fab27fefb", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698149, "uuid": "20f081db-8434-4025-af51-f6dff7709d0b", "value": "T11AB32849F5048653C1D32B7ABB8B434A37226AE597DB33155638BFF03FC269A1D369", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698149, "uuid": "72ecd1a1-bf80-465d-903a-485a03ac4e3c", "value": "3072:vhfviOui5FCRSUaVejY68tK5hqSr3hGm0Qxu1bXWIn:pvfUQVejYXtK5hqSr3hGm0Qxu1rWIn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742698149, "uuid": "00f5b4ec-b56a-4987-9544-08a21bccc815", "value": 115077, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698149, "uuid": "72281c1a-f7e4-4fc8-85dc-ff0597ccb116", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "651f36ea-0791-11f0-9a93-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1742698149, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698149, "uuid": "9336313c-d7a3-4090-8d58-91291948dfc0", "comment": "Malware payload (Gafgyt)", "value": "4d6cfefb928a9729cb1e6b99a09097d5", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698149, "uuid": "a77bf26d-f373-4693-96aa-05ef92a790c7", "comment": "Malware payload (Gafgyt)", "value": "46d9ad7494fcc27f4f2b6b4f303b2e676a6d0889f72b4b134ee049bdaec134c4", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698149, "uuid": "0a3f4c9f-f14e-4752-a66d-2fdaa596b913", "value": "T1B1C34A2777260A23C0E6543541E75333BBBAC7D529B05207B6A09EEC3F1A6D03963B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698149, "uuid": "b0f73190-5724-4b72-a701-ba053da39c13", "value": "3072:EOqwW3NEI4VvLCphaH9HcIqmPwAw85YIn:tq/qvLCphaH9HBqmPwAw8CIn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742698149, "uuid": "7556b009-271b-49fd-86b9-42ffc98c5cc9", "value": 127170, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698149, "uuid": "b2ab517d-e105-4049-93fa-1e210a4ae918", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "65305b14-0791-11f0-9a93-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1742698149, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698149, "uuid": "48a9524f-9946-4d30-9b27-250b3a59d509", "comment": "Malware payload (Gafgyt)", "value": "5c939b37c5c79d6aff7c00c8b1b9f710", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698149, "uuid": "a3f105d7-7d77-4d98-ad51-d19e14e5f7bf", "comment": "Malware payload (Gafgyt)", "value": "2564a36619e398dbeabab4272d82d1be81eb07da84b6efc3c6843c3e4a475673", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698149, "uuid": "a6cc5b42-7fae-496c-b3b8-75b80c15a6ad", "value": "T11CE34C09F6408B57C0D22776B6CF524633239BA9A3DB33069534AFF43FC27A94E269", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698149, "uuid": "736ee2ea-58fa-4fd7-a8dd-5976c2067edc", "value": "3072:Tdbmn8aAEHqgSkano1DTAP5hWTGU2WV7lxXmpwTsL/QMyn:he8aAEHKkdDTS5hWTGU2WV7ldmpwTsLS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742698149, "uuid": "ed37f763-c25c-4c3e-90a6-c095e58b3393", "value": 154520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698149, "uuid": "7f417ca4-2681-438b-ba41-02cc15ec3e80", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e775723a-0791-11f0-9a93-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1742698621, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698621, "uuid": "2bba73ed-76c9-4363-af82-601bfd75bef9", "comment": "Malware payload (Stealc)", "value": "a17f89178420c5988d12dbdf082902ba", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698621, "uuid": "267907d5-a6d5-4498-97d3-d2ea449fa999", "comment": "Malware payload (Stealc)", "value": "fbfe15ec86660b36a9e392f45cc6c64523df85d7d64ad3fa0c702e574f45e9c2", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698621, "uuid": "4219da19-d483-45f0-ab21-0d378cd93f9e", "value": "T19846334AF1DA1871D07093B2EDFC02E31838FCD419F585293BAE9F5D45A72C869A07", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698621, "uuid": "e0980889-5415-40bf-b2cf-1add341b94c7", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698621, "uuid": "1dda74b4-ac56-461f-a35c-bb9bcfd38901", "value": "98304:pxf/EyWf9SP228P++DkHmOvpMINuTf/zAjwGsJU+uMR4MLcxNdWS/+cNX8RV2:/3EyWf9SPe++oGOBMYCAjwvJ3NRLMNig", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742698621, "uuid": "99cbc201-9139-4026-ac96-46502c6239eb", "value": 5746176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698621, "uuid": "53705929-20e6-49ab-b6bf-0cc3cae960b9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "355296e5-0793-11f0-9a93-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1742698928, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698928, "uuid": "72be9ca5-f536-4eb0-a0e0-fda5f6d0d7f4", "comment": "Malware payload (AsyncRAT)", "value": "8ae539a2d59b081e3c2a4d3ba43688cf", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698928, "uuid": "7024df69-5a7e-434f-9ffa-db0e807d2487", "comment": "Malware payload (AsyncRAT)", "value": "d4472137427a63d0ea869f290ec85564d601c6c19e55a078a156b80e3868ff7d", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698928, "uuid": "b9ca6c58-505e-41a7-b731-d6e20410f81d", "value": "T147E22A4877A44712DAEEAFF12DF261061670D51BD813EF9E0CE485EA2B67AC047407", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698928, "uuid": "73ecac8e-f50f-464e-89a1-8a2675cc8370", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698928, "uuid": "a0ab64c7-2cab-4ee9-883b-60265292127b", "value": "384:ulRmhGD91SluSWhnHHxzLmYcr3Tm2eaFO4FzRApkFTBLTsOZwpGd2v99IkuisFVH:uRPD9OQhx/B03Tw49FzVFE9jIOjhPb6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742698928, "uuid": "8a224807-1a41-4eca-8e4e-3d2e4c36898c", "value": 33280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698928, "uuid": "2ea79acf-ae34-4ca7-b0be-bf92e4abac5d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35532c2c-0793-11f0-9a93-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1742698928, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698928, "uuid": "986d2eee-092c-4397-8336-f8478cfbb9eb", "comment": "Malware payload (AsyncRAT)", "value": "36aeb5664277a5765d72c16b52d7fe44", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698928, "uuid": "4e5d6154-e519-4eff-b530-8b068c98f8de", "comment": "Malware payload (AsyncRAT)", "value": "c4b3d6b79b41a55717c6a0783bccee3ccf5dc756dc7398932a2cb2fc162b7c90", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698928, "uuid": "515b036e-451e-4d90-8763-f958768e32ef", "value": "T18F12E9029BE88624FBFB0F36ADB3524045B1B601AD37FB5F258D904F1F2625849A23", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698928, "uuid": "98d8ff24-0633-4e89-85ee-563ff55d0a41", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698928, "uuid": "84b62aea-3f34-4809-8d4e-3487dd3d2d54", "value": "96:rx3ku/MTjfAysCS+6Gb4vdmEFIQVyZgH7xvzZBKFgxG9vdqdIGOCyJ9ozNt:rZpUvfAphv9IQVJb1ZQxdqdIGVg9q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742698928, "uuid": "eb6c67dc-9530-4e56-85e6-b85b53df494f", "value": 9728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698928, "uuid": "19ebe029-f61b-4b8f-805e-4b9ab5c1f8c7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3553adc8-0793-11f0-9a93-82aee05be84a", "comment": "Malware payload", "timestamp": 1742698928, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698928, "uuid": "7354685e-a6b9-445a-9c87-bf8cb3bc1090", "comment": "Malware payload", "value": "e0e1494bd86a9cbfd84d097a0c2bdcd2", "object_relation": "md5", "Tag": [ { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698928, "uuid": "6c914292-11e1-4491-9a77-308f5f6deb56", "comment": "Malware payload", "value": "bdf3c7e6a41180cdd7eb69d227c1de7c6567d9b82224c75e8d0654c64e6b304f", "object_relation": "sha256", "Tag": [ { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698928, "uuid": "230fa89d-3667-4d97-bd4c-3cdf80815973", "value": "T119538E40B7B142A6DAFE5BB17C71A20697B1740B8521EF8F6BC889936F33A5057043", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698928, "uuid": "64330683-0409-4bdf-8665-8aca3554646e", "value": "1536:dMS+gRTiw24FE9R2OqI2XcS7i9u6yeNejY6yFOB:lO4FE9R2OqBXcS7DZW6yFOB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742698928, "uuid": "b06160c5-1d19-46e7-9739-6b200c357cb4", "value": 62443, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698928, "uuid": "2c3c4648-2a68-44f8-82b9-a82425bed440", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "355518d6-0793-11f0-9a93-82aee05be84a", "comment": "Malware payload", "timestamp": 1742698928, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698928, "uuid": "1406e287-9bb8-4da7-99e9-08bf47cd3e57", "comment": "Malware payload", "value": "16c9850dfffe136ad771223262087d5a", "object_relation": "md5", "Tag": [ { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698928, "uuid": "49371846-248a-4a18-a0d8-7bb600ce9a42", "comment": "Malware payload", "value": "da04b3169e2c2af5ae1e10991c4328cf9e147dfd1309e4ac5fd774fe4f14ac54", "object_relation": "sha256", "Tag": [ { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698928, "uuid": "2f121e73-3440-4ea9-910b-8bb177901b03", "value": "T1E5530286D2E9E51B2C382B44C6904D604681BB37399BD5FB2C02D9C6139FD9DAFCA3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698928, "uuid": "607c474a-c895-4fff-bfb5-b8b53926ed2e", "value": "1536:R4YxGJu93Rdk6u4YnTAui1SiWdkJW2jvxeABn7Z:RB6cc4YTEj6weABnd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742698928, "uuid": "1734b507-11c7-4d78-ba6e-0e32bc3ed1c3", "value": 62448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698928, "uuid": "2a39eed3-e430-4f64-92cb-128e74ce4df2", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "355fed90-0793-11f0-9a93-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1742698928, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698928, "uuid": "934197e5-acda-4eb8-b630-f8cb7d4f649e", "comment": "Malware payload (AsyncRAT)", "value": "e48d8d0b987c86b5a6b3e3a442e44c13", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698928, "uuid": "c8a98a89-558e-4cd3-83ba-3dc86017af97", "comment": "Malware payload (AsyncRAT)", "value": "297838516466731b6397fca232652a40d268f9210c5ba7ecf70247a318615dd3", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698928, "uuid": "f79f5889-81ce-43f0-950e-795c1ef0d185", "value": "T1D3E24B483BE98327D6FE2FF229B291010275D517D923EF5F5CD885AB6F67A8142003", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698928, "uuid": "99791002-d948-488a-bec8-417d363015cc", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698928, "uuid": "2786413b-6c8f-4c5a-9930-1e9634231b48", "value": "384:B7wTA+5OfPgEBQqWvfcQLZe3sr0hYACSqR/inw2uRugtFuBLTIOZw/WVnvn9IkVi:BrgECfLHrMYAoR/iw2uBFE9R2Oqh6bK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742698928, "uuid": "c17d6c9d-1fc6-4e59-9647-4811fd60099d", "value": 31232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698928, "uuid": "8ffa7a60-d52e-4a23-b24e-cb24dc1c82ce", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35632c7f-0793-11f0-9a93-82aee05be84a", "comment": "Malware payload", "timestamp": 1742698928, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698928, "uuid": "99675d1e-05af-465a-befb-3f7eba3ab023", "comment": "Malware payload", "value": "45b17ef32a92e7ed04736876feed5053", "object_relation": "md5", "Tag": [ { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698928, "uuid": "bd3c383a-c0e9-454d-b987-1a84e1bfe74b", "comment": "Malware payload", "value": "9eed417299443b34ce6f521c345c99b38c5f294cbe6ef3cd3512364562a0604a", "object_relation": "sha256", "Tag": [ { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698928, "uuid": "88eefb7f-ad9a-4b40-be36-eff75e19db68", "value": "T15F5302CB0A4CDE1534093741C86EB1E1347DA6480EE629E129967EEE2A91A3B8D35F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698928, "uuid": "41d089db-538f-49c0-b4cf-7a68ba06e9b8", "value": "1536:MPA+QqO212LGk9eEKuo3MxQMywQgRUym1jM9aCpR5pkn:MPIqO2kCk9FK5kvXZLAgAeRMn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742698928, "uuid": "844bf398-c4e5-42ff-805c-6e8706fa39ab", "value": 62464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698928, "uuid": "9dc3ca03-d0c0-49b4-9277-0d221664c20e", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35641eba-0793-11f0-9a93-82aee05be84a", "comment": "Malware payload", "timestamp": 1742698928, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698928, "uuid": "990ce690-477f-4abf-bbd1-09f6417f6057", "comment": "Malware payload", "value": "ae2c4b90aec6aae050f975aa790760fa", "object_relation": "md5", "Tag": [ { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698928, "uuid": "922242a1-ba17-4a3c-95ec-8e9f7bc8ce54", "comment": "Malware payload", "value": "80cdf0c7b8f9c4b40709ea4cd3d9b120b621670326176b38ec937e130a64d792", "object_relation": "sha256", "Tag": [ { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698928, "uuid": "bbf5cc7f-53b4-40aa-b262-ffce92929208", "value": "T1F253022C18F2699CAC255C7AD12F33F87B51B06DE0C265AEED3112848991F2A1F57E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698928, "uuid": "350f3e00-10d1-4ffe-a6e3-0e1de0291794", "value": "1536:FywGuAaiy/9PeoyyCxV6QOQDXRqgKX0pCTM:QOAi9V/QO4b8M", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742698928, "uuid": "ef1cf392-6f7c-48a9-a05d-6aaf338fff10", "value": 62448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698928, "uuid": "f9b1530e-5f15-4118-9214-4986ff5362f7", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e727f26-0795-11f0-9a93-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1742699749, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742699749, "uuid": "643c9d35-ca37-45a3-9f49-f9b5b43834f0", "comment": "Malware payload (Gafgyt)", "value": "137e9c076730c4e7c3f10775c7ea7277", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742699749, "uuid": "e3993779-633f-4f1b-8eeb-efd9e99125a9", "comment": "Malware payload (Gafgyt)", "value": "b394f495f2da8d62eec6eb9cb52f59353ea5e1f73531729e574d1f3b75205cac", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742699749, "uuid": "e7c8e257-db39-4177-90d4-375fafc377bd", "value": "T1CF318E8D117214383C79E8EFB1BD850C71D89398D4A2AF082EDB3BE4729CE147074A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742699749, "uuid": "0366e54e-ef8b-4edc-8111-acee24439970", "value": "12:GHFEvGpzjASuVGkanacaJv9SVkPMLTF/QXRaMapaSq2NITnwb4Klq:cJALVGk49WFSVFTFoXP2NIrwEKk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742699749, "uuid": "365f888c-b311-4f12-abe1-26ba29a6a848", "value": 1765, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742699749, "uuid": "8c7d51ec-f97e-4023-ad36-c41eae34c8d7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5f15517-0795-11f0-9a93-82aee05be84a", "comment": "Malware payload", "timestamp": 1742700083, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742700083, "uuid": "5b6471d8-b4d4-45ac-a25d-0d3fc71b6586", "comment": "Malware payload", "value": "368ffdf9207676fa53dabaa86c4884a6", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742700083, "uuid": "71b91140-a3ce-4048-acfa-b552d2b325f3", "comment": "Malware payload", "value": "f31e3ce89a3930d3c0d90c57310ec350a174bbfbe761e64324dd47d797489863", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742700083, "uuid": "a4741836-70a1-4552-96fd-754233b33ca8", "value": "T14B9533E105E1090FE079C0BAB183D453E379466C94A72B87FBDB4B3AED6186E13EC5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742700083, "uuid": "dafa0eed-6de6-4e6d-85a6-1fbd5abf9d96", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742700083, "uuid": "b06cc068-5d41-45a9-b5a8-9d36849e0c8b", "value": "49152:AMDzki5XSXy7GXhmVSLkpSkGh4xMOWeOn3qUncUtRIREr:AMX7XSXgkmVkkskGhs639cUfb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742700083, "uuid": "ce510847-3200-4448-9f38-704243dce921", "value": 1882624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742700083, "uuid": "44e7a8a2-e790-47e1-9200-efa65f71b68f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "20a3a520-0799-11f0-9a93-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742701470, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742701470, "uuid": "9ba42d6f-2fed-4026-9f86-874a236bdd86", "comment": "Malware payload (Mirai)", "value": "b4ad7bf4370815eefc4fc2867625246a", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742701470, "uuid": "5364bde4-2f85-4b18-8871-dcfde70aaff0", "comment": "Malware payload (Mirai)", "value": "a30ebd6a0eddb2890b4eae2f5301d55cf84a3b011ee35580aa7969f30e7dec85", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742701470, "uuid": "9864d671-e0c0-44f0-95c2-1c4a3836ff5a", "value": "T1042329B293B82F27D0E4AB7841775B0371983B9515A4CA8FBC560D0FEE56360A9237", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742701470, "uuid": "f41df23a-3f09-419f-ae45-bd251bbe194e", "value": "768:fkUoMQ769Hd/uKCXMWzMSqykPFblsnSfKh+CVNUCtXo:f1oOHd/uKCXjoSvSfo9VNNtY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742701470, "uuid": "d377e1b4-91d4-4a91-8723-ee3865feba56", "value": 45612, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742701470, "uuid": "65a186b2-f2a1-4d96-a32b-505b3d3bdfa5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5c6e3f5-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1742701660, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742701660, "uuid": "c3f55adc-8fad-4d4a-b45b-d76815de05d3", "comment": "Malware payload", "value": "3b973286b5d06e8920aa3578a4941be1", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742701660, "uuid": "e7ae2225-0d12-4be0-85fa-744bf06408b0", "comment": "Malware payload", "value": "d4b125064e284d4586ccbe058f214c34ae4a973a3f276f7db1a1b1da0e9f97b6", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742701660, "uuid": "cd4c3fc1-beab-4fa2-88f4-8ee08322ea67", "value": "9A33024523A62EB6C57548F1A3F8FF89B14A3EA49FF55C0A7C207658A43236C28C4C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742701660, "uuid": "81f0c000-35fc-4202-b218-71474eade6ab", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6EO:yYI0ARqw1qAEv7UIFM8oJorFquj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742701660, "uuid": "8ef57630-cc12-4f35-88b9-0e7e5a8264ff", "value": 53576, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9ae2112-0799-11f0-9a93-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742701808, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742701808, "uuid": "900c9411-89ba-495f-ba87-1323acb1d511", "comment": "Malware payload (Mirai)", "value": "e2566587173355fd8733e6482f79bacd", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742701808, "uuid": "d8aaf15e-5dbb-4b15-8403-3769bef66070", "comment": "Malware payload (Mirai)", "value": "3e8a3930e9f56b831ccd01242fb549bb89c8082253e8124a960048f7100ffd6f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742701808, "uuid": "5ff6a983-34bc-43e1-878d-592dd4dc5b31", "value": "T18343023B26ABFA3CD1243D7340088EC4EEEEBA1B21D7671F44C1A65C6D79A0C76255", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742701808, "uuid": "78957fdb-9749-47db-a31e-36e44b0c6e3b", "value": "1536:/ZpILyfy+uXVBUTgZDVHeQra0B3MJHk7L+H:WyK+uFGWpeTm7SH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742701808, "uuid": "6e1b4ac1-8c65-4c68-a32d-0e4d08e4132c", "value": 56780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742701808, "uuid": "9ee405b3-c368-4396-8931-431867f559d0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6183e94d-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1742701899, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742701899, "uuid": "ac22fffc-6214-47fb-905c-765dfc0f1af4", "comment": "Malware payload", "value": "dbc520ea1518748fec9fcfcf29755c30", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742701899, "uuid": "539bbdc7-3e24-47ac-a953-91cb230c8df7", "comment": "Malware payload", "value": "c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742701899, "uuid": "037ac866-1e14-4c98-a441-f722b2dcd768", "value": "D2D3128AA536ED54F11B9AF11B3B99907DF5659E82F4D4A4A2CF634312CC343FA4070B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742701899, "uuid": "f9d74a68-dc27-4066-8539-1ebd8ef5c77e", "value": "3072:Nc4i0agsmw3Py5CP5HM8EVLUuYtgB5H6oz:Nc/0aNPy54EVAhOae", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742701899, "uuid": "837dfeb8-7108-4239-98f5-78e1e7aa4326", "value": 132860, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d3323153-079a-11f0-9a93-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742702199, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742702199, "uuid": "2034dbdb-beef-4ef2-9759-28d34c586147", "comment": "Malware payload (Mirai)", "value": "7121fd151ffbbed1dae06459245db57a", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742702199, "uuid": "ab6c54e0-3541-49bb-990f-2c850669f481", "comment": "Malware payload (Mirai)", "value": "41256cc0959f52275e51ec01f4ee529a1b5477a0a14fb227ac147a63aba273c6", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742702199, "uuid": "3b2f322e-f4ec-4cc0-bb85-6860411d993b", "value": "T1264302EDA9D4B9A9CB3E4C76F5CD01075946D0C02357E214E7D3C0CAB2CD197A98C9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742702199, "uuid": "b02700e8-b058-44ac-9210-63de401f877f", "value": "1536:ExHYaP27ZCFEhaXe64pyiR3cECrE1JL3iE7MaGVqVeBa1gL:E2gKg+hyS3Grq5SE7MaDsa1gL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742702199, "uuid": "918baf7b-d4f5-46bf-a0d5-336d4aeec29c", "value": 59900, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742702199, "uuid": "270acdd6-075a-427a-ab6a-df021b08de5e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c42bde9-029d-11f0-9f33-82aee05be84a", "comment": "Malware payload", "timestamp": 1742706845, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742706845, "uuid": "cc4f4c8d-367d-4100-ae6c-f80310044446", "comment": "Malware payload", "value": "61ca96b57279c9f58c499059d3e6bdbb", "object_relation": "md5", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742706845, "uuid": "2e79a3e4-744d-4e4b-abb3-b2fcb8036e2c", "comment": "Malware payload", "value": "f2d45841060c44fa90972f1e6458cc567002b58f372b0adcee2550f1a73fb99e", "object_relation": "sha256", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742706845, "uuid": "244d34be-064b-4f89-bb99-15c315c6f2be", "value": "T1A5563305CA129196C427AE39DEE3D1ACEC8A6FA10685B4DD5FCD7F881532FE4D9F88", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742706845, "uuid": "bc159227-b6a1-4258-91ef-172b9e612ecb", "value": "98304:0cyMg3v+XYhUt8C4K1Ig34snyIQczAeqR4j9sbLukSgBa:e3mX5t8VoIUnb82ODSgBa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742706845, "uuid": "0a26eb1c-e2a5-4f62-99b5-3052f4191941", "value": 6214734, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742706845, "uuid": "f6238fdf-ef43-443b-bb68-cc85fb5d1842", "value": "audio/mpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c13226e5-07a8-11f0-819a-82aee05be84a", "comment": "Malware payload", "timestamp": 1742708182, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742708182, "uuid": "42694600-8c63-40c4-b5ce-13c66676d42d", "comment": "Malware payload", "value": "27c5c9d08a8130a5316fdf7b820b4d6d", "object_relation": "md5", "Tag": [ { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742708182, "uuid": "80df8f92-ab34-45a1-8d94-058959d6340a", "comment": "Malware payload", "value": "2d216bbaa5f5016432a65aabe6f65c0e19ca707adbe36339208bb8640c7b62bd", "object_relation": "sha256", "Tag": [ { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742708182, "uuid": "2c0861ed-942d-45d5-91df-f585b671683b", "value": "T12753F1107554B8DDA3D6FDCB23D667502AE04228C0F164DF984E42996390FE948F1B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742708182, "uuid": "924781e6-2d2f-4824-b5ce-1cb5e7a9e80b", "value": "1536:KAch6uLV22K4pwWk/gcbSUtqGpV2bBEainRf:IRV22fpXk/3SUtqGfimainRf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742708182, "uuid": "9a6f1895-a580-444a-9c64-6a14071ff3d7", "value": 62464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742708182, "uuid": "2a2716ac-3cec-4494-9e73-0d1975688f13", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d4ecaf98-07aa-11f0-819a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742709074, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742709074, "uuid": "e78886fd-1f0b-47a2-9d44-3513288d1009", "comment": "Malware payload (Mirai)", "value": "a07a783c9fd4dccbec567f1a76abe202", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742709074, "uuid": "d707c1dd-1ce8-4dc8-acef-94edc51980b6", "comment": "Malware payload (Mirai)", "value": "694888ff922d9c81d036538c761bfb909694747d23c51a1e6f2f40d6a32c1488", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742709074, "uuid": "23c7927a-e0e5-4660-b00c-a3aee4a4e653", "value": "T10C33F181D4543DD6FE26EEB96FA7A4D22690CFA609E3FF811024C66254FF97432089", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742709074, "uuid": "a575c9da-b362-49a2-83f5-45c0a98815e4", "value": "1536:aF3QDioX589IMKBdQftzYpCVRn28bjMaifLTuFobr7UB4u+qgw09F:aF3QDV823BCzYpenfHxiPQB4u+qgwQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742709074, "uuid": "460640dd-b88c-4767-8a92-f113ebf0121b", "value": 53560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742709074, "uuid": "ddda8290-21e8-40f9-9a0f-50eb0336f54f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1742710625, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742710625, "uuid": "24166bd3-edd8-4bf9-b6b7-25a38cb87c93", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742710625, "uuid": "f63f2571-f230-4452-ba2c-c07230d80e64", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742710625, "uuid": "12aa0f89-10e0-42bf-9864-0f1415cdf9f1", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742710625, "uuid": "c52723dd-f192-4fc2-a466-1ee070dc715d", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742710625, "uuid": "1b0e6932-4857-431d-b7fd-a7d557ee6ca7", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd845324-07af-11f0-819a-82aee05be84a", "comment": "Malware payload", "timestamp": 1742711290, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742711290, "uuid": "26919462-14e6-4b3e-9e0b-72c165fb288e", "comment": "Malware payload", "value": "a2927963b5cec70063379a1c3fd63212", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742711290, "uuid": "3fade275-f016-404c-aae4-76aae5c5cd33", "comment": "Malware payload", "value": "ac1a623822a4d44bfb300d86d9210fbaaf0c73c1ec8cdea00236bacf154b09c0", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742711290, "uuid": "ca88d0b6-1aef-4b55-9cbc-985e9aac0719", "value": "T1E4B533B6DCAAAA24F33A567EAC014978431F718F0362ABF725134E46C2775920B707", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742711290, "uuid": "dafeba99-e5bb-467a-9b0b-4bb7c488d660", "value": "49152:OAiqx9wIefNAYky6/JHrKUYf38yaA2Oyk8QOTrwbcwstMLU8MWNu+5D4:oz1AYkfBLVqZMk8QOTyAtMQ8Tv4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742711290, "uuid": "fa6caefc-3996-43bb-bb4b-cd2cc8783e39", "value": 2282395, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742711290, "uuid": "1a7b3cce-1346-4fa2-9609-3faaf78265ce", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "55dfaae9-07b3-11f0-819a-82aee05be84a", "comment": "Malware payload", "timestamp": 1742712726, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742712726, "uuid": "51f2abc6-13ba-4b1c-9364-e1ae97ff66e0", "comment": "Malware payload", "value": "1dacc6a6571652715f0dbd9feb1dbe8c", "object_relation": "md5", "Tag": [ { "name": "cloudflare", "colour": "#74781d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742712726, "uuid": "b2ff1eef-a6f5-4b2e-9ad3-379fa8225218", "comment": "Malware payload", "value": "cc2d95c7ec0fbfe367a1dddc0bc15e6976b6098f3c82d6e3b5ddd3e76938b3bb", "object_relation": "sha256", "Tag": [ { "name": "cloudflare", "colour": "#74781d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742712726, "uuid": "91e3061a-be08-41a8-b837-71343a818a7f", "value": "T11B513F012BF94761F3B68971087AB2206E36BC66BD51D7AE1080438D0872F14DE3AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742712726, "uuid": "0ac768bf-4ced-4c15-98ac-06a555082f54", "value": "48:8gjmMEzQKrGWe0pVdLXuHz7Jk7gF2JqsQ+v0YW+:8gj7Ow0BuTWsFCqsQc0b+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742712726, "uuid": "398a4238-04ba-483f-85da-2c50a95798e8", "value": 2877, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742712726, "uuid": "40a93bc3-4ce2-481d-9fd0-8f7f89d06f5d", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "55ea546c-07b3-11f0-819a-82aee05be84a", "comment": "Malware payload", "timestamp": 1742712727, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742712727, "uuid": "c8ed5200-ebdd-45dd-a431-13b354728989", "comment": "Malware payload", "value": "a37e6a2418ea763d324a2e31fbc6d4d9", "object_relation": "md5", "Tag": [ { "name": "cloudflare", "colour": "#74781d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742712727, "uuid": "dd4dc095-c300-426e-bc02-8a0898445d61", "comment": "Malware payload", "value": "9017d2cc484b6f739046b9c97319eb7d156f5a0baf2632bc1468b633cbce0f4d", "object_relation": "sha256", "Tag": [ { "name": "cloudflare", "colour": "#74781d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742712727, "uuid": "60e8eb87-82ab-4aa4-8b02-af22ee4f4e65", "value": "T192512F0517FA5720F3F75E700876A6204A73B862EE66D79D5084428E08B3F50DE39F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742712727, "uuid": "5509105b-2a0a-418a-ab70-c566f3436a24", "value": "24:8uEJWuJDCAYO+/CtiiehddNXuHYan7E58LkCj+7S7F2JQvMz6shxCEg063DmfyR9:8L0QhFQ9dLXuHz7Jk7gF2Jqse0YW+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742712727, "uuid": "884dedf2-d5a0-4f63-a1e8-fba11a92b9a5", "value": 2901, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742712727, "uuid": "ca238650-b4e9-4b95-9667-dbfa60b160e1", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d0752de-07b3-11f0-819a-82aee05be84a", "comment": "Malware payload", "timestamp": 1742712738, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742712738, "uuid": "ea3382c5-4f07-4db1-af3e-6ff80b142dd3", "comment": "Malware payload", "value": "4e6c82498fc01171484f7ecd3a292af1", "object_relation": "md5", "Tag": [ { "name": "cloudflare", "colour": "#74781d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742712738, "uuid": "7cbd852a-7c62-491c-b5d8-1d9e4b214d4b", "comment": "Malware payload", "value": "066d9b1ea812e5cac61c8cdf00cb0770c9f2c5d4062e60c5924927b0a619e998", "object_relation": "sha256", "Tag": [ { "name": "cloudflare", "colour": "#74781d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742712738, "uuid": "71fb8fb9-2a82-43ef-889e-e6fdf96f3d1b", "value": "T157C633A07789CB39C29B553B8ABF4759A6366D700B24C0CBB38074197E70BD352FA7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742712738, "uuid": "3e47d393-72c0-49d5-ab6c-32911df3f54c", "value": "196608:Zc64YsQHrULB/kNYzL0JJZP+QH4iVdpqUgQucSJEGDmpUxNe3WvMkdN1L4:ZD4jCUVsNiIJJR+Vm9ukamYHH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742712738, "uuid": "63468942-115e-4783-ab02-392eb0248e6f", "value": 11890688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742712738, "uuid": "551ee8c7-6860-44cd-9608-7de4b0b86c11", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60d10e43-07b6-11f0-819a-82aee05be84a", "comment": "Malware payload", "timestamp": 1742714033, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742714033, "uuid": "ddaba652-14ad-40ce-9c38-f24198a1fb50", "comment": "Malware payload", "value": "7646e3a02f1d83617b69f79fb29b73d6", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742714033, "uuid": "ad4b5438-8ee2-4eac-a15d-432d66fa962e", "comment": "Malware payload", "value": "a7917b2599b31b028e99e024b72f95ca1872f31f750d0f1031afb1c98410decc", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742714033, "uuid": "4802bc9f-6be8-4228-a6ef-d5681a2a661a", "value": "T16CA512BC1779645BFC0672B458B2632ACAFA0EF45C477835A0439383683AA737D53D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742714033, "uuid": "7447bcd0-1f05-4d67-81e3-9c62f23456bf", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742714033, "uuid": "9d2d4a60-3238-4d9b-a21b-89e0a9eaf303", "value": "49152:wLU5KPiENF1y8r440zwLBuv/fDJohwc6Ye:wA5KPiEc8045Bu37pK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742714033, "uuid": "7445fd75-0424-43ad-9265-f0134aaf3967", "value": 2096128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742714033, "uuid": "399df275-3bb7-44aa-9469-3c88d3039d56", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c1fb475-07bb-11f0-819a-82aee05be84a", "comment": "Malware payload", "timestamp": 1742716173, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742716173, "uuid": "b644939f-1222-4add-9f3b-f45e12d21272", "comment": "Malware payload", "value": "4cb9c5895ba7db47f7f2de21086f9f4c", "object_relation": "md5", "Tag": [ { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742716173, "uuid": "cba95644-1a16-403f-9aa5-5e7c67cf95a6", "comment": "Malware payload", "value": "0543922e04ec1d32c42a464323b72b9c7c3e5b9972a7a363f4a4419c9797a2cd", "object_relation": "sha256", "Tag": [ { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742716173, "uuid": "92d74aa2-17a7-412b-9082-8ade7124f5bb", "value": "T1CA8533C2BFF51A3FEA2A0BF3844916D8F8A80D57625408D3DA8F85F0615941F681D9", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742716173, "uuid": "ff495286-4c33-4e9c-beca-cc9c4d966401", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742716173, "uuid": "15721db0-c436-4e47-9fe7-f5d7d6c7688f", "value": "49152:2nfYIZ5peyqX4oa41pXb05XUP73X9Z06EXK:2n1Z3U/a0Z0X0AbK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742716173, "uuid": "462e2844-c9ec-49ae-b6f7-16e81f287c3e", "value": 1770496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742716173, "uuid": "a4745a2e-5157-4ae0-b551-ebf644c9e72b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "795a1cd4-07bd-11f0-819a-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1742717081, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742717081, "uuid": "c0c52783-066c-47ca-9b6f-c73712316e9a", "comment": "Malware payload (Stealc)", "value": "878b9005498c164765871a42b0c953bc", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742717081, "uuid": "f0ca66ab-95ca-4951-93af-e8d1f043d84f", "comment": "Malware payload (Stealc)", "value": "cd880b1bba1270371e2a2a49e7e2f22f3ed82a6a925598f5bd61c46c1ad09153", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742717081, "uuid": "e6615b7e-88f4-4801-957e-8e670abb7a80", "value": "T1F64633C3F6BE50C3E4684B71A8F5095B1926F196897C896A6F870D6C0C6F6B4F2307", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742717081, "uuid": "95d71340-e74b-44d5-8ac3-fc18d6d4c6b8", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742717081, "uuid": "7da4234d-5aa7-4837-b858-fe135ce6b104", "value": "98304:XYWA24ZcY/8PJpqPjOVFu6bpXY+1tQG7Y37cSyodDty+AvJMCRqLM1Sa/JMoxgLK:I9bZvAzqKxXP1tQGgByodDtzAfRqYT/p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742717081, "uuid": "8093c5ca-fec0-446c-a3eb-d77ea56ff48e", "value": 5800448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742717081, "uuid": "93a1c5b3-2078-4dc4-91f4-715a49d36054", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "184f6ada-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1742717985, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742717985, "uuid": "b82e045c-9765-4fe9-b287-d09991ae7bd2", "comment": "Malware payload", "value": "123dfe79846e600a8336cd14fe647d5c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742717985, "uuid": "5be9ad44-fe92-49e1-87b8-5844c0544d2b", "comment": "Malware payload", "value": "e967cff2e9a75e8f80fb4938ede971f9accee357cf9a761e9b34cdf5e9285e81", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742717985, "uuid": "5248941f-ab50-4b51-b203-359fa8d442e8", "value": "9A73121613AD296152714AF1E7FE7F88E50D2A688FF1AC247C227C68ED333AE1CD4519", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742717985, "uuid": "31cfbfd2-b2ad-47bb-a61f-87d2a145cfb6", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J5:yYI0ARqw1qAEv7UIFM8oJorFquyjkRkp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742717985, "uuid": "7e0938c5-b108-4385-980a-4bbfe55aeaf0", "value": 75296, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e89a3634-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1742717985, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742717985, "uuid": "3108c6df-08d3-42db-9d46-31005dff3722", "comment": "Malware payload", "value": "70af65a13a14e5deb73c31c8829dd998", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742717985, "uuid": "208ff7aa-522c-4765-826c-e93b9529b7a8", "comment": "Malware payload", "value": "feacba94918d32a51ff751ae4b98e9ec5823aedd525ad283ed99653b3f23545a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742717985, "uuid": "6df0dac8-b5a7-4f4c-b4ab-750dde6451a8", "value": "5923028623A63F72D52148F5D7FCEF85A14A7E94AFE5180E7C113698B07035C28C8C1E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742717985, "uuid": "aa6d2e8d-1c55-4a17-8bbc-0bb988dea779", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04ZTzEsDm1Xo0Wh:yYI0ARqw1qAEW67UIWi7M8gmfmJo0Wh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742717985, "uuid": "e9debf77-af9c-49ad-b542-7a7ee47be1e8", "value": 47784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6de2699a-07c0-11f0-819a-82aee05be84a", "comment": "Malware payload", "timestamp": 1742718350, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742718350, "uuid": "7046c1b0-f1a0-4a72-8539-dbff901b2f06", "comment": "Malware payload", "value": "4231907a711d9b5e826c1252024dd23b", "object_relation": "md5", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742718350, "uuid": "f70df1c9-5345-4803-a43e-dad3941d5de0", "comment": "Malware payload", "value": "6a584aea94b28e6549e13cc0ba10921437d50b4597ca87fdb7cff01a4952900c", "object_relation": "sha256", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742718350, "uuid": "386df867-7ef9-419e-8c70-d791634649aa", "value": "T126112332D30CD2D1C2920246D728CD09AE59C12E50187D4AE3DC99D0BEA66ED0BFC8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742718350, "uuid": "3d62c0c5-30b9-4ea4-adfb-0ba56cd4b039", "value": "24:+2nNDV7m90uKvpTjaLws4v9eNY3Su+GN4nHDCWNi:JND805RTjL1gNpS4njCsi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742718350, "uuid": "54bc5316-2b4b-48a6-b75c-a1dec4c0ad90", "value": 904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742718350, "uuid": "65cf021e-63de-4038-9f24-5694c1f7c154", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "997b8ca2-07c3-11f0-819a-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1742719712, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742719712, "uuid": "56a7bda8-0367-4764-a635-30321080290c", "comment": "Malware payload (Stealc)", "value": "bb09b56d7fb38f16909f507d68dd3ef8", "object_relation": "md5", "Tag": [ { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742719712, "uuid": "0c40e4c7-ce02-42ee-9b87-515cc75b1878", "comment": "Malware payload (Stealc)", "value": "97e9c818b6d7837d2f8846aaa8726a52733c53407a6fbcd84e915ac56a0ee3ba", "object_relation": "sha256", "Tag": [ { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742719712, "uuid": "bec2b50d-dc5d-4f63-affa-fd33b1fa7f3c", "value": "T1FE8533E23E9D9323DC98CF7FCF0CC313FA2661A5A85978CCAD0518A965A7987327C0", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742719712, "uuid": "36262953-cf5f-4f3d-ae6d-8f131684e526", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742719712, "uuid": "08e584b1-22ef-4e97-b09c-c14d107aff6c", "value": "49152:fK83BgxpJHB1KcbSNMFrSFTo176UsoeiA0zt:fK83gpJnKcZFrAoggeoJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742719712, "uuid": "3cadb319-7fbf-4a50-ae60-30353c5232b5", "value": 1785856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742719712, "uuid": "882b2331-dad9-42f3-89e8-d1a57e64bbb3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a9a85f18-07c5-11f0-819a-82aee05be84a", "comment": "Malware payload", "timestamp": 1742720598, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720598, "uuid": "c9d53bdb-62be-4d7c-b85a-49080b4da57d", "comment": "Malware payload", "value": "4595ab4348c35972ea6718e6a0da9ac3", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "This_exe_triggers_specifically_to_cobaltstrike_c2", "colour": "#e63640", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720598, "uuid": "2fc0caee-263e-4690-a05a-62145cd78756", "comment": "Malware payload", "value": "919670c590a6cc787756dd3c6faaa573c4615ae716625a44d0b33ef940b53973", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "This_exe_triggers_specifically_to_cobaltstrike_c2", "colour": "#e63640", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720598, "uuid": "2ebcd359-eab0-482a-8a9c-87ef56f53f4d", "value": "T12534E0733666863F594D7BB40707180E0AA3ED5AE826BC0DF2531BD9C6E2134BC5CD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720598, "uuid": "1072f7fb-f040-4fd7-8771-44d64e747942", "value": "6144:qTVD+5nPN4kshme9oJb8JwJUI2/CEQ4bflaBfm:qJD+5PNqv9o5aU2/OOgBu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742720598, "uuid": "df949b88-1333-4882-9995-7ea83b2693e0", "value": 239687, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720598, "uuid": "b3aff348-d3a3-4fe5-9539-5c3295a175ee", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6938efc-07c5-11f0-819a-82aee05be84a", "comment": "Malware payload", "timestamp": 1742720646, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720646, "uuid": "96da2b43-6900-4075-9214-8c30a6b9d45b", "comment": "Malware payload", "value": "fa3823620c2eee542373d9a7ec1a7ac7", "object_relation": "md5", "Tag": [ { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720646, "uuid": "dfdde7f0-c196-48c7-89da-d14453c49483", "comment": "Malware payload", "value": "5d258a2a99d4d4c7f3f18bfe6c6b7211500bd1c5b027004451d5a8f1bc7af107", "object_relation": "sha256", "Tag": [ { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720646, "uuid": "db622ce4-20c7-4d17-a935-c3b8ad321af4", "value": "T1E5717E8E02E155118402B70F3A906B949D98C3D6BCFB8F9EFC90CAA554B096CF139F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720646, "uuid": "3ee4dcc2-9e3e-4356-987b-bc7b2a8b572d", "value": "96:NOQtu03zzgBYRXs7vHnLw2o4OVUYgfS854sdknfsx:O3OOD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742720646, "uuid": "08826606-c755-4b8a-b411-b6ab364a8937", "value": 3595, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720646, "uuid": "15de8258-65f9-4a17-b95d-091a7218377d", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6b28491-07c5-11f0-819a-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1742720647, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720647, "uuid": "b7160929-7135-4fce-a251-a7a023ba0ecb", "comment": "Malware payload (AsyncRAT)", "value": "fe4ad8679b173d29250642784c25af9e", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720647, "uuid": "b42ec093-5c37-4d6f-9705-eca86f1e1a3a", "comment": "Malware payload (AsyncRAT)", "value": "e5a787d9f739b67794274e46cdd0bd182a058f5b2ebf35229b1897d4e8ef3c19", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720647, "uuid": "0fd67ff2-e059-4b22-b1dc-736eadcf833a", "value": "T110E25C4877954722DAFE6FF129B392050674A517DD23EFAE0CE486A62B236C047407", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720647, "uuid": "e1fe6189-a1b5-46b2-9a5d-6def3508815b", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720647, "uuid": "a41898d1-7ac2-46e1-9b4d-422f21865a96", "value": "768:1+CD9JxV5zlMMMoxVJt76GRVFr9jrBsOjhMbh:1h9h5JX971DFr9jdsOjuF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742720647, "uuid": "9b8a9d9c-2bfc-4386-8618-4f6bc0319ec2", "value": 33280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720647, "uuid": "149ca18f-10a8-4dcc-b7ff-001b1025a676", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6b32253-07c5-11f0-819a-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1742720647, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720647, "uuid": "ff1be3d7-dbda-40b4-83ba-5ea1860ef0ca", "comment": "Malware payload (AsyncRAT)", "value": "611a372c1e8529381e113f40be3952ee", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720647, "uuid": "8f6231b2-dcef-4f0b-b3c8-8f9761ab5733", "comment": "Malware payload (AsyncRAT)", "value": "49e0bce03a31e6590410602e96c0fa72d52b2c85ad7e692c374f4aa9142e6131", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720647, "uuid": "e39bcfd7-ce4f-44c6-87a3-15167cdafca1", "value": "T105E24B4877A54622D6FEAFF129B392050674A517CD13EFAE0CE58AF62B236C047407", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720647, "uuid": "70060fd6-431a-476e-aefb-4af131a1a433", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720647, "uuid": "3010cba6-2456-41a8-b68b-9b2ff47f99c0", "value": "768:j+CD9JxV5zlMM8oxVJt76GRVFr9jbOjhWb0c:jh9h5JH971DFr9jbOj4H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742720647, "uuid": "6bab1f62-cc3e-4bea-bcc7-e4abe4141bf4", "value": 33280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720647, "uuid": "9c017413-c31d-40b3-b41e-ab65492e06d7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6dceac4-07c5-11f0-819a-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1742720647, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720647, "uuid": "4b05a88e-b82a-4f9d-b40d-465407945e1a", "comment": "Malware payload (AsyncRAT)", "value": "ca3c89c340a55b727fba1a1009cd0c0c", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720647, "uuid": "167e2141-4f6a-4597-a431-82f10e6ac83a", "comment": "Malware payload (AsyncRAT)", "value": "a433969defb81ea6d336e2238b79d87d766be92fbc943792686747cecef98bf7", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720647, "uuid": "f553a159-6fc0-4f2c-9614-3ca1634766fa", "value": "T1E3D4F1E13790E652D4244B71D1A7EBBE0733BD1EA650CB4761CCFDAB3A723502409B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720647, "uuid": "c53005fe-25ae-4b8a-bad8-b67213c439e1", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720647, "uuid": "cde5ffd1-77e5-4454-a5d9-d2e1fd6125b4", "value": "12288:1UNPINJ9m1rZsxyGUxY2xhXZnme6rOAimHkR:iNPmCNoZ12xhXVurOuS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742720647, "uuid": "fe5c2055-ded1-48be-bd38-2cd78e40ed07", "value": 640520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720647, "uuid": "2fd9e49d-273f-424e-b048-f55babdbe6a7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6eeeb1e-07c5-11f0-819a-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1742720647, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720647, "uuid": "1042730c-5eec-4448-9d39-b53f9269f1dd", "comment": "Malware payload (AsyncRAT)", "value": "fd0339fe32254631736b257e1a35bdc7", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720647, "uuid": "4ce71db7-4965-4e6c-9f2b-f5defdce70bc", "comment": "Malware payload (AsyncRAT)", "value": "f258602a41c3e0ad62574e9c98f7d82c771467cb3f7a8919b5648421680e1d3b", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720647, "uuid": "2aaf5db0-8b82-46d0-a92f-b027dbc5297e", "value": "T175E24C4877954322DAFE6FF129B392050674D517CD13EFAE0CE486B62B63AC047407", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720647, "uuid": "b9ece322-7ca9-4ad7-8618-ca2506a8a477", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720647, "uuid": "54634807-ff14-4a37-a9f2-a03f86ce57d0", "value": "768:8+CD9JxV5zlMMMoxVJt76GRVFr9j/2Ojh0Gbc:8h9h5JX971DFr9jeOjSGA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742720647, "uuid": "913832b9-376a-480a-9ebf-ff0da11f7909", "value": 33280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720647, "uuid": "73ed4879-f74c-4cd7-b07c-79b7f29421cb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c734fe67-07c5-11f0-819a-82aee05be84a", "comment": "Malware payload (XWorm)", "timestamp": 1742720648, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720648, "uuid": "8637bff8-058c-44e9-bb2a-d25cd78d644e", "comment": "Malware payload (XWorm)", "value": "a88ec7e95bc60df9126e9b22404517ac", "object_relation": "md5", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720648, "uuid": "44ffe440-e9fd-422f-9906-03126dfb5c96", "comment": "Malware payload (XWorm)", "value": "9c256303330feb957a162d5093e7b3090d7a43f7d8818f4e33b953b319b8084e", "object_relation": "sha256", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720648, "uuid": "aedfffb8-ab39-4c40-b925-9e65eaef2652", "value": "T12E34180199B5C8563AC2246C49FFAAF5E856B368BDF96B70740117DF0B6E7413EE3A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720648, "uuid": "32588d70-7d93-4eba-8da4-630ae6ef4115", "value": "6144:Xl06siU/yLMnA8taz8gy9Z3nF5pBTxLhvxTRP8:t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742720648, "uuid": "c7333e2a-d5f8-416c-88ea-6da8f4e58e61", "value": 234822, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720648, "uuid": "f67920db-b600-40d9-8067-7a7793c4824a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7357249-07c5-11f0-819a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742720648, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720648, "uuid": "d80fcd63-840b-4a6f-826b-b83896f7b192", "comment": "Malware payload (Mirai)", "value": "26a2e70ae6b32f72e7493815cbad3bf2", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720648, "uuid": "a0280da3-a99b-4b36-8460-9c3db180115e", "comment": "Malware payload (Mirai)", "value": "cf1918f91d2f367101966090443833f92b6cbda13165630f1005b2f0dd888227", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720648, "uuid": "d4b7b72f-f91f-43d4-b7c8-855f625414f5", "value": "T1D351B99545840F7C1C67EA1BE67687183382A453D8F96BD6D9ECB7E0038EE1471B0B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720648, "uuid": "f2f5d9b4-4bed-4fba-8014-57ce694f85e8", "value": "48:vH+7q+7N7hH+t+6GH+gV+zPH+9+KWH+z+oUH+7z+7o7UH+fs+3bH+a+9RH+P+cg7:vH+7q+7N7hH+t+6GH+gV+zPH+9+KWH+y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742720648, "uuid": "0b03d13b-93d7-4abe-9d77-4cbff8a1e196", "value": 2970, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720648, "uuid": "4a0a7abf-da42-4f77-a4c8-42c0cae211d5", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c737ba82-07c5-11f0-819a-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1742720648, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720648, "uuid": "b15c1b54-3a03-4a46-bafe-339e502bd4ec", "comment": "Malware payload (RemcosRAT)", "value": "e6db118809d55b0a47b8c9c757b8a3bf", "object_relation": "md5", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720648, "uuid": "a244bf15-50e8-493f-a35e-86da9287998c", "comment": "Malware payload (RemcosRAT)", "value": "26723961a71e810b8e6f2f10d40d1d72f17c4a29d792f2cb49060dbb25fde686", "object_relation": "sha256", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720648, "uuid": "ca268db0-c420-42ed-aa92-91c4e962c8c6", "value": "T14A949E11B982C036C17212740E29FB7699BCBD202936597B73EA5E5BBE701C1B7363", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720648, "uuid": "418360c4-183a-45c0-941f-9c6b1e561471", "value": "f2fe0712ecb6c4feca65be4f410e904e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720648, "uuid": "82f8c4c2-e13c-40ee-9756-025abdc38383", "value": "6144:1IdUXq44bq4LrqMUz2y6cdjJ4nCb0KhEekcdK5xAO2XjXapGc39ou:1IdU6tdyDJZQKhEe7WAXWpnou", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742720648, "uuid": "f90d043a-d77d-48de-b7e6-bb3ef97e4b26", "value": 441856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720648, "uuid": "e7a525e0-0c13-4733-8c54-2a15c69135d1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38f8ea98-00a3-11f0-9f33-82aee05be84a", "comment": "Malware payload (SmartLoader)", "timestamp": 1742720648, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720648, "uuid": "b55cf3fa-9738-4412-8201-87645739a190", "comment": "Malware payload (SmartLoader)", "value": "010c0b94dd56c7c3b390044f1f8e4e76", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720648, "uuid": "45b31115-508e-45a3-8f5d-99f9c86566cb", "comment": "Malware payload (SmartLoader)", "value": "b4a4ed546d74556bd002a65b9a1192e53280aad6c927cc51cc89b0586d98c0bc", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720648, "uuid": "7548312c-8e5e-4a32-806d-f46037368676", "value": "T151742327885D5702CD4994B11DBE1CFC93C2BB8AE32769494F1837EA941FE8D3B4B2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720648, "uuid": "09e5e166-61a0-4f87-a179-e122ab23acb9", "value": "6144:1Nyk580vn3MPZjKop40skiOIuUPsgJV8ZHLO2Y1RZbDGFIPMKseQnJ16DXbfEnmE:1xq0v8lfhiO9+38ZpY1PDGmPWerrEnmE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742720648, "uuid": "8279e91f-66c8-4705-8813-a0c3bd8171f0", "value": 360282, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720648, "uuid": "070511bc-47fb-4e72-ab79-9c3caf1149e8", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c78db0cf-07c5-11f0-819a-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1742720648, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720648, "uuid": "0aeca4f0-ecab-45eb-a5a3-0dbddb05622f", "comment": "Malware payload (Amadey)", "value": "5e3b92bc7037abbd59dbb55bc8d445c1", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720648, "uuid": "bde2388e-e0aa-4e66-9396-d525f41d4901", "comment": "Malware payload (Amadey)", "value": "44a472744c8b51fa4bcccc671417e58cc23d8499afe07de7c598d2f131d18a10", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720648, "uuid": "4b573b94-00d6-468d-af8e-a63ec8e60d31", "value": "T13A159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720648, "uuid": "b707f061-4b24-480d-a831-04450d791b6c", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720648, "uuid": "315b6a9c-bb7d-41cb-bded-a3d9eca28738", "value": "24576:TqDEvCTbMWu7rQYlBQcBiT6rprG8a0Mu:TTvC/MTQYxsWR7a0M", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742720648, "uuid": "5d02e914-bb1e-49b5-acea-5afbb4d97f04", "value": 961024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720648, "uuid": "b2b238d2-27b5-44e7-aef5-3769ef73ef77", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95115ddd-ff37-11ef-9f33-82aee05be84a", "comment": "Malware payload (SmartLoader)", "timestamp": 1742720649, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720649, "uuid": "6bd5c6f7-dd55-4b60-a32c-e783fdd3ce0f", "comment": "Malware payload (SmartLoader)", "value": "4028577209b7246c097188f40358af03", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720649, "uuid": "c88ca6a2-3033-415f-af2d-03c6acd7cf7c", "comment": "Malware payload (SmartLoader)", "value": "0fd7ba04cc3d16de07e66b3e53fb6d426dfdd7366f2f7b622f6601e0acd78818", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720649, "uuid": "d4132d4a-97ee-464c-affe-2f4c65ca18f9", "value": "T1D2742321F13E3BB8757127740D02BC7E452F0CEC9175C22AAFADDABE821796A444B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720649, "uuid": "482ad75f-c53c-4239-9a2b-75e93aac6899", "value": "6144:NYWUIKEGaKZU87tOUc/gVcQxwbrrF02fcm35p+8iFw0PBAgBenK705aQK0ZFcQRM:NYnREGNU87t0gyWyrprfX3hiS0SgBCWP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742720649, "uuid": "b58011b1-713d-4051-82f2-7b5c6ca0da85", "value": 358206, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720649, "uuid": "1dca2cd6-bae2-4443-9bb3-7ddf513ebebf", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c85de419-07c5-11f0-819a-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1742720650, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720650, "uuid": "3cd1e9e4-29ac-4873-a226-a1a8d720ee6a", "comment": "Malware payload (RemcosRAT)", "value": "98de3c43c37b259a74557f3e6bfbd612", "object_relation": "md5", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720650, "uuid": "2fc66793-0ffe-4d45-a987-15a672503633", "comment": "Malware payload (RemcosRAT)", "value": "29574e6d07de8c3a6aa4fcd5ba2d8a452936cd8bc698942203b2c77317db3f5f", "object_relation": "sha256", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720650, "uuid": "a84d6d2c-18a9-4434-82e1-680f0533efd5", "value": "T140B4BF01B9E2C172D57654300D2AE776DEBCBD2028358D7BB3D60D57FE30190AA39A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720650, "uuid": "6f29f50c-5c3a-4db0-a793-b052c387adb6", "value": "41e05d591d7d93bdd5bc6d5da04da74b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720650, "uuid": "bfc97310-ca52-40d8-b3c8-6afd7f51df3c", "value": "6144:/IlSCa0RPvRz+n8Qr1D0ZGESuHabmvHOE4mCp6qtydBnP+Y4+3sAORZGFX3Xc6XJ:/200OFp+G0imvHn3Cp6qyBP+YdsvZGN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742720650, "uuid": "fb6175e7-6e4f-43a6-8454-7aa626f3bdf5", "value": 498688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720650, "uuid": "ce83d9ee-0919-4c11-8ea7-064e9c4ce6a5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c969f52a-07c5-11f0-819a-82aee05be84a", "comment": "Malware payload (SmartLoader)", "timestamp": 1742720651, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720651, "uuid": "8ceacc63-bdf7-4f97-accf-6a7e1061c2c8", "comment": "Malware payload (SmartLoader)", "value": "1e5ad284567b83ea0b4fc871874625ad", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720651, "uuid": "4de5ee1e-3898-4dcb-8c3e-322754305ce5", "comment": "Malware payload (SmartLoader)", "value": "0af99b94ca63947eeffe16eb87dbc8aa0837176d209e49015fe2e3fc64ef10b7", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720651, "uuid": "dc7d3459-dca3-49c8-9c7f-eb4de5142b82", "value": "T1775533411364D4EFD1EF9580FAB79CC9252F35BABBD91A4A400833709A2F116BDEA3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720651, "uuid": "fd38406b-eed9-4c44-9270-3676debc8e3e", "value": "24576:DUj+0plCZf7e3Q6OQ/QxTJ7ILzYlsRhjw6LCvavtxU6bJOt3ztV3lGv/:DU1LeRxTN+ke3eSvFJujzlGv/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742720651, "uuid": "7df15706-e333-4ae0-b71b-e4e250777d84", "value": 1320700, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720651, "uuid": "e04c8685-dedc-4ab6-a0f2-c615c619063c", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cacbf570-07c5-11f0-819a-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1742720654, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720654, "uuid": "0814e061-12bf-4dca-a6d1-c9b5292f3f79", "comment": "Malware payload (AsyncRAT)", "value": "5cfc96efa07e34454e5a80a3c0202c98", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720654, "uuid": "f144782f-d463-49c5-8fbb-2ae6736aeb09", "comment": "Malware payload (AsyncRAT)", "value": "fb0fe7e716caf3e0dcb1fbb6824466f807aa85295bfc7ed7046febf3331dab88", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720654, "uuid": "2affdfb9-ba98-4570-a1f2-3819f529c394", "value": "T16056335E7941AB9FCD0B4431DD385DBCA770B9332703832B601321AD5E6EA56EF680", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720654, "uuid": "105daf1b-02d7-492e-95c1-4f9a3ff90d74", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720654, "uuid": "416e3779-72ec-4f14-a0bd-e743ca6c247e", "value": "98304:vWRINcH5pNN/N91h2eDZQjL7sU8I5DKBWoClkRGJewd8Y3evBQ9LtYVrEx3/o6EU:ORINg9GeDVI5DKBWZlkgJedYs6LtYdEV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742720654, "uuid": "ac80ab5e-5fb1-4407-bafb-c3f35b145898", "value": 6187008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720654, "uuid": "c77902fb-596e-4aa2-ba83-6b6ddfc9fe63", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cbdf81cd-07c5-11f0-819a-82aee05be84a", "comment": "Malware payload (Emmenhtal)", "timestamp": 1742720655, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720655, "uuid": "0732c634-b296-46a5-9210-65d11d509991", "comment": "Malware payload (Emmenhtal)", "value": "9a94680a9cd61602dfa3b1ad8eb041e2", "object_relation": "md5", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720655, "uuid": "2abeabea-ce23-4a22-b505-00e132be8e3a", "comment": "Malware payload (Emmenhtal)", "value": "02d5a5447b038192f5cbea326c1f5d27cb009272ec6b83b248f9525a310f84f8", "object_relation": "sha256", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720655, "uuid": "e01b6465-ebcb-47a5-afe8-82b7a26a2ea3", "value": "T1EE6633418F27D45BD1DB3F3EC6734A8CAEE6EF48465570024A9EFB85287278F2935A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720655, "uuid": "0a609a56-ef9f-4a88-8f20-ba5518e988b4", "value": "98304:y03mKLQrIbLFKouj7ngga57y6yHjl7bpyXxUa2iy9yN8q3frDD145:93mKLi6LFVyM7yDlZKr2FYPD0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742720655, "uuid": "27502625-530e-4547-9e21-068703af5e8c", "value": 6482091, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720655, "uuid": "9f8191bb-246c-427e-bb54-7efc084cf032", "value": "audio/mpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d32d3948-07c5-11f0-819a-82aee05be84a", "comment": "Malware payload", "timestamp": 1742720668, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720668, "uuid": "44a4ca2f-0c36-456e-bb01-906d8f22761a", "comment": "Malware payload", "value": "977dd03bbce495803f9755497f828f3f", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720668, "uuid": "418a6d04-973a-4b3e-8db3-8d9a9e6f51a7", "comment": "Malware payload", "value": "0f44794ba1ab32793ff19406b5db4d43ba4e88e2ad21465817f06dd208e1f752", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720668, "uuid": "b51d4ee3-69e7-4b85-88f6-5cd2c204b141", "value": "T182F73367002302779D66259B30CCC5FB4E5185ADFAC4AF39B2617B15F4ACAB376C7A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720668, "uuid": "d8eb15f3-64d7-4991-8d4f-519cbaf0a182", "value": "1572864:nRI8jUU19gAbGVF0jOEAdFsDqiaGAWTwG/ZsKfM2Bd868:9d1ZbwFwOk4SwSpfM2Bd8h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742720668, "uuid": "0a125515-8b28-46cb-b4ca-70ab058df8ed", "value": 75378193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720668, "uuid": "5bcc0737-2792-4653-b828-2c828a555747", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ecda5986-07c5-11f0-819a-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1742720711, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720711, "uuid": "682b5f3c-a16f-47a7-a5c7-8fc6ce71f0b1", "comment": "Malware payload (AsyncRAT)", "value": "f76839d0269cd922b6b5f9be639d1c8d", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720711, "uuid": "af7b9ffb-5d8e-460b-866e-5496e68d0ff7", "comment": "Malware payload (AsyncRAT)", "value": "2b82b9425b1351a09806518b78050b48658e89a79782e66f72bb8be93c5b109c", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720711, "uuid": "367aa6e3-5a5d-4eb8-806f-e43c5c874c42", "value": "T144B79E0272A70C97FCA69134C6D671F296FEAC5372F1868FEF580E111B665BC592A3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720711, "uuid": "76b69f5c-afe8-4179-8c3b-246db87e0a0a", "value": "66b10d8b5718b0fd6fb4865843d44280", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720711, "uuid": "eedc9e35-5591-415c-b145-bd65f4f5977f", "value": "393216:P76L6otUitqtH7wHtXq2pt2jbOCacCFIK0fpP9HF4VW8yfRnVQx4urYsANulL7Nj:P0LoCOn+2Rs4urYDNulLBiuv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742720711, "uuid": "f815f1cc-b2cc-4da0-bc2b-0f003c632353", "value": 52324784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720711, "uuid": "1b580e28-c600-4357-b522-a95e80095bd5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "556f12b2-07c6-11f0-819a-82aee05be84a", "comment": "Malware payload", "timestamp": 1742720886, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720886, "uuid": "19573a6f-3a91-499c-90ae-b64b79794d91", "comment": "Malware payload", "value": "a97f053dbf770b6bfac10ae0d049c4a0", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720886, "uuid": "f20833b3-bf3c-493e-8aaf-0af357c0f11c", "comment": "Malware payload", "value": "4f747945e29470c4e8a30382497c0c0ea86346105c3af99d09e975062a5b751d", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720886, "uuid": "5334416b-efa5-4c0d-a114-972f3fde4f85", "value": "T13DA1EE1FB92119425F83DFACD7C5990CEF62C81748B6A41AB38E8D881F96B7D11C0D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720886, "uuid": "e261e8c0-935d-47ff-8fec-df070f4abab5", "value": "48:/81LeLR13wyjSKF0ImJFZGjrmvvvTYZf2QVrnhDhDYMHAUOUFqFQzU0ngq+wFOlQ:/8lGRmyP0xMCNQVLhDh0O/65qpudy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742720886, "uuid": "63fa3c2c-7011-43c6-88bb-b5ddc72f3e48", "value": 4829, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720886, "uuid": "305c31ea-6866-4904-9522-a92a4f58cc64", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bca7ed4f-07c7-11f0-819a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742721489, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721489, "uuid": "b6e0de44-3420-4326-8947-d478b76a0f1f", "comment": "Malware payload (Mirai)", "value": "b9652bdba9fc5046cdbca6b74095f8b2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721489, "uuid": "181a41d3-d99d-44eb-af5d-ab648cca2f00", "comment": "Malware payload (Mirai)", "value": "1b97c4098d3bd1690d6ef8844a5ed614c5169948cc1640347d25981cdaa1eb84", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742721489, "uuid": "f89f4885-d30e-4816-a2b2-785eb09ef0ab", "value": "T1DEA2E025D349AFF4DFAF9D9057C2D2C276E543C7278AC8F240EEAF012506046B788D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742721489, "uuid": "81b417e5-317c-4871-a191-2a791ee57ef2", "value": "384:m/JywWc84Tp2YshxqlDeAkSqjGJLeCE5zRW6C5NTQM4uVcqgw05VxJX:mRxsSVsMD6xiJJE5zRWNj4uVcqgw09J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742721489, "uuid": "129097be-146f-4d8b-840e-b52553e9adc4", "value": 21884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742721489, "uuid": "41edcda2-a031-42a4-9840-ed891b2dc6db", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bcaa74b1-07c7-11f0-819a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742721489, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721489, "uuid": "4685e485-b5af-4321-a9ba-375e457d7c86", "comment": "Malware payload (Mirai)", "value": "9628f7bd1190cab615330afa0364fd67", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721489, "uuid": "1aca6d0b-c90a-43ed-b3de-a4dd24d3b77d", "comment": "Malware payload (Mirai)", "value": "e7b824dc0bc61dce45867ecdd494c9a0970c19aeb4ac9bbe12817de7eb0fa022", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742721489, "uuid": "4a7623ae-ad33-4b1d-8bad-a2303237cd13", "value": "T19382DF30629B75F5DBE10430FAAECEC6971A0BF9D1FC369326586B78894200651F93", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742721489, "uuid": "af3bf327-2788-4262-85ae-6183ba196303", "value": "384:MjWzRV0P6iOwrkom0DRnVATuSlShu6NvmPWtUn+KMaAhymdGUop5h5ll:6GV0P6+kom0tVAoNvm+to1As3Uoznll", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742721489, "uuid": "6bac7206-7530-4a5f-bab2-d1ec7d122425", "value": 18488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742721489, "uuid": "b8d51f95-a3e5-48be-9dde-d0081d9ad57e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bcaac6d0-07c7-11f0-819a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742721489, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721489, "uuid": "f2b0b5ef-9918-4109-b716-4c2fb85af1df", "comment": "Malware payload (Mirai)", "value": "3d6a6ccb446fb1960e334deb5c3e89e0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721489, "uuid": "f8c5d0fe-dba6-4522-9ead-aa6a724452f1", "comment": "Malware payload (Mirai)", "value": "acbab10d19df16c609c3b2463adcb356156b6915561bff3dede3a38d0790cc22", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742721489, "uuid": "c0fa5d97-87cf-4e19-bf1e-a6945268525e", "value": "T16E230271890F9EB514703C76EB95A783BAE11AB1C6673013D6290A3C2F747131E5BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742721489, "uuid": "c6b99174-bfde-40bb-9826-95ede731d40f", "value": "768:D/TYCoIxdEk+AxoTZAZHFeq8b35oG9q3UELbUXfi6nVMQHI4vcGpva:DECFd+A6YHAx5OLRQZa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742721489, "uuid": "3e10b806-78bd-45a7-80dd-491fa4849aa3", "value": 46624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742721489, "uuid": "915ef60d-978d-4c59-8bcb-5eaf999d2e1f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bcad745f-07c7-11f0-819a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742721489, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721489, "uuid": "8a233b0b-b786-4c1a-9e7c-8ae2ca0fc0ef", "comment": "Malware payload (Mirai)", "value": "a99db56332a63233bd70954a15d57f6b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721489, "uuid": "fca1b63c-3c42-4cd3-bacd-bd447bbd6498", "comment": "Malware payload (Mirai)", "value": "9c1258193c6e60d5a423acb6769b0cbf29dcdd751ab725bef5fce1a8820f15fc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742721489, "uuid": "bc1afb40-8dbb-464b-bb96-a25cfdcbbea7", "value": "T1A7330A8EB8029D3CF91BE6BE54164E0DB93177C152830B2757BBFDA36C721945E02E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742721489, "uuid": "6e7a988e-07b4-4e56-a4e9-d1511deaadf5", "value": "768:gduPBFnHooqR8qOCKq2cH4Fje+TK806MMUVjzMfQXOtHud2oGv:r/hqaJMcjeqK806MHdMfQXoHuCv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742721489, "uuid": "b776dbaa-c4fa-4505-9bc7-3c962f1d844e", "value": 54932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742721489, "uuid": "2e0a50da-fb06-46e2-aa64-4ebc03b3540a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bcafba94-07c7-11f0-819a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742721489, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721489, "uuid": "f1f16df0-50bb-42b9-a750-0670ac7b6381", "comment": "Malware payload (Mirai)", "value": "e31105444d6947a014f60e76dd195504", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721489, "uuid": "f47eaea9-56b9-4642-ad8f-e130e80d66af", "comment": "Malware payload (Mirai)", "value": "d1ee942eea2c5301e78739ebf564eee6c70dbfc623d4e3cce1de52a38e9f7f10", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742721489, "uuid": "b8527ec6-8245-4d03-a19b-9d2fdb4acecb", "value": "T174A2E115BF2886CFC831693855E9E5D21367FC72F2DDDC092940C16BB4A33A56874F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742721489, "uuid": "e9fac05c-886b-4458-a578-14bd77854fa2", "value": "384:Mg9Lpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXaqOKV14b+502F2vwA9dWuMW21bAKc:798o08kxofBE+ZkXaqGbp2F2TWul0c5J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742721489, "uuid": "778512ce-75b2-456e-9191-0da7ba96a800", "value": 21500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742721489, "uuid": "be20d410-5912-4470-87f7-29f628664d03", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bcb04e25-07c7-11f0-819a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742721489, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721489, "uuid": "38109008-ab97-4827-ad9c-97c8d8ccfb6b", "comment": "Malware payload (Mirai)", "value": "8cb3b915e74e77cea16f35c9372be6a3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721489, "uuid": "9137c446-f115-4abd-9cb8-7ca5fea40ea7", "comment": "Malware payload (Mirai)", "value": "1d456eb661274ef5238c94f0f2b6fba8851acdc0a2807c73a5a7f7fb37441d68", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742721489, "uuid": "b8a84fb8-2254-4f41-8d54-8a16ea552930", "value": "T126B2CF3C1B151A58DE1AC0BD839D0B203DB42B25D1829D5B6207ECD7AF968747453B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742721489, "uuid": "0d4478de-1e21-443d-a960-1eeb90430df8", "value": "384:YeD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiUmdtJgGlzDpH7uNj1JA4X:YeD8ZSWvZHZbs1row697qohQvg9UitJQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742721489, "uuid": "c0a14a6e-b6fe-4932-81e1-d2f132709916", "value": 23784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742721489, "uuid": "fdfdf8e3-1d3c-4c54-998e-50263a925b9e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bcb230b9-07c7-11f0-819a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742721489, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721489, "uuid": "ab96d2f7-133b-4eaa-8346-76c079939f95", "comment": "Malware payload (Mirai)", "value": "098b3ae7451924411c7f5bb6f31a9609", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721489, "uuid": "bd19bc92-d7a0-4743-91d0-a0f9b4224f0e", "comment": "Malware payload (Mirai)", "value": "9f366b70db6b314e4dc89688e760238ebc7be270932ad1b31e9d3d922af51f86", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742721489, "uuid": "51d7d739-f344-4cec-acbc-57e85b956379", "value": "T18BC2D0A0B626F931C4206C3DE53A4D893A51067C91FF383764258D359FC1A9A67A88", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742721489, "uuid": "7ffa71f7-dd5f-44dc-9548-645d38ce02f7", "value": "768:JMKyhegCCMqfizjoNpd2vJdX6vwrT9K9q3UELuA:OKy4qfqoeJdXWgT9/L5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742721489, "uuid": "351d97ec-19f2-4777-9d9a-c576d1ff9ab1", "value": 27300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742721489, "uuid": "d3c799d2-8400-45c3-90b7-427a969c86ab", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bcb2cc8a-07c7-11f0-819a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742721489, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721489, "uuid": "7438f9e9-1f4f-4da9-b01c-193e84b6a02e", "comment": "Malware payload (Mirai)", "value": "276bbafdf31302a61af16e975b232e4f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721489, "uuid": "7d639eed-1787-47dd-aa8e-20b565743fed", "comment": "Malware payload (Mirai)", "value": "28a2e4dc497ee4e4f7547d7fffa667e4a1704d14e137b5a25d3b8e5139f666fb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742721489, "uuid": "0def98a4-813a-4fdd-9f3a-531189e990c3", "value": "T12C336C36E029DED0C6560234A4E88F751F03F1C883536EBB2AE546B2645396CFA19F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742721489, "uuid": "e891658e-0304-4733-89d8-2076b6b14b58", "value": "768:Oa2vU7eng2qGJert7LrLMU6fgatQh+YbT/9+m3CZQoV/bnmCozw:Oa4U7G7SvT6ftBTm3KVrmCo8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742721489, "uuid": "5aad2010-037a-49f7-b82a-4e5b38b99218", "value": 50168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742721489, "uuid": "28fa3f8c-13db-41d0-8054-b21c15fb7628", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bcb42ad4-07c7-11f0-819a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742721489, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721489, "uuid": "8c40b27f-e447-44aa-90d5-b339883af58d", "comment": "Malware payload (Mirai)", "value": "4112f752855965864ea32db1f0cec08a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721489, "uuid": "d527cdaa-906d-40df-9035-61d1f472c197", "comment": "Malware payload (Mirai)", "value": "820407581fb98e72ddc30c6280624d5e42ed80b9abc29d0f55a42590f152da37", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742721489, "uuid": "6d712f4e-e903-41f6-ace7-f2577753a555", "value": "T15CB2C0CC61443084C98D7C7C278D4A664FACA190BAEE8F25E354CD9973BEA4B749D0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742721489, "uuid": "6aa80590-def3-41b4-bfae-b685f3db1a1e", "value": "768:c4rQlS07dEv0UXqUhvQE+CXQKMQKCXBpTyWZq8Wvb:BQlS07FUXqIYSXQKquTHq5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742721489, "uuid": "85002dec-1b2a-4c7e-b11a-3565daf8c657", "value": 24912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742721489, "uuid": "65e67d63-3ec6-485f-8300-40b8991684db", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bcb4d473-07c7-11f0-819a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742721489, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721489, "uuid": "2470e3cf-7cfc-4d60-afb9-dbd0d0ba9ac9", "comment": "Malware payload (Mirai)", "value": "b7113b029a06370e7425a5f87cd375b8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721489, "uuid": "c97554bd-c8ff-45e9-a374-b9c2d84513cb", "comment": "Malware payload (Mirai)", "value": "6800d7273d444b07951ac4d5b495569ed35e3b75444ae740934437f8a989499c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742721489, "uuid": "bcd3cb3d-85ef-47a9-a204-cc0278a961f0", "value": "T1BEB39CDBF24702A0C8624AF007CB4BED3E2723815F27C5E72C6A657969791CF8905F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742721489, "uuid": "de7f66b5-4aa3-4c9e-97a5-5a12647f4082", "value": "1536:Fu27gBY9FSSpj3z5Qxw6YaWWgg1m/LWy:c9sSyzz36YaWWgg1mq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742721489, "uuid": "26f0032f-7f94-44b7-befb-ec8e72c9b5f1", "value": 107800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742721489, "uuid": "232eb7eb-579b-4500-8a09-9822fde538f1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bcb4e4bf-07c7-11f0-819a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742721489, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721489, "uuid": "9eb6dc5c-11ae-4c00-a64c-c3bf2a3b3b96", "comment": "Malware payload (Mirai)", "value": "2e6c375a76002aec40f89ec640d3d891", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721489, "uuid": "7339cc00-070b-447d-91d5-97f16ec4d5bf", "comment": "Malware payload (Mirai)", "value": "1effa88e5a2b8528a29c4b776d8a6ae0e7c7faac3480a7f186f38610b50f61da", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742721489, "uuid": "49036aa3-fadd-4378-9597-b5be085a0a37", "value": "T138432921B63A1F13D0E0A47D21FB4B59B1A15ADE26A4C64E7D720F4FFF11680A943D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742721489, "uuid": "140c5785-09cb-4982-9b90-4f9afed3337c", "value": "768:RqowmZPu9wtnfbltWgC6BSJsBcfDSTFIuQKqgESnmC/xO+KpAwX:RqtmZPuutfbltZFBSJsBcfDSTFI+BEX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742721489, "uuid": "531445ae-5a47-4de0-b234-19fcc87c56e1", "value": 58376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742721489, "uuid": "4e631b78-987f-492c-8e56-fbbfa327d5f1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dfc0d30e-07c7-11f0-819a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742721548, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721548, "uuid": "f6484b70-a456-4e17-835f-8052657e5109", "comment": "Malware payload (Mirai)", "value": "0082616929c0e77a13bd3a39040306c9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721548, "uuid": "93689c69-f65e-4766-b6d4-167d1e9e5637", "comment": "Malware payload (Mirai)", "value": "dd84d2c7092c4460241790275f2df84f24056f4403264d78af9f521b398e6370", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742721548, "uuid": "dbfc5568-5c94-4602-b15f-a7758bc710e8", "value": "T134A2D01572A32D56F3ED1C3CC9AAC31BF9661BFC80B6327679415620C94D20A3E39A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742721548, "uuid": "a6f5d720-87cb-4b78-a4af-d554fd2143a1", "value": "384:TvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjwA97whymdGUop5hZ:TvQn4j+ZO5fKAlx3ws3Uozf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742721548, "uuid": "f637bd2a-ae84-43aa-b3d7-170a931fcb2b", "value": 22168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742721548, "uuid": "acaaa827-9eb4-44f9-a90b-b38a55e93ea7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8af5d128-07c9-11f0-819a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742722264, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722264, "uuid": "939c0578-d4a8-4f44-a6fa-f978e5e8f346", "comment": "Malware payload (Mirai)", "value": "876b71df411787c38f40062f2561b140", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722264, "uuid": "7b2ddd80-8861-4a32-9aa6-3e4ce175f97d", "comment": "Malware payload (Mirai)", "value": "b70b463cea12a4360e735dcb3f065eb7d03920362dac022cad51b99e5efcc720", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722264, "uuid": "785921ff-59c1-4208-a4da-b2bd731341a5", "value": "T1B2F34B07B9C194FDC599C1744B9EB13AD972F16E1138B22F2BC4EA272E8DE209F1D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722264, "uuid": "f5bd01c6-de14-4a25-a635-2e3d9738ae23", "value": "3072:LGMEAShR630m3wLQCzv16QOpXODicN0heuYur3Qr0ZkH5nm:LGMEAShRa0m3AeZUu1qH5n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742722264, "uuid": "56b5e4d0-aaf6-406a-a59a-58e069979f43", "value": 164200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722264, "uuid": "2a50739a-0c8a-44d1-b775-2f92a06d5f78", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b40fc53a-07c9-11f0-819a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742722333, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722333, "uuid": "17b69eee-ada6-4677-86f8-202886ab0f8f", "comment": "Malware payload (Mirai)", "value": "d1e36ef78e636b8c6ccf4ac7d2e635e6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722333, "uuid": "4ed0df24-56f1-472c-b9b6-d41d3334155a", "comment": "Malware payload (Mirai)", "value": "edc3727bdbeea2c6bbee75ce8683dc5834253016056ad44a0885b29201b0a64e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722333, "uuid": "51669b45-0a0a-4739-8b42-0e4646cf06f2", "value": "T198F33906730C0E47D1632EF03B3F27E1D3AFA99121E4F644651FAA8A9271E365586E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722333, "uuid": "58b5f4c2-acd2-49e9-b2b3-ac829e028292", "value": "1536:42X/xxvxnWnccOHhy05xKsWUnWGBeW42ZR1m7Y2hnMStdTHvA3+hO9Gzz5+U5qCb:xb0cc8nx3nxgDvYonZU3Ysw8Ib13", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742722333, "uuid": "f6675859-32a7-49ef-81c3-277ec58f38fb", "value": 158720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722333, "uuid": "7feda858-4ba3-462d-a9c2-f1e399e36e1e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b624e2ac-07c9-11f0-819a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742722337, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722337, "uuid": "432a4d3d-390d-4ccf-9627-49d3a52865ee", "comment": "Malware payload (Mirai)", "value": "97d359a102e440feb408710bc4e13f90", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722337, "uuid": "fcf0576d-d9de-4e35-a5d6-0d75aa6b1a4d", "comment": "Malware payload (Mirai)", "value": "2189d33545c65e797f86019f7db0f4369ace36f177dbe494b617ad477dbcd214", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722337, "uuid": "a1e8e42c-bd42-4811-8c6a-e439dfa0721d", "value": "T104D36B73C829AF98C924D5B8B4318FF82B53A45081475FBF29A6C2B48087D9DF6857", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722337, "uuid": "731a1904-a994-4ffa-81c3-2bd9b9c25de5", "value": "3072:UvvbATOAG4FWtXX+YkhL2DJNyW1NdYz9kXnrI/:UvvxuFCeVE/1ghkXU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742722337, "uuid": "362a0662-bbe7-4fba-b148-685badc599a4", "value": 142180, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722337, "uuid": "46939994-2e03-44e3-b338-65e05db35080", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b79444b4-07c9-11f0-819a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742722339, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722339, "uuid": "2239a4c7-ba4a-4861-b842-4e8286c9703d", "comment": "Malware payload (Mirai)", "value": "538804d0c00af6b69c55421468e3cfb4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722339, "uuid": "ff263967-1100-4426-abd6-b3b24e4d2aa8", "comment": "Malware payload (Mirai)", "value": "6a20a77f36c1ceb5e2721833d5c1db12cb466131f90e81f41edfa55ebf311501", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722339, "uuid": "56eae64c-362a-40e1-9209-a7176e05ba02", "value": "T12111098C52E2B2169B98CD087153D0C9A101D1C2759A5E67FAFA3E7CEBC470478787", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722339, "uuid": "6adb95a8-5dfc-4037-b908-19b43b71f2ec", "value": "24:xW2WJ5WvRWbwtWJWPWXTWTW/WWI20hWdjWeK:xnIiROcee6Uw6ZhafK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742722339, "uuid": "44b43674-c01b-4c23-92f7-c142abc0fd9f", "value": 865, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722339, "uuid": "8624e8e0-914b-404a-870f-d6a04fa5f86c", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9e0d495-07c9-11f0-819a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742722343, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722343, "uuid": "96dee84e-a0d6-4a6b-b8b6-9e3f3cf8f3cf", "comment": "Malware payload (Mirai)", "value": "5c8707477715a31d632bcea7cd620c49", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722343, "uuid": "25a1f1af-36a4-42a4-8a36-71ded0632092", "comment": "Malware payload (Mirai)", "value": "6d449dc4f26efe052f5d7c3a30131b306132ce6cdfd8d2d9bff84cc9c3dacd3c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722343, "uuid": "3130d0e5-614a-4ad1-834a-d5e3f8ea0fbf", "value": "T100E30841BC854B23C6D612BBFB5E428D772A1768D3EE72079D256F21378785B0E372", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722343, "uuid": "b0a4adeb-9c3d-4b59-b2e5-72852041d939", "value": "3072:v+ZEoEl24l5Fq147Ku1riuPY9Wpet625g:v+Ml50147vZioYueU2q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742722343, "uuid": "119d0c65-aa3a-4303-913b-51c245306bb6", "value": 154688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722343, "uuid": "f3552c94-7d2a-4949-a3c4-1ec1176549c5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bbb40a48-07c9-11f0-819a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742722346, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722346, "uuid": "a2050482-f9bc-47b8-a69d-743ca78de42c", "comment": "Malware payload (Mirai)", "value": "08c9ef45c50bd20ec5d4a2acfc44d786", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722346, "uuid": "5b49ac4c-f631-4911-bf23-0e3be53ff3fe", "comment": "Malware payload (Mirai)", "value": "596166c25a105d48e23ed949ab3e7023cc006a1a7774908520af05351c5ff607", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722346, "uuid": "401c9127-1697-4b95-8ace-d835f3331f9e", "value": "T1DAF31A56B8819F15D5D112BAFE1E428E33131B78E3EE72139D246F207B8A86F0E3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722346, "uuid": "c0e03ac6-0c66-4afc-a737-596b83b30029", "value": "3072:usLm8jpPrP0MCX+xPe+HazKfmOTzjOYuefsH2DF:usLmAPrsXEPeEaofzjOUfsHK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742722346, "uuid": "1e503d3d-ee7d-4e1a-abc1-5593e9f6dbae", "value": 166012, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722346, "uuid": "fe5c237a-f0cb-46b9-92b3-f181fa285e83", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d2e9467-07ca-11f0-819a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742722483, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722483, "uuid": "18c5c173-7214-4b3b-9be3-60dac1c1a370", "comment": "Malware payload (Mirai)", "value": "ce9548af1c823f3074a75ba262b839e3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722483, "uuid": "2521a2db-8338-4cd6-910c-6fcd1c082551", "comment": "Malware payload (Mirai)", "value": "1b6f2a6b3bc2092c343c8ac2d34c0b8e19cf61a36876523335905a1e905f880f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722483, "uuid": "9933ab58-09c4-4391-8263-50c0db3e669c", "value": "T179B349C0B64BC2F5D417453180A7B37FCB32E5258036DA9EDFA99E36CA6390396163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722483, "uuid": "24e5f411-1283-4e2d-8622-defe3ca1ee7e", "value": "1536:2cxS3IynpIVCnQYyeShFdgC1zORAJq4mWqqPVMtPxnp2rPMAtzdd1MnF:2cxvynWVmyJHdgC1O6lPVMtP9cXSF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742722483, "uuid": "ad3568d7-065c-41a9-9f21-cba158f4fca0", "value": 113996, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722483, "uuid": "eb8ed69c-671f-40e9-8a76-8e18543aa622", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1112ee5e-07ca-11f0-819a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742722489, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722489, "uuid": "dbbeaa32-bd39-409a-ac01-7cdf533169f3", "comment": "Malware payload (Mirai)", "value": "290a833cd94bd4d1199edf61401b6372", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722489, "uuid": "bde5562f-4063-4538-9cfb-6af867d8ba9f", "comment": "Malware payload (Mirai)", "value": "1672a095f5124a53824c4f6cf42a41279c9ff3563a24a9708fc715c60e42ddb5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722489, "uuid": "0f97ee49-bd96-4d6d-86d2-53fc1c829566", "value": "T1650429D7F900DDBAFC0EE33B0853091AB130B7A244825B373257796BED3A1991567E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722489, "uuid": "f6100b66-aa38-4c8e-8c4c-24d9189c9d4d", "value": "3072:nc9MbfCzQKU7FN7by2AtMLP5nvz89B6fFCyvVHjbisLK9J3wLytFf:i0Ry2iMLPZvzD9CyZLK9fFf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742722489, "uuid": "52aaee40-a846-4ab7-bb8a-3976d098dd88", "value": 176576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722489, "uuid": "b20387e6-cb87-46dd-946b-984db594829b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "24d9d943-07ca-11f0-819a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742722523, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722523, "uuid": "ded83781-9037-4c5b-ade9-8e80046ff447", "comment": "Malware payload (Mirai)", "value": "7333231cfcc589357c4e8f6b0ac046bd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722523, "uuid": "4c8da399-cc0b-4e1d-bb99-35347aee6ac6", "comment": "Malware payload (Mirai)", "value": "eeaa3a16026a21071a0ee3d9d50d007bd651c415084ae04ac09f8badc510cba1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722523, "uuid": "636e0f21-74f8-48c7-b8d5-31142ce3c450", "value": "T12F043D56E6818B13C4D6177AB6DF424533239B64D3EB33069918AFF43F8679E0E236", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722523, "uuid": "ee552377-e2d5-48fe-b133-4f7581462853", "value": "3072:krK8Fhn5zalcSLaFeitVesUFfijA/IF9QS34ci4qBM/9KVYMHX:krK8F3itLaFeitVesU1iiIPQY4ci4OMG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742722523, "uuid": "a2962278-5f3f-4c7d-bbe5-ad08559ae46c", "value": 173565, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722523, "uuid": "1a75bed0-4944-4ef9-ad53-1d8b0d689961", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3cfeef23-07ca-11f0-819a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742722563, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722563, "uuid": "1fc2b571-3235-42a9-ac77-94f6f1327fcc", "comment": "Malware payload (Mirai)", "value": "d9d5d3d8c121a0f094d184391694e009", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722563, "uuid": "4b3148c5-2596-4160-87dd-ffdd79d122c7", "comment": "Malware payload (Mirai)", "value": "1af342f4d761a80b394f316fe7af7c5ef10d9fb8dd93be6552d9777b6c293f56", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722563, "uuid": "c75bd9ca-3eaf-40e4-84d7-2e6524b8e934", "value": "T1C2116ACE12A6B0118A9CCD40305AD4D9B645CBC130551F8DFD9E6DB5FBC4A08B9B9F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722563, "uuid": "a8c840c6-31f3-43b5-a35c-7566b9d8f66b", "value": "24:YWAlcWJHcWv/cWbmcWVlcW6gcWX1cW+gcWBcWWI20tlcW3cWeuA:Yjlcyci/cOmcolcrgcAcecac6ZtlcgcX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742722563, "uuid": "e34689b5-3078-465e-8688-587cbc4ca341", "value": 1030, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722563, "uuid": "2b6c8ea0-9a72-44ac-968d-8eda792a615f", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40326b08-07ca-11f0-819a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742722569, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722569, "uuid": "9690c12a-ab1c-46ce-8ac1-b0ea7c06655e", "comment": "Malware payload (Mirai)", "value": "18dce3f7bc634a44225abb5ec41fd671", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722569, "uuid": "3090fe42-333f-4678-8a79-3d7db0403c5c", "comment": "Malware payload (Mirai)", "value": "4fcf85baa4843a91b668ab467c6b96d3435ba058270a88248df6b0ed00ef1d55", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722569, "uuid": "74ec3cd0-6742-4458-8e04-c19fbd361c06", "value": "T1C4B36BC1B683E4F5E96600B2203BE7339B33E5394029DE43DB69AD32EC52551EB1A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722569, "uuid": "7eb7f5aa-e0d5-457e-aec8-ba915c5eb312", "value": "1536:j9QhBpSH+V1ZFKzOgW+wWayPuL1AaG1R5qmuesNZwOtmr3DiSCLGOPnnJ:j9QXgH+V1ZF9FzyWRAnRgmtsLturS/J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742722569, "uuid": "6b113284-160b-43f4-b76a-085b5b5cc7c5", "value": 108972, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722569, "uuid": "2317bb80-b1ad-40a6-980d-7df5083152f1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "422f225a-07ca-11f0-819a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742722572, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722572, "uuid": "beba233e-4334-41fe-9af8-1a3468313ff6", "comment": "Malware payload (Mirai)", "value": "42a70c3a5aecdaa43065187874c0f7b9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722572, "uuid": "499d8701-939c-4bbe-a306-4bdb1016fd02", "comment": "Malware payload (Mirai)", "value": "6745dcd40d1713b1600ca407b521ea93d06e6149b22bc7664f86dd642a1f3a69", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722572, "uuid": "555c4d93-ab81-4775-9e9f-336e2147d51f", "value": "T123E30845BC809F23C6D622BBFB5E428D372A1768D3EE71039D256F24379685B0E372", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722572, "uuid": "4407153b-be4b-43e2-8bb9-261f4a4f74f3", "value": "1536:RFhxiTS7isoPuIj/36D+nOS5U2yMQQ4VTxLT/aFzGaKt+Ogr1shUTC7zWtxluswr:RFIhT3j5Us4bLbaFzGbM1e6CPqHdTQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742722572, "uuid": "0022b73e-b26d-46d5-b39c-e140dd7d58d2", "value": 154400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722572, "uuid": "7a85ef1f-96f9-4b15-bcf9-f27cf49c1758", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4665046b-07ca-11f0-819a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742722579, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722579, "uuid": "0c13ed11-261d-49c4-b127-d3204a224662", "comment": "Malware payload (Mirai)", "value": "50692adb2d3c93e18363fa28bff6d6a2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722579, "uuid": "14fdd11f-8455-46b2-81c7-fc700e0c6eca", "comment": "Malware payload (Mirai)", "value": "b8581a1356344ca06b7e7e253182993c85a9262059e7746233042d19e149d794", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722579, "uuid": "3493e65a-6b06-4b9c-9730-d8bf0e5202d0", "value": "T19E14A61E6E328F7DF768873547B78A25975C33D622E1D685E1ACC2005E2029E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722579, "uuid": "1fe69138-4117-4184-a2b1-8a2030c8b3dc", "value": "3072:TpNt7MX0n5jDKDHlPjOgK7cfqiDoxcw8w8U2:TpN2LBjgciaoxdlQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742722579, "uuid": "036e1cb1-6c6a-498e-82c2-00c0b405590c", "value": 205952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722579, "uuid": "651f89a2-b638-4af1-adbc-a90ad9e5ae03", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "48ace904-07ca-11f0-819a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742722583, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722583, "uuid": "5ec668f0-24d4-4be3-8923-811ceada271c", "comment": "Malware payload (Mirai)", "value": "ce3f8985258e149cc22289c50faac938", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722583, "uuid": "aea2cad1-bd72-4089-9fcd-0bf4549a7f83", "comment": "Malware payload (Mirai)", "value": "81e8a6a027ef122e596d7711970ce01f2b74b53be750a13050cc749da6a80b68", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722583, "uuid": "984d45c5-6ec5-4b67-b964-173ac82f38f1", "value": "T1E214D819AB520EFBDCAFCE3706E9070629CC641722A43B3A3674D918F54B54B59E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722583, "uuid": "40c3f1a5-938e-45eb-b4c5-350bc1735fbf", "value": "6144:J4Tc0VDsMHq+16O308PrZsHxRms8iC9hYwvDlM:eTcuDsMHq+sSbPryRRNJC/vDS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742722583, "uuid": "ac43f7d1-b00c-44ee-b40e-0ba6513dbc11", "value": 208448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722583, "uuid": "8ce8aae0-7514-4733-882c-329859f1eb15", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "37547115-07cb-11f0-819a-82aee05be84a", "comment": "Malware payload", "timestamp": 1742722983, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722983, "uuid": "f0ecb5e5-9d95-49ca-831b-886a47e2274e", "comment": "Malware payload", "value": "166e839c7a9d210ddcd54fb534eff45a", "object_relation": "md5", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722983, "uuid": "a9b756d3-3dcc-4c01-b75c-e24db0394cf6", "comment": "Malware payload", "value": "0873636ddd4d9ca39b802674f52da0256d6313906e1319cfc7ad08ef30b066c3", "object_relation": "sha256", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722983, "uuid": "93fc3d9b-5a57-4731-b332-c543a6df9ce2", "value": "T12753E97766623E0D9233480CB8C5B6C87718C453D4075AEDE9BAA62CC3CBDC691727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722983, "uuid": "676a0289-bf45-45cb-9927-98a6c429b367", "value": "768:aA1fho1SnvHgRNv+f5AfpUxnHeob4f1u0eJwO0H+UJF/dduR1X1t1RB1p+dW2sAX:aA1fho1P6n2/uR1X1t1RB1p+dL1N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742722983, "uuid": "1f3b3b49-6409-482e-8052-f5af012068b0", "value": 64433, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722983, "uuid": "c20edd65-09b1-4731-b309-35dcb8d04bfd", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c638c31-07cb-11f0-819a-82aee05be84a", "comment": "Malware payload", "timestamp": 1742723045, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742723045, "uuid": "f643b923-1bf4-40a6-8f52-409961287bdc", "comment": "Malware payload", "value": "0c8ff3034cf9861185c69b07aa21f5cf", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742723045, "uuid": "3247aef3-30dd-42b5-a788-17cdcf3c9072", "comment": "Malware payload", "value": "5b20b59d003fc94a369269ccb8c172a702152edfdb0f74785d50db700cf817fa", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742723045, "uuid": "20e354b3-037f-4eb8-a2e2-935d7b1b18ff", "value": "T19BC109617D944C82423BE1F2D68BB445F728403B20D41760B5FDD946FF91922EAFE7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742723045, "uuid": "76b3025a-e92f-4965-b30f-558dafaf97f5", "value": "96:IPOvlhC5b1lmMA3nDDpfVU10qWin3iFRubMQcmJGJ1:IPOvlo/U9T9fVUOq1MQVJO1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742723045, "uuid": "2bfc9cab-baf1-4253-9f09-f9d44c0e644c", "value": 5925, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742723045, "uuid": "893bb697-1209-419c-9b01-9710f5726d0e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "761dc97e-07cb-11f0-819a-82aee05be84a", "comment": "Malware payload", "timestamp": 1742723088, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742723088, "uuid": "05f34afa-2feb-4ff5-8d01-1508d315bef5", "comment": "Malware payload", "value": "12aed561df82b59ce3813075e154d106", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742723088, "uuid": "fee22970-190e-4727-a2a8-f6371ab3b0ee", "comment": "Malware payload", "value": "7cc0a54d6d8ed34c9b7cde8f9a8f251c154f1d73674b7c49bbb702c7d0e05094", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742723088, "uuid": "ae4f42a8-156b-458e-9926-2cad8b2777bb", "value": "T1E3A512FECD61B293FD0910729DA3538D2E8CDF56A6413DD28748B109E06FD52A7B88", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742723088, "uuid": "e1be7eaf-5bf7-496c-98b8-92059d6dea77", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742723088, "uuid": "5bdcc0a6-74c2-4be3-bf97-bd455b955c46", "value": "49152:F6eoQGx+PnM4HDkfRojcbcRQqTVmuyWKsXpScYI:F6bMn1DkBQRVhdXZSz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742723088, "uuid": "de10f000-9ecf-43bf-8c4f-56e4557e13e9", "value": 2063360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742723088, "uuid": "6feb37a4-d938-4a61-bbf1-ae56490f1c1c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d24855e0-07cb-11f0-819a-82aee05be84a", "comment": "Malware payload", "timestamp": 1742723243, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742723243, "uuid": "0cc2b1fc-9387-4b9e-a2c4-1914dc3e7d59", "comment": "Malware payload", "value": "b57a089e2b22a2ac4b91bb72b735ba32", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false }, { "name": "snojan", "colour": "#e8bdf9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742723243, "uuid": "6d801c6b-d36f-42fa-beec-a6c4c87241b0", "comment": "Malware payload", "value": "e0659adbe5fde6f7d75a1f2a7a5989177552526d7b54f5fdf276d4e6c1e12f1e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false }, { "name": "snojan", "colour": "#e8bdf9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742723243, "uuid": "4b0ad28e-89ae-4366-80fd-c3ca7eb536d6", "value": "T1FA263372368E75E8F882C3F7A8C342720F73A26D95562E12B174D976DB53B143FA01", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742723243, "uuid": "353fc812-01d6-4667-912e-ff726d294e82", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742723243, "uuid": "cf74e8fb-e5be-412a-ab63-1a873c3e7365", "value": "98304:qpT6y57FGjRWr7kOahGxO6AdxO4xCjyLO8lFA1viSQiMnPJROwp2IO1bX:qpTFFGjRWsznD2yL7fAxJQigJAyk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742723243, "uuid": "9982da27-1082-49a9-b145-74ac0e267118", "value": 4694016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742723243, "uuid": "5ff21cae-1992-413b-8c53-22350f633590", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "06fec44c-07cc-11f0-819a-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1742723332, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742723332, "uuid": "34343ffb-4dd9-4ad9-970b-cd9a0d75d66c", "comment": "Malware payload (Amadey)", "value": "0931efd76cfd8274977985a67e52a603", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742723332, "uuid": "96c58cf9-aa4f-418c-87e0-7e60da3b5c4f", "comment": "Malware payload (Amadey)", "value": "2568c69ef3c3d70bb7f3d246ab85f1d65ed1d5f5b2c592b191c22fdf68499d0d", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742723332, "uuid": "10b7bfeb-97f1-4850-b94a-ee26abbc4214", "value": "T163159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742723332, "uuid": "83336a82-f12e-4855-a78a-faf3b7c4f2dd", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742723332, "uuid": "14ec45fd-ad49-4c88-a1dc-e811c390ae20", "value": "24576:6qDEvCTbMWu7rQYlBQcBiT6rprG8a0lu:6TvC/MTQYxsWR7a0l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742723332, "uuid": "8cb06669-8e47-4eb7-9e30-8380ed4c6924", "value": 961024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742723332, "uuid": "cab83882-7f16-416d-8643-fc5f9bfc6b3c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ebc7e084-07cc-11f0-819a-82aee05be84a", "comment": "Malware payload", "timestamp": 1742723715, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742723715, "uuid": "8ed64a8a-01f3-4d61-91e7-dc3e34e55237", "comment": "Malware payload", "value": "b051e3bdb37c18bae33add36d6f4adbe", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742723715, "uuid": "75b68c84-0254-4b39-9864-e91533b7b7cc", "comment": "Malware payload", "value": "5ea28156d1d12e4e6de1b878c05c49258ba9f64e0d97164d344583aa0440699f", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742723715, "uuid": "7a7fd945-aaf3-4852-88a8-f52812fe18c4", "value": "T1A0463344E3751C5DBE5F6070EB420ACFE3F846C57C36A461A739EDD9A0011B84AACD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742723715, "uuid": "e7c129e5-36e3-41f7-9774-2e11610f37ab", "value": "98304:QCKYErFc88k/O5rSv2bwMjXIvwQQ/pClLPshtdAaYk54HX8r9WLZU:0YSc8jGF/bwMjXnQQBMWtdAHBHXKR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742723715, "uuid": "e93fe943-93a9-4598-affc-34a3fecaa1e2", "value": 5606384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742723715, "uuid": "c09de9e0-6e50-479b-9845-5fdbe6769083", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1260f44f-07cd-11f0-819a-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1742723780, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742723780, "uuid": "6fe7a63d-5e22-4692-bfb7-b967594c0ff0", "comment": "Malware payload (ConnectWise)", "value": "92c3cfc9f25013c5d8f2212fcc04c887", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "fakezoom", "colour": "#a84ea8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742723780, "uuid": "b4029bd0-ffb4-411e-91f2-df3e016a522a", "comment": "Malware payload (ConnectWise)", "value": "540c9ae519ed2e7738f6d5b88b29fb7a86ebfce67914691ce17be62a9b228e0a", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "fakezoom", "colour": "#a84ea8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742723780, "uuid": "25617311-4043-4c36-b76e-10234cd243f6", "value": "T12346E111B3DA95B9D4BF063CD87A82699A74BC044712C7EF53D4BD2D2D32BC05A323", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742723780, "uuid": "81e52823-a641-4a55-918d-80d03d96a70b", "value": "9771ee6344923fa220489ab01239bdfd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742723780, "uuid": "6fd8e3b5-b5f3-45a6-a5d7-ad5ebb8b9817", "value": "49152:YEEL5cx5xTkYJkGYYpT0+TFiH7efP8Q1yJJ4ZD1F5z97oL1YbGQ+okRPGHpRPqM8:REs6efPNwJ4t1h0cG5FGJRPxow8O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742723780, "uuid": "bca85677-dc99-4fe6-b77c-c87e01627068", "value": 5621024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742723780, "uuid": "1623ec7f-b419-490f-9ef7-7f3893cadc66", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "132c7992-07cd-11f0-819a-82aee05be84a", "comment": "Malware payload", "timestamp": 1742723781, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742723781, "uuid": "f472ec4f-48e0-4814-b39f-e42dd4005083", "comment": "Malware payload", "value": "cef2557fa6e899bc810340e6448c7bc3", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "fakezoom", "colour": "#a84ea8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742723781, "uuid": "8f160577-8d0e-4d1b-aa0c-208b14c2eb0d", "comment": "Malware payload", "value": "672328b3aa925114e2ecf5971bec35012772c6ee344f4a8ab7286d32708a415b", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "fakezoom", "colour": "#a84ea8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742723781, "uuid": "d215edbd-a30e-42ba-8036-d6d807bb0985", "value": "T1BB8733D4223B2E69E1C9F0336BE516D4ABAC521494A17DF6F3C39C5837301D8EA534", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742723781, "uuid": "1a8e6459-d152-4f30-80e3-bf4a412db1cb", "value": "786432:mlvL8CdhQMQMWnW+ug6TqErTfLrqUVztRQUH1P5GGozmFuvnkhS6ki:YbdTQMWWw6TxXfLrqUvhH1PZFu6S6ki", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742723781, "uuid": "4182b770-6c9b-4f81-8106-b3cb318eebbd", "value": 39579155, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742723781, "uuid": "161db4aa-c80b-4121-9efa-2c1487838146", "value": "application/x-xar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1373eba6-07cd-11f0-819a-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1742723782, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742723782, "uuid": "d7a63568-b934-4039-9161-45ac51f3d7e7", "comment": "Malware payload (ConnectWise)", "value": "4baa06d13429759cd61da9da0738f8aa", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "fakezoom", "colour": "#a84ea8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742723782, "uuid": "314ec176-82ea-4c4d-9130-fee939da0189", "comment": "Malware payload (ConnectWise)", "value": "b6be751aff31bb21243e5915b1d659aeaa30ce8a69df50b7344fda5443f5a0ef", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "fakezoom", "colour": "#a84ea8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742723782, "uuid": "e958d600-ffaa-460c-ac64-3cf55d82b7aa", "value": "T12D46E111B3DA95B9D4BF063CD87A82699A74BC044712C7EF53D4BD2D2D32BC05A323", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742723782, "uuid": "334c4155-f7c6-48e5-a1ba-ec7560123adc", "value": "9771ee6344923fa220489ab01239bdfd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742723782, "uuid": "69d11815-9669-4bac-bd1f-b22ecab63864", "value": "49152:NEEL5cx5xTkYJkGYYpT0+TFiH7efP8Q1yJJ4ZD1F5z97oL1YbGQ+okRPGHpRPqM8:CEs6efPNwJ4t1h0cG5FGJRPxow8O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742723782, "uuid": "5aaf5f85-7e05-4736-8f07-a3eaff8b53a0", "value": 5621360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742723782, "uuid": "73debab2-2b87-4c85-9357-2ab1f0930f30", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13bdaa62-07cd-11f0-819a-82aee05be84a", "comment": "Malware payload", "timestamp": 1742723782, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742723782, "uuid": "5bc6cc61-6573-42f9-a56a-9bdb6fe63e90", "comment": "Malware payload", "value": "368f323b3072864192f90d917ffeda87", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "fakezoom", "colour": "#a84ea8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742723782, "uuid": "bf2ca477-a858-4dad-a30c-d342cb6209bc", "comment": "Malware payload", "value": "7e9f3abb1867e45566b488880c86eda285207fea21c5a4218009d569ad2f5661", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "fakezoom", "colour": "#a84ea8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742723782, "uuid": "9db88610-9a25-4cf3-b651-faf9670264b9", "value": "T16EA7336C61725634EC6077332DEACBA6397DB172B878E5F5F3E35021861BC9880E61", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742723782, "uuid": "77eb3dc4-1fe6-480c-b0e5-abc69f9c6d03", "value": "786432:0LuWvXlTkx8zM+S1FiL7yBZPf9uL/2+xn6fuQmoKEENCdzy15fRVuZCLjf:0LuqlTkEM+WFPDPfYLu+Af3lKEYCdzy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742723782, "uuid": "8ddfed26-43a6-4c88-bd03-64374a00e787", "value": 45214393, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742723782, "uuid": "1c37e152-40e9-4469-a9ee-dd75cfe9f073", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13c61cf1-07cd-11f0-819a-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1742723782, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742723782, "uuid": "31f77e38-7d27-4135-9eb5-78dca48f5999", "comment": "Malware payload (ConnectWise)", "value": "8115c820fc40abb9a7d451dd607ba7dc", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "fakezoom", "colour": "#a84ea8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742723782, "uuid": "47357246-60b1-4d25-b1b2-1eef4d7541eb", "comment": "Malware payload (ConnectWise)", "value": "cc0a63ac38d1d2b353c257fbf25dd9f0e15a95ab7ff58ddb40e1ab53c560769a", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "fakezoom", "colour": "#a84ea8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742723782, "uuid": "311ed5c9-627b-4e48-a8b3-e0a1f21c1306", "value": "T18656F111B3D995B9C46F053CD87A92A99A74BC048312CBFB57D4BD792D32BC04E323", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742723782, "uuid": "d9cc8622-af6f-4978-9d60-4e4bbcad73b9", "value": "9771ee6344923fa220489ab01239bdfd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742723782, "uuid": "d9c15048-c8c2-47d7-a3df-fd09b39d48fd", "value": "98304:jEs6efPNwJ4t1h0cG5FGJRPxow8OOD527BWG:gfefPKWh0cGw0VQBWG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742723782, "uuid": "6833aabc-4d3f-42ff-bef3-b4f0bf90b7e7", "value": 6111744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742723782, "uuid": "accf59a0-0f98-4078-aac8-ed58546be1dd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "48320a5f-07ce-11f0-819a-82aee05be84a", "comment": "Malware payload", "timestamp": 1742724300, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742724300, "uuid": "ebabf0b6-5e25-4c49-93c4-272e360c1c12", "comment": "Malware payload", "value": "001d40d0e1f8ca938b6655c9393dfa52", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742724300, "uuid": "e7333c06-d52a-410e-b94e-3c5cd57f77af", "comment": "Malware payload", "value": "0bd5cdee2aa813d698fff99873ab3ff49c4fa9e93dafe1356b0c08c7d1901594", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742724300, "uuid": "9d81eafa-d479-4b99-a64f-1ad1cad50a9d", "value": "T13E853341AC78EE24ED8C03FE3E0781186D6BF76847C0556AA7A244E45291F9A53DFE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742724300, "uuid": "64fc0abb-98fa-4add-a470-ec60692d8abc", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742724300, "uuid": "12c037d2-8a2a-45f4-b0bc-7b140530db60", "value": "49152:lX768KQcvz2jz6Z2Uo8tSZlustzMBiE36/hNbV6X1kz:lrKQe2SZ2Uyr2iE3KhtV6Xyz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742724300, "uuid": "d26d938e-0c4e-4542-94a8-92e4219f16d9", "value": 1866752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742724300, "uuid": "6ac8fa1e-afdf-419e-8651-10b25e0ef5a4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6eed0a76-07cf-11f0-819a-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1742724794, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742724794, "uuid": "068f8f60-db3b-4dda-852a-74228d93a95e", "comment": "Malware payload (Healer)", "value": "bbc5e8510f0f87fd369badf29211e490", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742724794, "uuid": "a7c6a423-58ca-458f-b551-864e5b8f83e2", "comment": "Malware payload (Healer)", "value": "811b8e1265011c98a5b9e3e083335d2d27f2d124b2fa05b6971a9ba35d29eb27", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742724794, "uuid": "5b4a7328-f017-4229-b56f-108ecfa00de4", "value": "T1288533F206BE42CACAE8EB7F2E1D7549B0777684E6B571324A22678DC40F35525D2C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742724794, "uuid": "695e60e7-97e1-40e8-9697-b0e298c17c07", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742724794, "uuid": "7909d923-83b8-45bd-a1fe-9af08bcf979b", "value": "49152:rQMSnm6zIrQSKQX6yB5F0YxEK5vNgu9Sfb8lHqFOu1o:Cnm2uKsbFDNgjfb8lQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742724794, "uuid": "a99882c6-ab44-487e-9d45-6b1e37a7ba72", "value": 1785856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742724794, "uuid": "cefaaf89-e59c-4ec4-9807-5ae1a261f938", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e486a276-07d0-11f0-819a-82aee05be84a", "comment": "Malware payload (Rhadamanthys)", "timestamp": 1742725421, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742725421, "uuid": "5c6d6da1-91ea-4207-b6cd-4a8129c11d0d", "comment": "Malware payload (Rhadamanthys)", "value": "d93c9f26b0d69dd22cdbc76e3cfea0e5", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Rhadamanthys", "colour": "#f4ae28", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742725421, "uuid": "690485f2-d621-4e21-a501-b704edd3caf7", "comment": "Malware payload (Rhadamanthys)", "value": "e57f307bee3c0b72d9f62f09567ed298041171828fa2993bff97cd1a5780b488", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Rhadamanthys", "colour": "#f4ae28", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742725421, "uuid": "4cb3623f-6f8b-442b-acd7-b12ffa033d5e", "value": "T1ACB4CE0E69BA4D37C2BD1ABB05A59381410FB0905082087FF3DDC96BDE166A38BE57", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742725421, "uuid": "26b3c3f3-d78f-4ef2-9bea-25aaeb940b98", "value": "81dd082c3ea735ad5ba4cf627001ae92", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742725421, "uuid": "3b55f513-af80-4de6-aef7-dd6e1cd53533", "value": "12288:Q5p1UZ32H10rH5ZVZEsh8ZskmY5a4JNXuOwhDx/K:Q5pOZGHOrH5RLG64JNXQ1h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742725421, "uuid": "982438a8-7ff1-4112-afb9-b94ee45ade8d", "value": 506368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742725421, "uuid": "1f59e2af-b802-41f0-8900-c0fba861f57e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2abc8160-07d1-11f0-819a-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1742725539, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742725539, "uuid": "e9c478a8-b8db-43ef-924e-4856936fbe83", "comment": "Malware payload (Amadey)", "value": "644242d88cf382c4b58ce79c0f39469b", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742725539, "uuid": "020db3f9-e2b4-4b11-bd8a-6f4259920c12", "comment": "Malware payload (Amadey)", "value": "127cd0e4e2d1178264eeb84d6a91e1aa6183f172a5998b1ecb6589386499256b", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742725539, "uuid": "fd71acfa-d6f7-44db-aaab-2162d4d199cb", "value": "T1AE46334BFFEDC137C160A3355AD842A22A337B806536775FB343996748B3262B1683", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742725539, "uuid": "d4117727-18e4-4021-bf09-84d4a05ba7fb", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742725539, "uuid": "1f25d22c-72e7-43bb-90d3-5187ef8616c7", "value": "98304:HCwGbc57AsdyIYrOVWKIDsWqaYlrQwc7bv6FjtAiubtgxtme:HCYWsppWHDk7Rj0bCNz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742725539, "uuid": "45ce82b1-e49f-45a5-979b-2e47f5dca033", "value": 5722112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742725539, "uuid": "4b029b51-f5f0-4c73-9ef6-7953f6c6a01f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f726972-07d1-11f0-819a-82aee05be84a", "comment": "Malware payload", "timestamp": 1742725627, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742725627, "uuid": "4f526822-1937-48dc-952a-2f7bb82512ec", "comment": "Malware payload", "value": "35a28d2ef26c89bb2a57f76e4ab68b82", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742725627, "uuid": "f3eac3ae-9bf2-4e9f-9933-dc8995f4d1c0", "comment": "Malware payload", "value": "45aaed8b8eae4a226797be31f5de545214ecae59d829cd5c78442fa9b1989723", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742725627, "uuid": "f65c72a3-43b9-40e0-b799-469dd33e20a4", "value": "T19E2633194DF57208C82A24F00D37BC31FA644CCB664DB93A592A2B34E663754DB7DA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742725627, "uuid": "8fae1a96-7708-4135-a356-cb3a2827f5d0", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742725627, "uuid": "4db99d1f-d0b0-4820-b6a5-abe9cd306f80", "value": "98304:A9cSyxJBCHI6ZM8q27vTTJ9b2j25o61pCIuBVdl7vyfIK:fx3Czxq2DJxu2551MZBVDv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742725627, "uuid": "386e5af3-856f-4203-a55b-0e12e4718aa9", "value": 4539904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742725627, "uuid": "e3a4f564-6a41-4c44-9fa8-99904cc0fa0a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b130a2d4-07d4-11f0-8bf2-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1742727112, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727112, "uuid": "caf14284-c51b-496c-a2de-7d4d9602b4e8", "comment": "Malware payload (Stealc)", "value": "8e694a79f9fec5f092aa96038e9335de", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727112, "uuid": "4ab74225-57c4-43f3-a10b-f1e13250c086", "comment": "Malware payload (Stealc)", "value": "66a917daa3a0f6724f75e14ca6bdbe13f02622f902398b798613fd2359fd6a44", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727112, "uuid": "ba8f2d06-aeb5-488f-be43-09729979d540", "value": "T15746335BABFCC132D8E45BB308B701C21EB43C62687542E72AB948961F1AFB5F9357", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727112, "uuid": "99c38286-bde4-4841-8dae-cae032bbfefe", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727112, "uuid": "85c3e8f2-e9c7-46e7-add2-8d141cbcb381", "value": "98304:qoR/VDPDpw/gTec8pmiYzaFy+1f/fxrujXv9aOzKBfiP0C96LGYVgk/Boa2C3dhY:hpNwuNzanXhuDsrBfQjkGnk/R2gHIv0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742727112, "uuid": "dda9f12d-5307-4c82-878d-d5f498a5774a", "value": 5697536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727112, "uuid": "33b40187-0cb8-4fef-afe3-c797dcdc882c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "240c52e8-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1742727246, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727246, "uuid": "28754d67-d8b4-4f18-b02b-67dfa33f63ba", "comment": "Malware payload (ConnectWise)", "value": "e0beda051efc7003ef43c8bfd6480dfb", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727246, "uuid": "3af287b1-bcf0-40f4-94f1-62c59104da34", "comment": "Malware payload (ConnectWise)", "value": "6e9d28a927fe3966d3aa6d47af3ba10465d3bfe7a73f886f95fdbe295f4de2a0", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727246, "uuid": "382982e7-3f8c-4360-a71d-baba0f1f5cb0", "value": "T135835C13B5D18475E8720E3118B1D9F4993F7E114E648EAB2398827E0F351D1AE3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727246, "uuid": "ed6d0022-b54f-4101-979d-20c5232e3b4e", "value": "7631a79a9071099fa4803e1c4c5df207", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727246, "uuid": "ed9521ee-830d-42ea-8af8-62abd510751f", "value": "1536:bazWlKzJVcNp++yQNS6xNNCT2l8NE8llbpTaCJRpsWr6cdaQTJSvYY27QkPx3G:pFNpo6rIKlUE8fbkqRfbaQlaYY2Lx3G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742727246, "uuid": "bad4612e-fbae-4d32-8729-36667c045d01", "value": 86288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727246, "uuid": "a211738c-32a8-416a-8a39-9a4ac5b4fd56", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25292d1e-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1742727248, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727248, "uuid": "b146acfe-06e8-4c62-a87a-98cbc5d9c524", "comment": "Malware payload (ConnectWise)", "value": "6a4652cb6586cdd6b80d1e942ac534cd", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727248, "uuid": "780b1417-b7a1-4808-bc8a-869cce5a9a21", "comment": "Malware payload (ConnectWise)", "value": "4031c3749b29fbe052fef0ab1abdcf28fec83cf6bec8edceb4c3956ba75e4f1b", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727248, "uuid": "3f29b012-837e-45ef-9867-f11259506353", "value": "T15B836C13B5D18475E8720E3118B1D9F4993F7E114E648EAB2398827E0F351D1AE3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727248, "uuid": "8d8ce0fd-a519-49fb-8fda-5c9cc6bda9bd", "value": "7631a79a9071099fa4803e1c4c5df207", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727248, "uuid": "64fafa55-57fc-4e40-9b24-f8c711fc9cba", "value": "1536:bazWlKzJVcNp++yQNS6xNNCT2l8NE8llbpTaCJRpsWr6cdaQTJSvYY27QkPx3B:pFNpo6rIKlUE8fbkqRfbaQlaYY2Lx3B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742727248, "uuid": "d0916766-73b3-4074-9719-336f8cd28ab4", "value": 86288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727248, "uuid": "a52b2c98-f97c-462e-86a8-9064dcc6475d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "254ed75f-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1742727248, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727248, "uuid": "34ec0b17-c6cb-4742-ba69-ae898dc999ec", "comment": "Malware payload (ConnectWise)", "value": "f6b8da278cdc197cba7d6686217bdc26", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727248, "uuid": "8e3d1825-f51e-4131-984e-5a4d0bab339c", "comment": "Malware payload (ConnectWise)", "value": "6058978cb65e224c5f706a7028552f7825f04bcc96448300fb76ea207eb4f6de", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727248, "uuid": "bdab118f-39f1-45f4-8988-78c0968b6520", "value": "T1B2836C13B5D18475E8720E3118B1D9F4993FBE114E648EAB2398427E0F351D1AE3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727248, "uuid": "e3f90e60-d4e0-481d-a0f8-dabbd64794c7", "value": "7631a79a9071099fa4803e1c4c5df207", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727248, "uuid": "4ac1400c-80e8-4dd7-9986-2b9299abb476", "value": "1536:bazWlKzJVcNp++yQNS6xNNCT2l8NE8llbpTaCJRpsWr6cdaQTJSvYY27QkPx3p:pFNpo6rIKlUE8fbkqRfbaQlaYY2Lx3p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742727248, "uuid": "ae57ad3f-e11a-4e81-9c2d-0b7ba61d6d4f", "value": 86288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727248, "uuid": "c275f252-d7ad-4f7e-897b-99bbafac091c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "255519d1-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1742727248, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727248, "uuid": "db16ca3a-d94f-47a3-949b-7d9f2642ce76", "comment": "Malware payload (ConnectWise)", "value": "d7ad0b0dd28c601514960c903e660bd6", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727248, "uuid": "c65cf1df-271d-4567-a81c-d4979d8f08e3", "comment": "Malware payload (ConnectWise)", "value": "9d77bd2ba1973b71f70a7ce1f7f6387165a7f37aad4d5643f20daddb24a6ee82", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727248, "uuid": "c7ae1380-e011-4816-9b55-604a6f34f7ba", "value": "T1CB836C13B5D18475E8720E3118B1D9F4993FBE114E648EAB2398427E0F351D1AE3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727248, "uuid": "f5f89712-7705-45b9-a8db-6d6d246f1ef7", "value": "7631a79a9071099fa4803e1c4c5df207", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727248, "uuid": "4eb14ede-aacf-4f9e-b888-aa4ee3d1592f", "value": "1536:bazWlKzJVcNp++yQNS6xNNCT2l8NE8llbpTaCJRpsWr6cdaQTJSvYY27QkPx3K:pFNpo6rIKlUE8fbkqRfbaQlaYY2Lx3K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742727248, "uuid": "fb60db90-6c6d-4344-84c7-6bdc097d098a", "value": 86288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727248, "uuid": "fd5ccccc-a326-46ef-92bb-629c56d304e2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2569b0ca-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1742727248, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727248, "uuid": "7711c8e2-de5b-459b-9b4b-64f9dc639314", "comment": "Malware payload (ConnectWise)", "value": "05e06fa45ecc3d55a8e841c624855c0b", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727248, "uuid": "6d7b7314-5839-498c-a1a8-91ae92a1eab1", "comment": "Malware payload (ConnectWise)", "value": "ce393c4158264cfc839fba363439cbf9a8b09d74c491686390bc58f68c3b3668", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727248, "uuid": "e20e2b27-c1fd-43c3-9c71-74781625bed8", "value": "T1BF836C43B5D18876E9720E3118B1D9B4593F7E110E648EAF7398422E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727248, "uuid": "aa336079-cb57-40aa-9bf4-bcbba6377a1a", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727248, "uuid": "8c527854-dae1-454a-8f9a-1e4abc86b5d0", "value": "1536:RoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYt7bJa:LenkyfPAwiMq0RqRfbaWZJYYtRa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742727248, "uuid": "657e5422-6d22-41e4-9f2e-d48b83645b57", "value": 83216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727248, "uuid": "9eb3aa6e-0627-404a-827f-9d32aa066b38", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c52369c-07d6-11f0-8bf2-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1742727797, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727797, "uuid": "85ff610c-1d65-4bf6-96f6-e50c0aa3ebd1", "comment": "Malware payload (Healer)", "value": "a525c97f23c9d1c2cceebd9af7c83183", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727797, "uuid": "6425c0f0-988f-4b26-8117-cf4d97751375", "comment": "Malware payload (Healer)", "value": "8abb772ec6e5e879e0016139aaf50b0c62088adf40ea4644acf14ded2ef89987", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727797, "uuid": "c3778b6d-c573-4cea-a3ff-325f997130b5", "value": "T1308533E9A8F6E76DE6A0CA30A89BDB823734C139402B158D125F35A69DEC344FC75D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727797, "uuid": "42edff8a-e72b-48c1-9ec6-bb52a02c7342", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727797, "uuid": "d44ba873-e820-4bfa-b0ac-ee834e3cc0c0", "value": "49152:eCW43GNfFkZkqrCXfw7zcNMfKukysxkduCCt:eCW43GQFCXfw7zAOkTx8U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742727797, "uuid": "72a06fc5-9324-4247-b777-745a675f83a8", "value": 1789952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727797, "uuid": "54764c7f-d0f9-4d3a-ad0b-75d0cf2b5896", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1804e707-07d7-11f0-8bf2-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742728085, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742728085, "uuid": "2080981a-2669-4238-b93a-025908baf470", "comment": "Malware payload (Mirai)", "value": "34539878e0690ca404966bbc089aafbc", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742728085, "uuid": "57664ac4-bc7d-4b3a-a460-ff4b5b7304b9", "comment": "Malware payload (Mirai)", "value": "629ce101e1d8030a62f520be07330e22430ca4433f2d7bb1af8ff208be9126db", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742728085, "uuid": "004adbe2-75d7-4144-853f-d3e180e88fcd", "value": "T1BDD2D032922D8E50B3398833DD7619CE17161BFDB0F6303218A4D4AD14E68597AFAF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742728085, "uuid": "b4c96a76-756b-4dec-9feb-3abdc3e4a6b8", "value": "768:IX/zz8QigUIKe+ItNOFAgE+xkPnes3Uozi:IvmIKa7F1/Dzi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742728085, "uuid": "f62d69b1-a7d1-4eed-8e96-410cb6ed3cbb", "value": 28636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742728085, "uuid": "1c06d945-e384-4596-b78f-7c0174637090", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c213016-07d7-11f0-8bf2-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742728145, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742728145, "uuid": "7bac83e0-db59-4205-b172-fc104247b705", "comment": "Malware payload (Mirai)", "value": "598a47dd02119cfb425220bae9350c91", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742728145, "uuid": "e4d84e15-a020-4d4b-8eb2-398ca5e51e3a", "comment": "Malware payload (Mirai)", "value": "eb1d3a18f78becd8d17cf358bae0c2fb98ffcc185197f3eeee9b14ef014de9f9", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742728145, "uuid": "245426db-9c32-4d8a-91a7-df2891322fa1", "value": "T176D2E1FD9B9C28D5CEAD1D7A128D2DB16A5071F0324FAB752B1304CDF664AAF650D8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742728145, "uuid": "53b95f1f-ab1a-4a38-87bc-088ee169a5fc", "value": "768:SO5XJJiweA6zyjPrqvIhrzftx8xqqKZBvh5kdwCW9:S85JiwKzyfrzf388XZdh5LN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742728145, "uuid": "3582a1c4-8a9f-49ea-9349-d0bc5e67e731", "value": 31016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742728145, "uuid": "9ce36f84-0ca6-4b3c-866b-55be7fc3ca05", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c253c7c-07d7-11f0-8bf2-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742728145, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742728145, "uuid": "cf9277a5-cd08-4dbf-9acc-9d567fd50080", "comment": "Malware payload (Mirai)", "value": "3f68612e145ef42a8fae216f1ded4e39", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742728145, "uuid": "923fade7-7c71-4965-b175-e316f494b3db", "comment": "Malware payload (Mirai)", "value": "d91e6bbb3282f66f36a345fe9e1f4e1d6f295a1113fa81b457ab8a31ca3dc4f7", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742728145, "uuid": "a929a9f0-6c6a-47ab-95db-bf44c8d4189f", "value": "T19CD2028B60CF42CADAD4C237D8CF15DE5BA27A70579C976367306453CA8F058E1ACD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742728145, "uuid": "d7a77260-3dfd-4e82-9976-d9646c4b7eaf", "value": "768:GAMkl2mywTPbo69Hq4x9u2yyIqSyyQbNO4KCXL:925wTPE4TyXryzlKC7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742728145, "uuid": "9fb28b05-9941-4b7b-96e9-795245905557", "value": 29384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742728145, "uuid": "3c9ed9e9-6eed-4847-b9c0-09bccd867a4f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c269b96-07d7-11f0-8bf2-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742728145, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742728145, "uuid": "9a5f1f95-87e9-457f-b42e-c21aed504e8d", "comment": "Malware payload (Mirai)", "value": "1127aa9f3861f5d8b5c62fe8ec0de69f", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742728145, "uuid": "f2c72c92-d44c-46ae-b9cb-4528b19d8b29", "comment": "Malware payload (Mirai)", "value": "bfbb821385ff41c0f699607eaed0ac9a7374370e876e0b38decc29191f89575b", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742728145, "uuid": "e0eb731d-54fc-4024-a2e5-43f07da387b7", "value": "T13AD2D0B8760008ECC69AD8B442CA13A21F252B92F2827C5E2D58F677DD586BC7543B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742728145, "uuid": "88fca2d5-b490-4ccf-b92d-92483126cfdd", "value": "768:EstFlWym+fp75z7aq00Pknm4hHrasexLqZSaIdJgGlzDpbuR1J9:7t/WSBaq7knrasCsI3VJur", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742728145, "uuid": "ef07973b-b517-4ff2-9915-1096b9fa583a", "value": 29992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742728145, "uuid": "0d864949-054a-45ec-8edb-930e11784c7b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c273519-07d7-11f0-8bf2-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742728145, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742728145, "uuid": "05587d75-14b7-4326-87ca-241e98ff8c4d", "comment": "Malware payload (Mirai)", "value": "5c5594976ba23697c410e1be2b3845d3", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742728145, "uuid": "8c9ad021-e7ff-412e-a539-b37c96395634", "comment": "Malware payload (Mirai)", "value": "10b40ef6ee67fb22cbe03c35b19bf09e2039d4771a95d16d5be2c3fa5447eb13", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742728145, "uuid": "fa149b0e-a9c4-4084-9056-e4f50f15e8f4", "value": "T11082C070EC95C9A0C771047DE67EC283636F13B9D0BB34A7390447A5E14E85DA0FA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742728145, "uuid": "f5914103-15dd-4d4d-ad62-e3595c92a910", "value": "384:yPsPjKwuvug0CV9cjN6Nl13hymdGUop5hta:77/gZNl13s3UozW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742728145, "uuid": "7b601c08-8774-48dd-9dd1-fad2ed9ec538", "value": 17624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742728145, "uuid": "824d3ac1-f3d3-4e61-931c-9510a954ec64", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c2b21fd-07d7-11f0-8bf2-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742728145, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742728145, "uuid": "1a542c88-5fbd-4f3a-bf04-e331786f950f", "comment": "Malware payload (Mirai)", "value": "401b495efa9869dea27da3f8f3378871", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742728145, "uuid": "2f1e01b7-538e-46bf-bfe8-42df5c4511e6", "comment": "Malware payload (Mirai)", "value": "7949bcacfa5e109101323f674f8446883021e14a27399f0bfa474a6858af1e74", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742728145, "uuid": "13ebc720-56e8-4587-8935-15da7ae5cfaa", "value": "T1E3E2E143A551E5B2DE71063B9FBA2ECB9E81BFBCE2FD3012624C46194DF400469F95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742728145, "uuid": "4b7d3490-6020-4fa7-9e15-a1ec5eff693f", "value": "768:c5/XkZJHsUwc2nW13iOVqOPlRgwWDiSmvACVa9q3UELAW:LJH9wc2EEXmvAyPLn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742728145, "uuid": "82058d3b-dc45-46ad-8b8a-7d269c756443", "value": 32800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742728145, "uuid": "df0bcbb5-14d3-46b6-a99d-f671e3bb685f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c2db3db-07d7-11f0-8bf2-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742728145, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742728145, "uuid": "a9287890-e9e7-458f-887c-1b64ece69e76", "comment": "Malware payload (Mirai)", "value": "f8284f514b6ad487a92b1c0703d552a8", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742728145, "uuid": "2248d80c-f033-46c5-a7ee-dc9575258eb7", "comment": "Malware payload (Mirai)", "value": "e1d66b1b928c923215c1ce79d895fe086edb63d347993379122513236d99b2e9", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742728145, "uuid": "faea3273-8190-41bf-8e31-b372519e990f", "value": "T1313302227F8A81334CA62C7269F64842566A5BFCF1AEB0D61078464C7514E9B2DE3B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742728145, "uuid": "3e0b84e7-be2e-4b70-a760-21d9305f7ad6", "value": "1536:sOup5EcrTpTwFSznV/aZ1L2LdCi9/zd2b:sOup5EcrT6FSznV/aZ1L24Wdu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742728145, "uuid": "47b6b22e-01f1-49d5-88be-471f608a40df", "value": 54236, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742728145, "uuid": "8507ddd0-cea3-42f7-8ca7-19899b783167", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c34afe2-07d7-11f0-8bf2-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742728145, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742728145, "uuid": "20d453eb-1806-4ea4-9f62-3d2de0a9caa9", "comment": "Malware payload (Mirai)", "value": "7851753edd9a4ba9f8a3d983962c0be6", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742728145, "uuid": "5c388957-99d2-4ae1-9123-72cd5ead9162", "comment": "Malware payload (Mirai)", "value": "256d593a533d23bb0dc5632f46ec78f3013238b30e9752743ac54e07c22b733e", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742728145, "uuid": "f52f9ad0-957c-40ad-afc8-04d34baf5506", "value": "T1B6D2E119C73E092DF43F01B25D0B46B984F3503D3FBA3AAEA415C29521C6AF9C2694", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742728145, "uuid": "2fe7bc9d-6f35-4a16-9a38-9d95c966a74d", "value": "384:emRTiFy9E8cH0+mT3A/HQtPR3p8+DUfpWo6RusUSjLgV/7WrqRV5VcGhc8mLFwYP:emUoJ13MQXKyyp3IyYLKlELF1w0OsH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742728145, "uuid": "c2bea5e0-3ab8-4292-8213-1601743c1bd7", "value": 28952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742728145, "uuid": "932c5c60-f92a-48c1-a5ef-6f1c9f73b8df", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f8dbae7-07d7-11f0-8bf2-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742728205, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742728205, "uuid": "3f9531dc-44ec-4f6c-b801-5f3946c91563", "comment": "Malware payload (Mirai)", "value": "4a5b9744593a1e2c7ffc5088a4481f5f", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742728205, "uuid": "0d9543f6-e39e-46d5-b280-0745677adf4f", "comment": "Malware payload (Mirai)", "value": "23023b865ce51c4eedd56707c5ca7af36e5a6e3c721ddd2606db15bee813f38a", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742728205, "uuid": "abe7930e-302e-40c7-93cc-860aaba3293a", "value": "T1335163E5242308B1FD67642333B4442870CAD5C72EE31E14D8FE74BB489EEA965CA7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742728205, "uuid": "9c10091f-df41-4029-a600-d06fd675a314", "value": "24:vbf/EhiLxiLn9GiLFiLAuhiLHKtQiLkEUiLnXuiLniaiLn6q+9iLnEGiLRFiLSLq:vbfVu3q4qt3keVQoi+g7Xbbis", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742728205, "uuid": "56fc1891-e54f-43c7-aecc-dba30692a5f3", "value": 2940, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742728205, "uuid": "66208fa0-4a7f-4b6b-b29f-c805f0b1c367", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f9096c1-07d7-11f0-8bf2-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742728205, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742728205, "uuid": "c090a9d9-a3a6-43bb-9939-e3d5a7c128ae", "comment": "Malware payload (Mirai)", "value": "22834e5a7f735f91e6a4287270738076", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742728205, "uuid": "9b8140dd-0887-476c-a059-0ae5195dd9da", "comment": "Malware payload (Mirai)", "value": "e23ffbd31fb401b2b403a0c2ddf088b3bf51c43ef6666500b344c0b0965a0256", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742728205, "uuid": "072e7aa9-9ffa-4aa0-998e-a1ddecd42eb5", "value": "T181C2E135298F471EEF15733BE26F459553FA3A810B12DB89FA0C4E8E5C51622067E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742728205, "uuid": "4563b4f9-6453-4e96-9a4a-bbd4ce2f8126", "value": "768:fYYdmCv+1xlRd6lX5XdXbJ+4oehjEN5kIES8Wt:fNdme+XlRd6lVdLFoEA5k6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742728205, "uuid": "81c1bc05-c08b-41e2-8a26-53e19c3b6108", "value": 26404, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742728205, "uuid": "5a8f9880-b22a-4320-9835-38e02dbffe35", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b8512e22-07dc-11f0-8bf2-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1742730501, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742730501, "uuid": "3110f40e-69d8-45bf-baa6-cbda91d2aa8d", "comment": "Malware payload (Amadey)", "value": "6af8f26440432c18aef68241686530c2", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742730501, "uuid": "20c38f06-bbac-4160-97f3-158f6b46773f", "comment": "Malware payload (Amadey)", "value": "2dbf9937a4c1e187602162e257ddcf5ddd142d4b5f19beb6e5bfdf0321faef6f", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742730501, "uuid": "45cae011-410f-4910-9938-31fe24906949", "value": "T1E7159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742730501, "uuid": "cb1bd7c3-a9d8-4d36-8516-f4dc672c1ece", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742730501, "uuid": "8497aa35-4b55-480a-942e-1ab85ab92564", "value": "24576:1qDEvCTbMWu7rQYlBQcBiT6rprG8a0+u:1TvC/MTQYxsWR7a0+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742730501, "uuid": "81b57bba-a4fc-4d83-bdad-9f76a87e1db9", "value": 961024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742730501, "uuid": "06480c77-97d9-4616-ba39-b420df0b897d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d25ea2a8-07dc-11f0-8bf2-82aee05be84a", "comment": "Malware payload", "timestamp": 1742730545, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742730545, "uuid": "5da8c02a-85c1-43ed-96aa-1ecd3724a97a", "comment": "Malware payload", "value": "e684fda6fe9dada5f22394c34735b962", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742730545, "uuid": "396c3b70-6c6d-4f33-8ee8-1f1cbff06211", "comment": "Malware payload", "value": "41dfe9d297dea0932cbf0ccc8ae45f26ca08b55eb4b1f709ae568bb59927dfd4", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742730545, "uuid": "9f6918b0-85f3-4676-8b0c-4a0f43cfeb12", "value": "T1507201081BE1C334E6B38B7598B6E215993B7806DE518FCD0081864824F6625F8A9F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742730545, "uuid": "99f5e44f-458d-4ac1-b975-51cd3b0ef30a", "value": "24:8Ayw/BHYVKVWO+/CWi7WYK/3SlGWeocclccjbqdd79dsrabxJlpl9l:8y5a275iWGXocclccjudJ9AadrL9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742730545, "uuid": "0716fb4e-4f10-4d01-bd90-8277742d10cc", "value": 17130, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742730545, "uuid": "399046cd-4edf-430e-bad6-df8f4ae7efb3", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "65b38007-07dd-11f0-8bf2-82aee05be84a", "comment": "Malware payload (QuasarRAT)", "timestamp": 1742730792, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742730792, "uuid": "6c0fb6f3-7927-4e3a-92a8-4769c3676438", "comment": "Malware payload (QuasarRAT)", "value": "2ec8645293b148428a3ea4e8ab1f417f", "object_relation": "md5", "Tag": [ { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742730792, "uuid": "955da122-e8f8-4d02-ab5d-1fa27df7c08e", "comment": "Malware payload (QuasarRAT)", "value": "22006b2702d76d4d21b0b78b10bd9e0dc69a6b365cd741c346c30ad5b257877c", "object_relation": "sha256", "Tag": [ { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742730792, "uuid": "cc08e558-d73a-4842-b9a9-7ad0e40231e3", "value": "T112E56C0437F85E33E16BD6B3D9B0501267F1F86AF363EB0B6191667E2C53B9048426", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742730792, "uuid": "a9092512-2109-4830-9ec5-42e808d008da", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742730792, "uuid": "8c5a2d31-ed50-4707-9526-46cda828354d", "value": "49152:LvjlL26AaNeWgPhlmVqvMQ7XSKQa5VZoGdNKTHHB72eh2NT:LvZL26AaNeWgPhlmVqkQ7XSKQa5/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742730792, "uuid": "eccee31e-4549-492c-8e44-ceb542b604a8", "value": 3266048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742730792, "uuid": "3813f2b5-fcbd-4445-9f2f-8da06bd7f585", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8398142b-07dd-11f0-8bf2-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1742730842, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742730842, "uuid": "b0f4850e-55d1-44c9-af22-78193bb793be", "comment": "Malware payload (Stealc)", "value": "65975016163e7a69c751cc1e3467b151", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742730842, "uuid": "01a26559-4389-4ded-bd80-e6e63c77d8eb", "comment": "Malware payload (Stealc)", "value": "674a06c21c8e2b61149aaf6a67349020a68b6a831115eaaf4bd3162e15161118", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742730842, "uuid": "6abb07e2-c04a-4b45-80d5-8cfdfe392135", "value": "T15A46339B63E9E03AD4B14B700D71029309353ED592BB8B5B836C7C8E29F32146D767", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742730842, "uuid": "a110e858-8ed2-4bed-adf2-2eed772cf731", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742730842, "uuid": "9e553f08-5f6d-4c27-9be8-6a1483d2f996", "value": "98304:KjR2bNZuZHKU5Q/wlbtSjITjlrQ0bC/YvUC1/CgigJIuFPLX2qejY1ZeQqN0R8V5:KjrZqIQ/0xkfWB/1FiVYwfQS0RORFirh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742730842, "uuid": "3a4a27b5-b33f-4072-be63-f527cf6a8f81", "value": 5855744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742730842, "uuid": "9c0bda01-97c4-4a8e-a933-e2b9e30707e9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "92fd158d-07dd-11f0-8bf2-82aee05be84a", "comment": "Malware payload", "timestamp": 1742730868, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742730868, "uuid": "2fbdfd82-a57c-4a25-88d9-13225c02f2a7", "comment": "Malware payload", "value": "b0c3542bc6978dc7a3f6736175273fc2", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742730868, "uuid": "d5635beb-765d-4425-916d-36b3c85b2d09", "comment": "Malware payload", "value": "c1c32ce4b17fa65146114e4b3923cc68b17acbc56d7d7bbcc9e96f795f3efc9b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742730868, "uuid": "c63ddd65-8b3a-4f09-b1af-0813a14c1cea", "value": "T1182633EA6841F9F4FE9549B2BDBBA7021230B435B84B501A3D96324FC53CF5049629", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742730868, "uuid": "f0fb14ac-2554-49b3-a6c2-167186022dfc", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742730868, "uuid": "6d3a8684-ea37-4736-87ce-a769270290bf", "value": "98304:EXPzkwz52w+aXB6TXd3hJeBtoTMnHCSv2OFbes:ozgrVhJOTe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742730868, "uuid": "db178011-ccb4-4e66-aa7b-c9b8fac6bf99", "value": 4501504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742730868, "uuid": "3409b0de-4afe-4211-97bb-7bd4cc67c197", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1b7d2bca-07de-11f0-8bf2-82aee05be84a", "comment": "Malware payload (RustyStealer)", "timestamp": 1742731097, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742731097, "uuid": "1f1c573c-2cba-4101-8bc5-a7a00c812dbe", "comment": "Malware payload (RustyStealer)", "value": "227089993386e3e04d4e9f3244650c29", "object_relation": "md5", "Tag": [ { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742731097, "uuid": "d1ebc454-a677-47b3-82c0-74f9195e7927", "comment": "Malware payload (RustyStealer)", "value": "6d7a1e9e661de529ae7a6b88ec684a64d810850dc2f6a52eb0388a308a5e2c8b", "object_relation": "sha256", "Tag": [ { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742731097, "uuid": "88bbc944-182e-4b97-bf99-17bbdba866ba", "value": "T174F533272E33AF9CD98B147845BB9BCAD17D84C0D1291E24171DF0F5EDE66202AB2F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742731097, "uuid": "22e15d6a-352e-4ebb-8d65-cb1450f185c6", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742731097, "uuid": "56409d34-955b-4dfe-8af2-d63a22d40049", "value": "98304:4tIMQVRwqJ6OWGnsrv5CufO9c8Cj+UsxnXWqH:4iheq0OjsrBlW9VHUunX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742731097, "uuid": "4f8034be-71ca-4ee9-bdd8-62709dd7ad0f", "value": 3517440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742731097, "uuid": "e1068470-1c1f-43ce-afbf-d248f32f097f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a3488527-07de-11f0-8bf2-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1742731325, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742731325, "uuid": "ba933b84-8f1d-4e3e-83d2-07c53f9345d9", "comment": "Malware payload (Stealc)", "value": "88d74bcd346948ce8e73cb4e2fd9b5d7", "object_relation": "md5", "Tag": [ { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742731325, "uuid": "b9488566-bf68-40fc-a71f-a40061218066", "comment": "Malware payload (Stealc)", "value": "1c2160f106c8fb93c27e28feba6219fa0c868ad7b3b6bdee8fda994433a62b42", "object_relation": "sha256", "Tag": [ { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742731325, "uuid": "24ddc0fa-6319-44d8-9d59-11a8f487fa8c", "value": "T1C68533092F336551D189B875B0B7040FB7E7ABA505974D6C0EA1EE38E5B73482733A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742731325, "uuid": "eff7a549-29c4-4331-aada-f88f31979157", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742731325, "uuid": "1be81e6a-8937-4dbf-af7a-56d520fe9fad", "value": "24576:6dA8tTJHAp/kyc/Yzgh4EbXeFGxSJVNT2saM1wik0hDuz5HE/g9DtXzfTCS4curT:6qoH0cjAeyaSJToMrhKzJv9tsIcWAU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742731325, "uuid": "593d1ccf-98e9-40ae-94e8-55d62568e0dd", "value": 1840640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742731325, "uuid": "bb0bc8bb-1ac3-4d5b-9252-85ede1a4d183", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "168b15e8-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1742731388, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742731388, "uuid": "33c31533-cc85-4327-9e35-8a9cf549294f", "comment": "Malware payload", "value": "c73634570e4a70d7040fabcad0ea2773", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742731388, "uuid": "c293be34-7f8f-4515-adeb-a036fe913ecb", "comment": "Malware payload", "value": "a7576c44f6f25dc87fcc803b0e463e385c13a048169536a7c7a5de804b0891ef", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742731388, "uuid": "5cd6b8cf-feb3-4ad4-a108-203cbbf21949", "value": "FA43124623662AB6857149F0A3FCFF8EE24A3E58CFF55C197C107A28A93136D2CC481C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742731388, "uuid": "9449a62d-4ea7-4b27-b723-ebc55125e809", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyqe:yYI0ARqw1qAEv7UIFM8oJorFquyje", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742731388, "uuid": "7aa06674-e924-4293-abfb-0eb4dcc39f60", "value": 57920, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c6f6080-07df-11f0-8bf2-82aee05be84a", "comment": "Malware payload", "timestamp": 1742731555, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742731555, "uuid": "96d01f3c-09f1-4dca-987f-e74d27617472", "comment": "Malware payload", "value": "fb2b082b6c47a5dedcfa65faef74e263", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742731555, "uuid": "eda0ecdc-2013-4696-a347-e7b4da22a570", "comment": "Malware payload", "value": "44031444498d6dee2ae802952ee248ea53785838aeed197bbb7ff79e6bd05005", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742731555, "uuid": "b7b902ca-327c-41ba-aad6-a3c542650e2c", "value": "T1C19533B69957C36FE5884EB172833A8A36790B5B1847D800D00733BA9A8FD41CDD6E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742731555, "uuid": "3a51743d-3eab-4c82-9765-3a9e93a02935", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742731555, "uuid": "713a0127-3103-4585-b6ad-027d6748ced5", "value": "24576:oewrnXzJYECvjkMkUSoRhR6jlnZ2h7N1sVJat234rWrdtX9cr5chPNhSBvRU:oeMJ93MRSjjlnchjsVJs2ICl2i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742731555, "uuid": "66be8113-27d9-4ae9-a297-0210ad03eea2", "value": 1912832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742731555, "uuid": "68d8c19c-5e04-4953-865b-82c2acfe7992", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a9c77e84-07df-11f0-8bf2-82aee05be84a", "comment": "Malware payload", "timestamp": 1742731765, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742731765, "uuid": "b449fd8c-8c8a-46a5-be8e-28936a7ef729", "comment": "Malware payload", "value": "9dba91fe66ca16ab48bf2555f6c6577c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742731765, "uuid": "36e158b6-cb24-4a38-836a-6d59c985a996", "comment": "Malware payload", "value": "e699148b312924b7ae106a8b08fffacd91d1389dd96922aa34a3bb14b18ef8fa", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742731765, "uuid": "3e39076a-aeed-4b1d-9ee9-31a817ad559b", "value": "T1C9A52274989EB13CE801193820B196F565E6ACEF3EBB134DDD51B62B44C26639390F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742731765, "uuid": "ea3b69d8-8b90-4578-924c-26ff59d34fe1", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742731765, "uuid": "15dd9fbf-d9a1-4f78-97ef-fca41a33a0ce", "value": "49152:BdvVvFIViicF7w4CS1MLUS+UmzWvTWqAGamXm+:BdRyMZF7wLxNGLOal", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742731765, "uuid": "0181e7e0-ccc3-4f8c-ba22-0427a12ec4d4", "value": 2132992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742731765, "uuid": "20e8f476-232d-4f59-9266-d95a2297bc50", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c776ebd-07e0-11f0-8bf2-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742731984, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742731984, "uuid": "a75e7e1b-df9d-4a67-ac14-ea52a2e5c5bb", "comment": "Malware payload (Mirai)", "value": "891f7257228944a4ecb3e2fdd77970a9", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742731984, "uuid": "64a9b553-6817-4c29-b201-7453a87a7950", "comment": "Malware payload (Mirai)", "value": "4c52735364bfe70ccf08ae3c5f28ea3500167b4b54301cc148d1cf36580a004d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742731984, "uuid": "03d61ab1-ca0e-4679-942b-f552b03bfbd6", "value": "T171F34AC7F800DDFAF80AF33748530919B230B7A155920B377297796BEC3A1991967E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742731984, "uuid": "62c1b8ae-4b74-407b-baca-0a00f33dd20f", "value": "3072:1lP6MRyl/PWDgc63DGf3SiA+shX0/8pfX7IQ6VyjbizLAqQxtyL2bLps:2Oyl/PWDgclTA+uX7TIQOLAqGyLA6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742731984, "uuid": "83a14901-397c-4f82-bc3f-9a19d8fdced9", "value": 162028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742731984, "uuid": "133c8314-e914-42a5-8d07-ce488ddd5066", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e26aa45-07e0-11f0-8bf2-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1742732095, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742732095, "uuid": "682d4fb8-55cb-417c-bbc0-7e6af3b7067d", "comment": "Malware payload (CredentialFlusher)", "value": "97a9a1a9a461bef4aacb73f643a0adaa", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742732095, "uuid": "32e56903-53ae-4b49-a1de-e71332efd7ff", "comment": "Malware payload (CredentialFlusher)", "value": "d4ddbbc5b65c3ee1066d133faff7ae89807bd98dd210f347cb29a9ef2f44bbc3", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742732095, "uuid": "4ed9f6f7-2813-4228-87ee-c9cef9e70b76", "value": "T1D3259E027391C062FFAB92334F5AF6515BBC69260123E62F13981D79BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742732095, "uuid": "eed02aaf-2504-461d-9cf0-4c8838739824", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742732095, "uuid": "da82e26b-6e74-40c3-b74a-42e753cca296", "value": "24576:gqDEvCTbMWu7rQYlBQcBiT6rprG8amxWeel:gTvC/MTQYxsWR7amxne", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742732095, "uuid": "4889265a-69fc-46de-9637-7e3a492767e2", "value": 969728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742732095, "uuid": "0f3f60fc-a72f-496c-be6e-25a898b2afdc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18df4012-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1742732296, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742732296, "uuid": "8d217923-1b6d-41e6-a8be-cd97e4cf7073", "comment": "Malware payload", "value": "76e4f1dd6783cd67a39d7f1032d22683", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742732296, "uuid": "8151b32a-897e-4aad-8d7d-1aa1e4aee78d", "comment": "Malware payload", "value": "d973833c8469af8a124a06e4962a7142eab90f20380e9b46515507e5ebad67a7", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742732296, "uuid": "13cf9c4e-7b29-43e3-b6b9-68713b04f6d5", "value": "E0F2F14732953B33E16249F4D7FCAF87A15ABD28DFDE242BA4113A61707325D24CE81A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742732296, "uuid": "d0a238e5-c9cf-4d14-b200-4280cddfe9e3", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghF2:yYI0ARqw1qAEW67UIWi7M8ga", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742732296, "uuid": "cc161e9b-4daf-4879-9504-eb26e09ad938", "value": 37128, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc170407-07e0-11f0-8bf2-82aee05be84a", "comment": "Malware payload", "timestamp": 1742732333, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742732333, "uuid": "63d37485-af9d-4325-996c-1dfa60427e8e", "comment": "Malware payload", "value": "2dd5746c026c3a411830e4ce25939c0c", "object_relation": "md5", "Tag": [ { "name": "cloudflare", "colour": "#74781d", "exportable": true, "hide_tag": false }, { "name": "multirat", "colour": "#bdfc4d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742732333, "uuid": "5bb8985b-439a-4180-a0c4-b8e214e74d36", "comment": "Malware payload", "value": "23b16813b0a25f3aff3e3b45b622aa3082e6d4f881190fc918074ec0d6f1ccc9", "object_relation": "sha256", "Tag": [ { "name": "cloudflare", "colour": "#74781d", "exportable": true, "hide_tag": false }, { "name": "multirat", "colour": "#bdfc4d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742732333, "uuid": "ed50aa6f-76fb-428e-ab2c-be964c190ccc", "value": "T1F11733D393492DB1D1F8E0E429C4492EA602F4594B5AEB5F093C76B4CE97BCE13B60", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742732333, "uuid": "60498066-b729-4e0c-b712-3c3b6857bdaa", "value": "393216:eipDwqXXuWl2Wqywc5+ELqTRFJC/f/SRW9QPws/KrLguTqq:eMDXXuKvCELqFwqYUKrMuTL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742732333, "uuid": "7db71d0d-0c75-4ae7-bcc3-2e8887bac978", "value": 20273528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742732333, "uuid": "3577a65e-7267-459f-9197-f16896f39c85", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d87da672-07e1-11f0-8bf2-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742732702, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742732702, "uuid": "eb55eda0-078b-40ad-aef2-296aff61a833", "comment": "Malware payload (Mirai)", "value": "2f4fdda8bb98e8a5aeff65a4f7f0268b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742732702, "uuid": "394f4832-0c1b-4d78-80fd-10a60be460d9", "comment": "Malware payload (Mirai)", "value": "876fe81c5ab0803920d012b398425f7dc16a258a8de8a54a61fb2ae13426daab", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742732702, "uuid": "8e5433df-2349-46d5-af50-aedc7dac78b3", "value": "T15204881D6E228F7DF668873547B74E34976833D627E1D684E2ACD2105F2028E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742732702, "uuid": "3cf4b278-c454-438a-9f93-60027307522c", "value": "1536:8EVteJhblVozv1AMDmW20gaXHQXGe8QuUPG908TtcGvvn2Ig9/nw:zteE9APW2PaXQXmQuBa5ovn2Ig9/w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742732702, "uuid": "e830662f-d534-4b22-b5c4-70e996f2b087", "value": 179008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742732702, "uuid": "c6a0cdf2-07ea-4ebd-8aaa-1a70c344ca92", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0121f904-07e2-11f0-8bf2-82aee05be84a", "comment": "Malware payload", "timestamp": 1742732771, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742732771, "uuid": "adb4dac1-ae90-46f8-91d7-36c2a7e9b960", "comment": "Malware payload", "value": "b84eb5e40ff906f19f4b0dfb7a7325ec", "object_relation": "md5", "Tag": [ { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742732771, "uuid": "500b1cd9-799b-43fc-bed5-b4dcd58a987a", "comment": "Malware payload", "value": "c36b2a3f1a598f72af19f444ad2cc3e5500bd8135f45b12f0a5277f74563dd2a", "object_relation": "sha256", "Tag": [ { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742732771, "uuid": "20c8aa47-f994-4fdb-ad68-8540dcaa7ddd", "value": "T12A8533280F77271ADF9BC33A09C3B68AE0E7374355767BC76806437EAB81259478E6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742732771, "uuid": "cc4ffb7d-a976-4468-9221-0f13fdd1f20b", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742732771, "uuid": "51c45980-f477-4dd0-8ae0-c59c10193ec8", "value": "49152:MrK8Pk/Tp1QvoSzAaR4Fd35qVGdasvDPjZbfP/O:Me8k/Tp1nSzF4D35pJDjZj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742732771, "uuid": "671d1e8c-abe5-4a9f-975d-e3d090abb285", "value": 1755648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742732771, "uuid": "91c2ddf4-75e7-4eb9-979b-f14749103d2f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c99df9a5-07e3-11f0-8bf2-82aee05be84a", "comment": "Malware payload", "timestamp": 1742733537, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742733537, "uuid": "663db442-13ca-4327-9e70-22cbf9b5449b", "comment": "Malware payload", "value": "399e40cf7dcdc757414e8d07bd5b6498", "object_relation": "md5", "Tag": [ { "name": "GOBackdoor", "colour": "#9A05D4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742733537, "uuid": "72c7f466-351f-4d83-ad8f-6148c94cafb8", "comment": "Malware payload", "value": "fce9b8666eef8bba096315b9ba47acc3d29a3dc973dc277e65a3b0a2b306964e", "object_relation": "sha256", "Tag": [ { "name": "GOBackdoor", "colour": "#9A05D4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742733537, "uuid": "9c49b616-6d96-4710-813a-023ac6d40ec4", "value": "T1E6665B80587380F2F66346B7748182924F589BA2EEC9BDD7C29E6ED524D12875F3E4", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742733537, "uuid": "fbd045de-3527-49b3-a0a7-bcb4db75cc2a", "value": "9cbefe68f395e67356e2a5d8d1b285c0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742733537, "uuid": "c923711f-d4df-414b-85d9-e003d729ce3f", "value": "49152:avQxD/+KfrUdgfvUXAnb47a3cNPSu4wvzn2ZQ/haCEAx3YD1V:hxCKfhUQn9GPSuHvC2/haCEAi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742733537, "uuid": "8ad9a2c2-8638-49cd-869c-a9ebe9f3bd2b", "value": 7000968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742733537, "uuid": "1d5f760f-ba33-42cd-bdd2-e1001e4fa5ca", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18e8a8c7-07e4-11f0-8bf2-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742733670, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742733670, "uuid": "c07422de-3e5d-4d99-98de-58c598050049", "comment": "Malware payload (Mirai)", "value": "04ea9b1b428a04b245e01802534b933d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742733670, "uuid": "a1c93530-e70e-44e9-a890-55cb24127d23", "comment": "Malware payload (Mirai)", "value": "c1eca0f702d57174b148f6ca699b0f71b2da9d60bc0c82ddb4b429e266e74088", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742733670, "uuid": "68ce0fd8-b436-4d32-8362-dee6b70da3fc", "value": "T16313F1A0E0D6CB9CD84AD079DC7D360B8629D5AEED9BC2B3ACD0B0678DD5B6D71301", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742733670, "uuid": "4c159d0a-bd97-4754-a333-bac114cecc13", "value": "768:A1BEx4W4LvXRGjLkGOdodc028q3iRJDUiX74e8srD8Jd0A2nbcuyD7UHQRja:A12uW4LvXdHdo+H3mBX74e8srD8JdWnH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742733670, "uuid": "578c0c31-08df-4ca8-af3e-c37ab35026d1", "value": 43496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742733670, "uuid": "1cdea856-d018-45f0-9c5d-355c5dec9d6d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3556908f-07e4-11f0-8bf2-82aee05be84a", "comment": "Malware payload", "timestamp": 1742733717, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742733717, "uuid": "26597cef-ae2a-4454-a94c-abba3efc1ed9", "comment": "Malware payload", "value": "21789ebcbfca1eb0c6881e6af6216a81", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "GandCrab", "colour": "#a35472", "exportable": true, "hide_tag": false }, { "name": "IOC", "colour": "#cbae74", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#9e80d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742733717, "uuid": "b5ad6482-e4d4-4c34-a4e1-6defdcac7c21", "comment": "Malware payload", "value": "c0d12405d2a5cd6064e6e498d6f5f7fd48c72b2d02f171f20f898a4d2832968c", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "GandCrab", "colour": "#a35472", "exportable": true, "hide_tag": false }, { "name": "IOC", "colour": "#cbae74", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#9e80d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742733717, "uuid": "e1b9ebd2-8401-43b4-9a50-c15d53dd5c4a", "value": "T1C4220907BD8A4060D3D04CF053B6978A8BBE1873279271CBB3B3D59E0B74795C476A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742733717, "uuid": "caf50f59-a075-4b91-85b7-bc860ad93017", "value": "abcf9709e3eeba582adf1cd31d5fae48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742733717, "uuid": "168b0221-ab20-4a24-9832-cb640aea8eea", "value": "192:TalzC3fI+riR+iDs2skJxTNhhthybHo4:Tal231iQos2skBhhyHo4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742733717, "uuid": "b7eea4b4-9f6a-4e27-a7bb-fbc4f7cc282f", "value": 10240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742733717, "uuid": "a936f052-3611-4748-a1ae-87bebc09e937", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c175aa5-07e4-11f0-8bf2-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742733729, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742733729, "uuid": "f0a85c96-7f69-4214-a72d-4b8e8ba17ee4", "comment": "Malware payload (Mirai)", "value": "c4777bafee9a9f5a8f6fd407897ec93b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742733729, "uuid": "6addc119-b6a2-454e-b712-1b8342b246b2", "comment": "Malware payload (Mirai)", "value": "68ed701705f1fc962bf3515a235afcc792b008525a0d72f5f3f9f7ceb7d80f0d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742733729, "uuid": "c58f7a2b-b628-4840-926a-07754ad1edca", "value": "T1AA43F23726671D30BA73193BE7B9A1037259AABCE6F5391025D985487DCF3CE00689", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742733729, "uuid": "ce8e3f42-3372-4c7d-807a-065258e49f77", "value": "768:S9eXNi+8o4i2NP56kBQx7bEUYsEXVi30esw0VXiQUfDLJTPUwBHhXO9q3UELu:uiiRk2QltYhiNsw0VX3UfX5pZzLu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742733729, "uuid": "8c64eeda-9e8f-4fb3-baf9-5607269ead9f", "value": 59116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742733729, "uuid": "b3f00611-c74d-49e9-b7e4-7d9938e793a4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "46fd25f3-07e5-11f0-8bf2-82aee05be84a", "comment": "Malware payload", "timestamp": 1742734176, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742734176, "uuid": "ebdaed97-cc1e-44fa-b11a-b14db4248ba8", "comment": "Malware payload", "value": "3a4fc19c2d7efade6b7c74a3f277899a", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742734176, "uuid": "c97149c4-cd62-4f18-a67f-921464cdf39a", "comment": "Malware payload", "value": "75d5fcc8a7a9c58fc59fd47342db5b59e5fc5ec2be42bc48e3edd454b50793bb", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742734176, "uuid": "d3e02ab4-d554-4a71-b217-17cbb66d9126", "value": "T1C99533533DE18330C065DD3A23DA9ED8C6E8ED634D4345BC669DD6A9FB86334208E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742734176, "uuid": "8fcbf48f-6d2c-405d-a0e5-30fb5f77a0e6", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742734176, "uuid": "00147eef-7425-478a-8c24-2dd7014f4433", "value": "49152:QiNFXNeMryHQuXTuuIVtuhbgA5K+UKLIm0UxAPR:LHr0j5IVWbXN/0UC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742734176, "uuid": "b71fa118-8944-4184-8b83-aa8693d36c3f", "value": 1906176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742734176, "uuid": "d469e53e-3e34-4264-a4ca-c2ba23a29079", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98239e69-07e5-11f0-8bf2-82aee05be84a", "comment": "Malware payload", "timestamp": 1742734312, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742734312, "uuid": "3f4f4f43-0737-4aaf-b985-108c367d5a2b", "comment": "Malware payload", "value": "8e4e39161a98a81af2cb2699bf077532", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742734312, "uuid": "5365e2f0-463a-4526-97a9-6eca824f9f0b", "comment": "Malware payload", "value": "c1488d5c89bf244287f0bccb5c06f32e47f992bb0fcb534bbb442b18b7f25d0b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742734312, "uuid": "9abbcb1f-1171-4082-aea3-bf6550327210", "value": "T12025AE0273D1C062FFAB92334B5AF6515BBC69260123E62F13A81D79BD701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742734312, "uuid": "805807fd-07f5-4db0-bda7-783e6473e446", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742734312, "uuid": "92ba0ef7-690d-4dbc-806c-2799fbc14813", "value": "24576:pqDEvCTbMWu7rQYlBQcBiT6rprG8afTkayY:pTvC/MTQYxsWR7afQay", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742734312, "uuid": "41693a86-8bbc-4a1a-b436-19b8330bb402", "value": 972288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742734312, "uuid": "a6e9788f-91c5-41c1-b794-d4ecf6e2137c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4476aad0-07e6-11f0-8bf2-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742734601, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742734601, "uuid": "5cc63810-e4b3-40f2-adf0-7f7956cf58f4", "comment": "Malware payload (Mirai)", "value": "5eef75a7c56186dcbd885717b0f29ad6", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742734601, "uuid": "cfbfa693-e9be-4836-9b0b-ca944dc8efb3", "comment": "Malware payload (Mirai)", "value": "b5eae4525e66181d6a4c48979b143acbda90d5404e8faecc9cb48fd2e1a7723d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742734601, "uuid": "a7db2589-7b51-4afa-b928-9046377affba", "value": "T1B9330261334E6E716EB50432F900EBC2A2B347DEB06E1E74674017BE9AB99051B703", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742734601, "uuid": "10598dc6-e2de-43a1-ad41-e34fadf95b96", "value": "1536:Ass9OmFy0yqbBaqn0eebZyizVJg43cIWE/ntQZK96nzY:Asbm40yYBRnFoMiz3g43z/ntQZg6nc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742734601, "uuid": "dd3f92cd-9233-42af-b2fa-59a07c81beef", "value": 54640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742734601, "uuid": "4b5c4289-4025-47f0-9575-a310430445d4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "476ce6be-07e7-11f0-8bf2-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1742735036, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742735036, "uuid": "f147f2d6-27cc-44a6-b806-11a47d858f84", "comment": "Malware payload (Stealc)", "value": "cf90361de1f99558d9676f93798ad291", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742735036, "uuid": "f59f3374-e0b2-426b-920d-1c9ceddb3e13", "comment": "Malware payload (Stealc)", "value": "c103995e311f053b966e0958e4b11910394947be4b5f6276f48b251ae2fee096", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742735036, "uuid": "1502f6e6-44ec-4c54-90a1-09fea7d619e7", "value": "T119463312762C54A0DCA62BF89CF547D3223579284B7AC36D384D4E62BC62DF06D31A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742735036, "uuid": "79eac95e-e011-4a80-a573-f232333fa94e", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742735036, "uuid": "70efe509-9669-404d-91ac-98fa24cf723b", "value": "98304:6MjTGYVxdcbL7rOocS+KjkSINNK6B6BLyWQRL7aE1wdl:6MnDjcHxhI2WJ3aE1wd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742735036, "uuid": "77035e1f-9752-4cc7-953c-2f1983887c58", "value": 5848576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742735036, "uuid": "95939531-056d-4fb6-8768-15042456f96f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "654e0cc9-07e7-11f0-8bf2-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1742735086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742735086, "uuid": "ec2c4353-0463-40c8-94d3-81edb7f4f919", "comment": "Malware payload (Amadey)", "value": "8b02a3a09170ce5b58417a40c4365a14", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742735086, "uuid": "d3d21369-6361-4b39-ba32-f9e2fcd7d1ca", "comment": "Malware payload (Amadey)", "value": "1b285ed3c76303cd80e4cc3c6355b45bb88f7fc3805a25de654f5e6ee312a4d0", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742735086, "uuid": "bf5be99b-2446-4813-b1ef-e1d94dd23d31", "value": "T15D159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742735086, "uuid": "bd31ca9b-fcdb-4f4b-8af4-1261699018e9", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742735086, "uuid": "befae38d-5de6-4f11-9e11-b4f3edfbdbc4", "value": "24576:8qDEvCTbMWu7rQYlBQcBiT6rprG8a0Ku:8TvC/MTQYxsWR7a0K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742735086, "uuid": "b22cc139-20f5-4a35-9cd2-47046d285638", "value": 961024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742735086, "uuid": "f7a2bac0-2da7-462c-a854-4756e3cad0a0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a9152a0d-07e8-11f0-8bf2-82aee05be84a", "comment": "Malware payload (RustyStealer)", "timestamp": 1742735629, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742735629, "uuid": "c1cfb0b0-795a-493f-8688-74ea0c3539ff", "comment": "Malware payload (RustyStealer)", "value": "18db262952f516ac9f2f6938d3ac9431", "object_relation": "md5", "Tag": [ { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742735629, "uuid": "174a0e8e-36c4-4d75-9c0b-ba5b142ba6ff", "comment": "Malware payload (RustyStealer)", "value": "31af74e2fba188b3f7c8f94a9f382136098d75fb9e48fd9bf595a814b85aa79c", "object_relation": "sha256", "Tag": [ { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742735629, "uuid": "2513c381-f9f6-4356-a31e-9af78722e08d", "value": "T1D5F5337AD9C1E336C36C1D336B6B2E0AAA380FEFA0E8545399912C70DF37246E5905", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742735629, "uuid": "5bc8e1c6-4e0b-4e4d-839b-15755526b6b4", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742735629, "uuid": "52fe2306-c52a-4e02-86bf-5cf15347c16b", "value": "49152:+jCMBejsDWF90hzS/wJfESzKtcjlWfswUvairvNA2qMP3WKZV4hKy6MV4hjPTU:7MAwDTNJMwKujk0w12qmr40xg4hj7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742735629, "uuid": "7cf17975-1382-479b-a0ee-5e81090815bf", "value": 3489280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742735629, "uuid": "4ae9b58f-3fc0-4e72-9362-81f7329fa480", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ca6cfe9-07e9-11f0-8bf2-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1742736011, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742736011, "uuid": "0a007d3e-5a78-4a28-9207-86d8913feca4", "comment": "Malware payload (Healer)", "value": "ace3aac9c6047d43e868b67371c9ec8e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742736011, "uuid": "a32437fb-9ca1-4cf7-8b76-c3b4032cb308", "comment": "Malware payload (Healer)", "value": "586f164d07ca87c58a22d2659aeed4494fce092def6ad34f871bec858ef71175", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742736011, "uuid": "fe6b37c8-c94e-4f12-bfb4-41b76c3dc5d1", "value": "T10C753311BD8BA0F8D8E1CF3762160D1B7FAC54421768B83D853F9805D573259EB0BA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742736011, "uuid": "95135759-98c0-45b0-a949-f8c17b5c4a7c", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742736011, "uuid": "b37c9ec5-e3cf-41e9-ab35-ed8159b42db1", "value": "49152:L7jFZUaRpnyDXZns7Eyri4zwpMlXyVv2Wnq6b:L7PUafaeleiiVv2g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742736011, "uuid": "50fe6703-3ac9-403f-9c0e-39f72301c6df", "value": 1690112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742736011, "uuid": "f64982d4-7a04-4cdd-8c21-be4081fd28f5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c114ecc0-07e9-11f0-8bf2-82aee05be84a", "comment": "Malware payload", "timestamp": 1742736099, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742736099, "uuid": "9d228817-e009-43bf-9571-61f4b652e890", "comment": "Malware payload", "value": "0974452cf9cb2227c3f2b13c28bd7e22", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742736099, "uuid": "0e03dcd9-46b0-42ed-9f8b-afd6411736c0", "comment": "Malware payload", "value": "4dbf2e2b53aba6f0d0ee1af99d154580b7fd6c3940b52fa6facb5a24fa309c38", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742736099, "uuid": "e6ef0fad-0d19-491b-a993-ad492dad9973", "value": "T102D02B4CFC030CF7F4348CF965E71554D10FA31C6D0562C81192602FA4F4C50A0508", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742736099, "uuid": "909fa31c-0c04-4aab-be74-1e6848fc503f", "value": "6:/VJswFGYj2VYtBLdY7Ys4d0IQXo3FsDKVKhOXqIKa03IKq1I8Hs1IKBKW:/VJH2CpY7Ys4duXjWghsONwHM8W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742736099, "uuid": "b3505105-2791-47b6-8790-566752afdc7b", "value": 269, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742736099, "uuid": "7f3299c0-9f21-4557-ae64-9a0a4fe04da8", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "476b8f3d-07eb-11f0-8bf2-82aee05be84a", "comment": "Malware payload", "timestamp": 1742736754, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742736754, "uuid": "a0ebb330-4acb-4dff-841a-2ec1611a8cbe", "comment": "Malware payload", "value": "63c46c9f6b3196f68f638f00837c2045", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742736754, "uuid": "d3447c37-d19f-451a-b0b4-3eb05f487e07", "comment": "Malware payload", "value": "1d8c40fbd77e954ffe4c15256025bd92c3d44915be10b2dfefe7851428246718", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742736754, "uuid": "237c50c7-9811-43b2-bd38-1775cc024cb4", "value": "T1F0A512C83B55C7A9F67A0F310250665DFD4CF75EC8028BDAE904868EAD20DA9DC6F0", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742736754, "uuid": "734318f8-a488-4837-8946-16c6f387ec72", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742736754, "uuid": "a5778c58-04d4-4baf-b22a-93c7cf451593", "value": "49152:ZAMJA8ohrrVYwdZUNO+VaQ2RwYAKd6OTh37I/G9OaQQ0nci2kb:ZAqARrrVYw3EV7MwYAlOTh37B0dQJk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742736754, "uuid": "d9e20385-33cf-4d68-868c-4c74fe110ed9", "value": 2083840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742736754, "uuid": "e1f3fa6d-09b5-46d4-8c9e-2ca8d592641d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4ca5e2f-07ee-11f0-8bf2-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742738253, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742738253, "uuid": "da599561-7464-4740-8809-f688a24b636f", "comment": "Malware payload (Mirai)", "value": "5f418790885572ba769dedf128ec1d93", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742738253, "uuid": "247d5b2f-fc82-40bb-883e-672558b689b2", "comment": "Malware payload (Mirai)", "value": "51e8f81fbd6493c22e21433be262a4afaf2e3a4f06d8c8e5d1c45c2f0a8ed0c5", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742738253, "uuid": "f6978f53-5a59-43de-b5e8-436bf3d7a4e7", "value": "T10A43028E9205CEFCD710D9F657A50BA05E050C7676824D2E28B6E793CE27A609FC2F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742738253, "uuid": "8ca882f7-4588-449d-8efb-bfb57db96d0c", "value": "1536:lAnSCNZqliMZEIkwelylO17USXiepQVJui:gZq4oBKqwry8QVQi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742738253, "uuid": "29d735ab-0931-41d4-afe4-ef00eb8a171c", "value": 58444, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742738253, "uuid": "7cc2d209-0259-4887-a610-825d17ce8778", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70510bac-07ef-11f0-8bf2-82aee05be84a", "comment": "Malware payload", "timestamp": 1742738541, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742738541, "uuid": "51943d64-76bb-4854-a511-48f6743b943c", "comment": "Malware payload", "value": "8146d35235a3f97cbedd598bf7999204", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742738541, "uuid": "35dae4d8-0ed4-4add-a0d4-bfff32169efc", "comment": "Malware payload", "value": "c64984d0805912a2be8aa66c8d4c1d752c1a0d8f23af9271c0e81c96a36ee599", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742738541, "uuid": "58031929-0a27-459b-8ee6-1af28cbd7c4a", "value": "T11CD02E4CFC0308FBF0348CFA66EB2494D20FA3182E0AA2CC4182102FE4F0C90A0208", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742738541, "uuid": "857cafa0-6d83-4c3b-ba03-e270133b677f", "value": "6:/VJswFGYj2VYtBLdY7Ys4d0IQXo3FsDKVKhOXqIKa03IKq1IEE1IKBKW:/VJH2CpY7Ys4duXjWghsONI08W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742738541, "uuid": "c616d2a1-3300-4545-b734-46b69a1f31e0", "value": 257, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742738541, "uuid": "81326085-08aa-4962-b390-77907622121a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "92ad9530-07ef-11f0-8bf2-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742738598, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742738598, "uuid": "0168f1f3-06d5-4146-a213-f4a24b6e84e3", "comment": "Malware payload (Mirai)", "value": "60b1394f6911153c8e00c3c8131ff8a8", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742738598, "uuid": "e8b9adae-d2b1-4067-a759-d47a47d3b1b3", "comment": "Malware payload (Mirai)", "value": "b3b975934a900255b3a9e3eb66261b186420c43c1d40c0e9464988944985360f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742738598, "uuid": "9c9bcace-475e-4772-be55-dd5c331594a7", "value": "T1B192C034050EA070CE58A234DE7DC2C3A7A9137BE5FD72A56F044E7C9AC5505A7F91", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742738598, "uuid": "8e1e6571-735a-4630-b298-54ebf2eecffb", "value": "384:3b6xzPrHJfWroGzhQDodnUM2UfCtQPc1f0vzPjLIRby+YMMhymdGUop5hVy:3b67fYpaDod7/CtR1faIRm+8s3Uoz7y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742738598, "uuid": "bcd2e147-1266-426f-bdc7-064ce0980a08", "value": 20544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742738598, "uuid": "09ea4821-b85e-4c6b-beaf-3a9421be2c14", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "211071a0-07f2-11f0-8bf2-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742739696, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742739696, "uuid": "32262401-51ba-409a-bd4c-ff6e138bdcd4", "comment": "Malware payload (Mirai)", "value": "42b2d15d32b87dfbab5daf1b76d7ce76", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742739696, "uuid": "caee3c14-7275-4e1d-b7c3-ccc96e5237a0", "comment": "Malware payload (Mirai)", "value": "131f936760e0d6bd8a91765fdf63bc55a668f77e05e86ba29e14ae265118c037", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742739696, "uuid": "7ef831b5-2092-4a02-9514-05fadb2782f6", "value": "T180C37C73CC256E69D664D1B8B070CFB81F53A52481875FBE56AAC2B48047D8DFA093", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742739696, "uuid": "60cd33d9-491c-40e9-becf-397a35a6070b", "value": "1536:SaChwt50KbR+qmDVzLC3NKyzVghkeAYUH0fWH8UWs63Q7Ckjcm6l61d6VXW:SPhEdvmDV/KUy5epGWWHuB3y3640X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742739696, "uuid": "88012003-d5bc-43e9-adab-bcce659088db", "value": 127760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742739696, "uuid": "2698cd05-a700-40bf-a0ee-4b42f2156b62", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8992e0a9-07f2-11f0-8bf2-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1742739872, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742739872, "uuid": "30a7e029-1776-46bd-a470-862727b44e93", "comment": "Malware payload (Amadey)", "value": "31f4908d2b81eb42f86a4658f56dd8a0", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742739872, "uuid": "20ef92ff-0365-4e65-9a8f-1fc7f55f6fdd", "comment": "Malware payload (Amadey)", "value": "6b5dbb103139dc4b70537010a43e4879c43884dc301a4a6d74e8c1b076e99837", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742739872, "uuid": "555c53ae-72cf-4326-8e04-f019c056920e", "value": "T12F159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742739872, "uuid": "232ef280-2251-433a-aca2-61e2edaebc1a", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742739872, "uuid": "173a8de8-b3ef-4ccc-b11b-86948f47ece4", "value": "24576:uqDEvCTbMWu7rQYlBQcBiT6rprG8a0bu:uTvC/MTQYxsWR7a0b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742739872, "uuid": "08e5f129-65e0-4a57-ab1c-e03d14d6e3d6", "value": 961024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742739872, "uuid": "8336cc90-1a7f-42f9-bd52-cab7df8a6d42", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e75e6925-07f3-11f0-8bf2-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1742740458, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742740458, "uuid": "a173c789-9350-447c-86cc-3007db681df4", "comment": "Malware payload (AsyncRAT)", "value": "b1b0643a968964eb5e1325660af77cf4", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "booking", "colour": "#191e8c", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742740458, "uuid": "a4267d2b-5118-4b71-8202-ef3f5fb24488", "comment": "Malware payload (AsyncRAT)", "value": "d7fb43c2298dfaea1d7510a21c13858e1c7e3b19ca3283a36fcb1ff4f21842e6", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "booking", "colour": "#191e8c", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742740458, "uuid": "efe29014-fd29-4ffe-b001-9eefcd576a4f", "value": "T155C0C00D72D4E339118C82C8C7E84C61F0481C44C8BC4AD30B3799B2C120098C3084", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742740458, "uuid": "6f0ae7f2-7b06-4ce6-b42d-a1ccad2b11bb", "value": "3:mKDDGKSSJJFI9IrFhdB4S+cAhg+gC8CL5fAK5eM3LlLXXdOVAclBOhCIsg9H:hSG8qX34H0yTL5fD5eM7lrM+oGBl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742740458, "uuid": "e70e9c76-ba11-4fdf-8c1d-fbc9c20522a9", "value": 177, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742740458, "uuid": "19a95ffd-dfde-49d3-95a0-a98f62eeb265", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33a6d59f-07f4-11f0-8bf2-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742740586, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742740586, "uuid": "59d7db20-196c-47f2-a55e-2df81065395d", "comment": "Malware payload (Mirai)", "value": "23346ecd1cc5cad4847ac8e30cdb0e3f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742740586, "uuid": "4913f299-a8e2-4917-8ad2-08e24f560e1e", "comment": "Malware payload (Mirai)", "value": "c6600d76dc4e2ef2535a5b002fb9620f9fb9c1c4216d65f4ba10e39cf53f3f98", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742740586, "uuid": "d6bd7fef-0f99-4b0f-89e5-4400cdf1b518", "value": "T1254302D19A5A519C99B59963FC3A4B07132827FE41BE31933B27162EFF01684856C0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742740586, "uuid": "c4ed97f8-e077-4c7e-a5be-c116158288d4", "value": "1536:iiIhKf9a4XInErr8pd4c5nX3kPnLrTmazpK0Gmt+EAL:Ta4HP8H46nKLNhDa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742740586, "uuid": "36aac536-f31c-47a2-ae5a-494ca585edb6", "value": 60612, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742740586, "uuid": "0ff9e7c9-4c3d-4743-8ae6-1dda0bb7f62a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee1d1590-07f7-11f0-8bf2-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742742188, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742742188, "uuid": "217ff87b-f653-46c0-aa1d-3a8ec3f2211f", "comment": "Malware payload (Mirai)", "value": "d1cf3e6c9a3b7a0483c50ceee013a1da", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742742188, "uuid": "5ab6f243-c8a6-4e23-94c8-8c5568726929", "comment": "Malware payload (Mirai)", "value": "03b1506c474a6f62f2e2b73ba4995b14da70b27e6d0aaea92638197e94d937c3", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742742188, "uuid": "f96ed2ce-0ea0-4227-9fba-c7ce853fede3", "value": "T177A2D06D25558B0FC7898335314F2D2673A55CB3AF3B8FCD5D206A2822BB1DC4A477", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742742188, "uuid": "4dcd6599-55f1-464e-ae97-35e0d9738377", "value": "384:MqmoNufGrQtUovQYGcQh3C/CVUv+iByBt6cdoofWFY/ivQDnBf7fH/hjzKt:3mlfGrQt71J//CuvlyCtAz7nBf7a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742742188, "uuid": "ad1469eb-a4e2-4655-9912-b769d7a697b2", "value": 22064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742742188, "uuid": "f933a791-7f7e-4832-9783-7f0516aa6083", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b668305-07f9-11f0-8bf2-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1742742801, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742742801, "uuid": "9a0afea5-6a96-4ac4-a835-4c9399407e89", "comment": "Malware payload (Amadey)", "value": "849f96fb7486487c0bd2ea20f6aa12f6", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742742801, "uuid": "23690e7c-4b54-4a53-ae8d-1a82e821ff6c", "comment": "Malware payload (Amadey)", "value": "83cee71a45974f4242c6764be99e77e24148113e9343e5347b0da86dda96c5b3", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742742801, "uuid": "de1910da-0234-4cf3-97a4-8bde665f1558", "value": "T130463307ABE84414F4F6233092FA42C75B7E7FB145EC8A7B275A4F2D0971A1435B42", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742742801, "uuid": "b97c3e0e-9f16-481e-a7dc-2d65102bbd77", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742742801, "uuid": "46345616-6e49-4e93-92f5-c80b34d98d8e", "value": "98304:HjvwkWIWlRxbdfooeIjn8UafXLYSiiy4NH0WrH2Pj7i68mS8ywcmajPbb:M93ltfJtaf7DH5Hyje1ksP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742742801, "uuid": "afd7c504-ac41-4b61-9eb7-9b64b0013650", "value": 5776896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742742801, "uuid": "76cf42a4-2f3b-40ef-b76b-a9d739b88f5d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d718ccd5-07f9-11f0-8bf2-82aee05be84a", "comment": "Malware payload", "timestamp": 1742743008, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742743008, "uuid": "7157003b-2717-4a4e-8b42-0b9df592ecdf", "comment": "Malware payload", "value": "a38b838486743b7473b4e993ef6f7895", "object_relation": "md5", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742743008, "uuid": "c165aa3a-4a50-4f33-8b29-d10751111f60", "comment": "Malware payload", "value": "843b982f5fe42f642e0f7a3b1c10cddd1bc0e4072e31d6474aff430ef7977960", "object_relation": "sha256", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742743008, "uuid": "3365917b-c572-4d9a-ad69-1da08f4e3a92", "value": "T1AD453BBE71A73549FE624C306FECB624CB57287B8D6BD6F146D1A03069350A2FC868", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742743008, "uuid": "0a6a8208-1d6e-460f-8033-b84185c5dd2c", "value": "d743740f06aa0a325bb5c948f63319ce", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742743008, "uuid": "975c14fb-3db2-408d-aa38-5a99a92bd362", "value": "12288:yNjIp/hT9uYSYtk4IhpvyQa/quIi6RaZZBDN0y9GcWNgRc2waLMTNVOdzT62qobM:yEhUTi8SQayuIEN8u9oNVOVTLr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742743008, "uuid": "d3b3fbf3-8463-4ec7-b73e-a4877619853d", "value": 1218048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742743008, "uuid": "ddd7cabc-7df3-4d05-ae69-3c8c3a67861b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "37b23f10-07ff-11f0-8bf2-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1742745318, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745318, "uuid": "7a1f3492-0798-41a0-9bbe-e2e15c9b06a8", "comment": "Malware payload (AsyncRAT)", "value": "ff51ae1c6c88638b619860f936adef62", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "booking", "colour": "#191e8c", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745318, "uuid": "d17482e1-3b44-4951-91a2-8f07627d00b9", "comment": "Malware payload (AsyncRAT)", "value": "d469bcb5cb4dc1a6d21cb0e2b93af2f267f240ab7a2e6d35d0f8fc72a10c5d75", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "booking", "colour": "#191e8c", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742745318, "uuid": "a58a069d-e617-414c-9186-14050ab5f20b", "value": "T1B9C0C00D53D4E339118C82C8C3B80CE0F0440C44C8BC0AD30637B972C1200D8D3084", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742745318, "uuid": "a29ee6b4-439b-4d8c-b105-e9b05bc2a3fd", "value": "3:mKDDGKSSJJFI9IrFhdB4S+cAhg+gC8CL5fAK5eM3LmKBLOVAclBOhCIsg9H:hSG8qX34H0yTL5fD5eM7mKw+oGBl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742745318, "uuid": "f1ce0cba-5bac-49a2-9e80-75e94b16868a", "value": 176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742745318, "uuid": "56fd198c-50ed-4fa8-85b5-cd6c5a840fa1", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2dbdaa11-0800-11f0-8bf2-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742745730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745730, "uuid": "a7879565-7021-4148-b358-e62458976952", "comment": "Malware payload (Mirai)", "value": "309ce58d45868f5e94cd67ec757cb4bd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745730, "uuid": "fbc71134-5fbc-438c-b8a8-75b5ae0b6086", "comment": "Malware payload (Mirai)", "value": "b674d785b610b33a48d7d9ebbb4b73e57d512ecf93cf74991d96ea660c7613d1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742745730, "uuid": "6726908d-c1f6-4f36-8aff-dbdbebd9249f", "value": "T174A38DDBF34B5590C86286F00BC74BDE3E237251AE27C8E32C1E26B959791DF4A067", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742745730, "uuid": "26b7db32-3593-425c-993a-273349227b52", "value": "1536:dTI4O0URIbl0rTsbkhS+OcOJgJgi/LW/:d028IbarTMkhkcOqJgiq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742745730, "uuid": "87858f0c-a6d9-4ba4-b844-10a32ca451c7", "value": 99608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742745730, "uuid": "2b1ea882-8063-4da7-a5a8-ad480fba0773", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2dbe6680-0800-11f0-8bf2-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742745730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745730, "uuid": "f536175f-0487-4f1e-9fef-c62103320c8e", "comment": "Malware payload (Mirai)", "value": "9a369680a68de910190c97c835de0595", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745730, "uuid": "5abe190d-811d-4919-ac1c-31f7cf634a12", "comment": "Malware payload (Mirai)", "value": "82fe145e52831b7d52335ec0ac788decbe39a5fcb7c38371c1b31bff64889393", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742745730, "uuid": "0910f747-b3f8-44fc-8b34-8871bc521e04", "value": "T1FE534B32BA751D27C4C5A87A71F34325F2F5475A25ACCA1E3DB20E8EBF25A4062532", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742745730, "uuid": "a20048c1-91f7-4f23-97f2-83fbf6c55a39", "value": "768:q5oznq9BdK0DRDT6AwnJvKba4cgcUqF3biogO+lk5V74ly/0Z1ts+IqPV:q5KSBo0DR6fnpll3uFlk5Sts+jV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742745730, "uuid": "2a69cd48-26d4-4ad8-baa9-58d033ea6a87", "value": 62968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742745730, "uuid": "df72a296-06d5-434d-8fff-df53d794be00", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2dbecb9f-0800-11f0-8bf2-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742745730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745730, "uuid": "ca9619cf-81f7-4be1-8423-2983e7736b65", "comment": "Malware payload (Mirai)", "value": "78cea17277cff09c435fa65ba232f796", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745730, "uuid": "2c8abee6-b232-4b90-a4f8-a7eca59100b5", "comment": "Malware payload (Mirai)", "value": "43848dd30ca6f6e93ec859ffbc8cb9dd8705f574fb7ebfa2787abeda91d674d8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742745730, "uuid": "e2311be3-31a5-4684-9efa-c9cce6071b60", "value": "T1EF337D77C43A7D54E14882B4B8648B781BA3E541C2576FBB1799C2BA8043DECFA493", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742745730, "uuid": "f9d1eb78-6e89-44c3-b05c-98696246a882", "value": "768:UaVwt6PpfaPPeyEaxU4KLppDGTdM183ClZu2KItlFaso4TtpwCWAo5nfXvbjII:UaVwt6SPFRVKlFIiKItlIr4jwCWtv3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742745730, "uuid": "1ff6e799-5e01-47da-bb3b-05ebaa4398c2", "value": 51656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742745730, "uuid": "fb0eda03-8d9e-4201-bca8-ebbc2dbbaec0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2dc517cd-0800-11f0-8bf2-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742745730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745730, "uuid": "69458d9b-c292-47f3-a234-659e67a408cf", "comment": "Malware payload (Mirai)", "value": "e6162adecea289010f1a5d76561dda5f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745730, "uuid": "db8c3609-96a9-4a3f-9011-920fdd795a71", "comment": "Malware payload (Mirai)", "value": "c50ae8cce82d9e1eb9f5a0993f852915a489848d8529118c2b972fe9f55e58df", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742745730, "uuid": "b30059cf-8db7-41c7-9858-6b9b92a975bb", "value": "T16C532BEAB901DD7CF81BD77B4853050AF171B35545830F36639BBE6BAC721A84823E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742745730, "uuid": "cb0295c3-edf4-46d4-ab2c-d165809e3627", "value": "1536:U/wpMbilONinIER8H6piOn7h56o0QC6bQoUXes:U/waiO0nIEiDO7h538lXes", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742745730, "uuid": "97c74948-c1c8-49e5-a979-af08201f3026", "value": 64204, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742745730, "uuid": "c6ab7a00-66b5-4342-bb4f-149b3518750c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2de8136f-0800-11f0-8bf2-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742745731, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745731, "uuid": "7d228761-4700-41fc-965c-fc17c9bead10", "comment": "Malware payload (Mirai)", "value": "d9ea67c781436e1622cea76086ec1bc9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745731, "uuid": "5e05e402-50c0-4a18-9f5e-9b422e8372f3", "comment": "Malware payload (Mirai)", "value": "cdcc19eec2ff0e5d6adc583fbad096b2ad524e96a4fd2fa713c57ec76335e38e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742745731, "uuid": "878d7a49-f43c-4b35-8b21-db214ca7f70a", "value": "T127C2E061E252ACD2FF6EDEB05C565FD42BB00F9FE3C9158210EDE3501B4685D2926D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742745731, "uuid": "97b491ab-3e66-4972-bfe0-a7a0f2d49eca", "value": "768:xuN/6uz/egpiH6jEFfnUXMCKWWpv84qzX84uVcqgw09w:xuNS4pidoMBWpX84u+qgw09w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742745731, "uuid": "0d0c5450-01d0-4f5f-bddd-dd8da962b763", "value": 27344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742745731, "uuid": "56af79f4-8827-4db7-952a-44ad20006277", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5066bfd9-0800-11f0-8bf2-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742745789, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745789, "uuid": "f8c3f265-465e-4632-8844-8190c58a92a9", "comment": "Malware payload (Mirai)", "value": "7be047aad03862b336186f2b4f378b74", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745789, "uuid": "fb3e5855-d2e3-4e64-83e0-95e0e5dde295", "comment": "Malware payload (Mirai)", "value": "bdd96f70b8ad52353baa09e1dabfd694eb503b67e011b5d2051252d0a7113b94", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742745789, "uuid": "1a56da07-50b9-437d-8b39-0f29710a8779", "value": "T142C2E158EEDEC48FE668837DD19BA80414B744B8AF537E08DDDC22537C2B271661CA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742745789, "uuid": "4a77c817-15ab-46e5-806f-1e1247707a40", "value": "384:M8QYzk79o52YiuEYaBEdmHgnJDp59+e4yDY3goZhgVSyCIrrYUIs4JGCtjlNUIvP:lY7a27xbAJDtZDY3g8hgMyChQ4JztjVX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742745789, "uuid": "9ad421d1-a20f-48af-9933-ca6f92218885", "value": 27580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742745789, "uuid": "b2a6389e-479c-4daa-9ef8-a4df45c3cde2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "540e530d-ff75-11ef-9f33-82aee05be84a", "comment": "Malware payload", "timestamp": 1742745791, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745791, "uuid": "6dbcacdd-9691-4dda-a1b5-cea3d63c4601", "comment": "Malware payload", "value": "c6063e70d5165d1186696d84a18576b2", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745791, "uuid": "a18807ab-7367-4ec3-8b09-eda63c9d9551", "comment": "Malware payload", "value": "31bbfded45a9815b54db6f95ea71498dc8c18eede71a3a6810bdf5b37ab5f56b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742745791, "uuid": "96b98fe8-7a79-4b7b-b6db-a4a507fd235e", "value": "T128547E15F7A518F9ED67923CC8424902DA72BC5647A5E7CF03E00A9B2F276E09E3E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742745791, "uuid": "1555210f-6867-47df-acfe-576ae1773988", "value": "130fc8026b4bf89fff6e2a7baf60ffea", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742745791, "uuid": "71936982-5761-4f7d-97a0-3eb61b70426d", "value": "3072:bjTaw17mBiuYusL/ZWNLgAlkVQFFpeC/e6PTFsNpN8LCAlSFtkSmjJ53u8mWPowV:Sifus7QniVQFFAC/PFSAGf3mNJ/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742745791, "uuid": "145190f8-6b5e-438e-bf80-81aaa5fe1e96", "value": 288256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742745791, "uuid": "9ad1eab0-3042-40e3-b7a4-96a088570679", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51bf1f1a-0800-11f0-8bf2-82aee05be84a", "comment": "Malware payload (LummaStealer)", "timestamp": 1742745791, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745791, "uuid": "b680c8d5-5bb0-4efa-bbc1-45eae78afbe5", "comment": "Malware payload (LummaStealer)", "value": "d91ad8ab7ba5126a47da411bcd254f25", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745791, "uuid": "a7ccb7f9-78b4-4680-adda-c6bd4c8f970e", "comment": "Malware payload (LummaStealer)", "value": "473f09866ecbc5972a53c7b1d5179f5acbbe3ee9306304914558afce69690e04", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742745791, "uuid": "f4ab028e-8571-4e4d-a7a1-acaa99d8dde0", "value": "T19555333DB8E8DC4EC5151BF681048B1FB53484603FB0DA596D79B286F473E097A216", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742745791, "uuid": "34b4b956-e434-4994-a238-381e28228c47", "value": "71cc5af9daad65e58c6f29c42cdf9201", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742745791, "uuid": "95dddfae-602b-43ea-94ef-51ffb20880be", "value": "24576:oGF8e52dK6o6BaPuePqbWijoS/+9hKn4uGCYuxhCal27IxKiCQribby:oGF8esJiabWijo9Gk+hTA7bQWP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742745791, "uuid": "76e38078-05a7-4f44-8610-fe77300a1c7c", "value": 1305600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742745791, "uuid": "b76d6acd-aa23-4964-8f6f-cf9fc0d7e527", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51c6f5a3-0800-11f0-8bf2-82aee05be84a", "comment": "Malware payload (SalatStealer)", "timestamp": 1742745791, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745791, "uuid": "efa37b99-0de1-4102-9ca2-0e24c827ced0", "comment": "Malware payload (SalatStealer)", "value": "6458162bb12fe032d99795e4301c1c49", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745791, "uuid": "9b079829-f565-4a49-af54-a3377a49678c", "comment": "Malware payload (SalatStealer)", "value": "fdf471649ef052e9a1c5b1f10c7c15f43f6df548e3cad8299ff5317abffb3899", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742745791, "uuid": "f2d4d859-15a5-4ef9-9675-61294d3a61ec", "value": "T122E533385B960BB4EEA4DF7F1F0758450F40ADA004ED645AC24CF799B5332ADBDD82", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742745791, "uuid": "7cff2c2a-9c3c-4570-9183-7ee171196842", "value": "6ed4f5f04d62b18d96b26d6db7c18840", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742745791, "uuid": "4900272d-37fd-41c5-9055-62e06e7381d6", "value": "98304:Ag011QHFHJzHonSPYG3BqEa1vIwrza9OrlbDlj:AgRHNhUSAGIE0ai", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742745791, "uuid": "bf5e864d-8950-45a0-9bad-210a0733d944", "value": 3227136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742745791, "uuid": "e78b831e-5419-46be-8961-e46a489bd953", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51de5a2f-0800-11f0-8bf2-82aee05be84a", "comment": "Malware payload", "timestamp": 1742745791, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745791, "uuid": "c45c0935-0b1e-4ecf-ae34-e269042d3668", "comment": "Malware payload", "value": "646581b8f7cd739388ff14ac9945af65", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745791, "uuid": "ca165597-d7e4-418a-92b3-19ed76844bd1", "comment": "Malware payload", "value": "1a49f52f308de9666e29d33fb38515e453701ce4487fa31ddba04f87b95e6bca", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742745791, "uuid": "e406c20a-e1ec-48e9-a79f-c57581129d6c", "value": "T12D63A77CEAA6ACE0835670D0A36C3F05224F7753A5609F6CFBCE049D1F1E6809BB65", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742745791, "uuid": "bfecaa36-5aaa-4119-9ca8-07df6fcfeb0a", "value": "1536:RrWDFBLpFRUqKSdd5hsnta+WFE1OGXGXzFazjBLund8NTq:RSpsehsnK/u8nWU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742745791, "uuid": "76b98d5e-d703-40b6-8b12-d831d35cab48", "value": 72013, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742745791, "uuid": "45a11d69-b740-4cd9-96d7-fa75765e91d2", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0c26b3ed-0802-11f0-8bf2-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1742746533, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742746533, "uuid": "da58aab4-0943-4070-9d09-fa1e13c9c074", "comment": "Malware payload (Stealc)", "value": "967fbc1c629d5ea12c7a7516254ac035", "object_relation": "md5", "Tag": [ { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742746533, "uuid": "33817824-d2b9-4338-b619-35f6a8909cd9", "comment": "Malware payload (Stealc)", "value": "d5bbf0861c845bdb28d17ac883459ffc6d402c2128b4625e78610fb98cbd5da9", "object_relation": "sha256", "Tag": [ { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742746533, "uuid": "ebca6783-108d-42ca-bdb8-4ea033d6906e", "value": "T19E85335A8CEBEB19C4004F367497E12C7D852FAD0A6926139FDA9A30C3CF781195DE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742746533, "uuid": "fa4db55a-4398-432a-a578-e64d91c9cbd8", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742746533, "uuid": "51f1d9d7-0853-4371-a630-37dafe5acf51", "value": "49152:VDDCz0nSuWeuHFJgxadP2jXt0j2yK21i:VX6YXWeulWw2b23K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742746533, "uuid": "47c3d7b8-1421-4d53-8277-679d8af7495e", "value": 1776640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742746533, "uuid": "c19c4c3d-4fd4-4694-9295-29b8199e4631", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7007715-0807-11f0-8bf2-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742748967, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742748967, "uuid": "c0f95f52-1548-4856-a19c-ca069ce846db", "comment": "Malware payload (Mirai)", "value": "25ddebfc5739c96ed17fb39f517a6330", "object_relation": "md5", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742748967, "uuid": "48ec8188-2a54-4e93-89ce-c6fb6834fc30", "comment": "Malware payload (Mirai)", "value": "cbdb397b8e38a5e2636bef98f06a3c22c86a745a37168257f619021665903747", "object_relation": "sha256", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742748967, "uuid": "cbca23ba-b620-4112-8bb4-9949cf60d554", "value": "T18782761F9290DD39C8C8A3344EDF86385276E0F17B71571B265025B62DC3798AA3AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742748967, "uuid": "f81f2dd5-3c0c-40ec-b852-3d3a9b92d58b", "value": "384:CsmGUn/3PHfXvn/3PHfXvn/3WhZDT63xuUpJyhEm:CSUn/3PHfXvn/3PHfXvn/3IOyhEm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742748967, "uuid": "ef3d714b-0e35-4983-8160-5a7056e3fd32", "value": 17784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742748967, "uuid": "acc015bc-00a7-45c4-ba08-2e4ffe02fa60", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e266856d-0808-11f0-8bf2-82aee05be84a", "comment": "Malware payload (RustyStealer)", "timestamp": 1742749469, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742749469, "uuid": "6b69752f-5e55-4347-83b0-2b1ad03432dc", "comment": "Malware payload (RustyStealer)", "value": "11a657002b048e4ef9ed51cf83675129", "object_relation": "md5", "Tag": [ { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742749469, "uuid": "e1309217-a7a9-44c5-8a28-526c6ba38148", "comment": "Malware payload (RustyStealer)", "value": "ab1a0e507b0de5b038fa7165ce689fdca01ec4760a45f52d2cecefda7b759937", "object_relation": "sha256", "Tag": [ { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742749469, "uuid": "f00c7275-c37d-490a-9cdf-c5c3dddb9684", "value": "T1CFF533BF2AE26249F1B5AFF42176330700319BD9D34C115E606EA4159B73BCA52F1E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742749469, "uuid": "6940397f-c60c-4bb1-92a4-275e68460488", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742749469, "uuid": "7d55db65-b341-4958-a75b-2d8bbaebe16c", "value": "49152:6dGXboTeyU1M0KFkTZyJxhoSYhrlwJVSh3j5zxvaDPI6ySC/lqUAeTTSSM9dhmtf:axN4M0tUJxSN8JIMDPI6e/ZAeTbMrO9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742749469, "uuid": "beb99581-10f9-4237-a196-8ed54508062b", "value": 3462656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742749469, "uuid": "5c053d00-d8ce-44f6-a102-5fde069714db", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0394ee7d-0809-11f0-8bf2-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1742749525, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742749525, "uuid": "2ad90886-3338-49cc-a6a4-13a34c1e91fd", "comment": "Malware payload (CredentialFlusher)", "value": "5a1d67173d0bafc3733f5fe49dc06950", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742749525, "uuid": "ba0cee7d-2c0f-4ef2-9541-9ced84576fc4", "comment": "Malware payload (CredentialFlusher)", "value": "6b14fc25207fae7b741af0f5c4add55867801cfd289a36a5e689d4018f95dae5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742749525, "uuid": "9c136115-7181-48c4-a5b3-7b394576582f", "value": "T13A25AE0273D1C062FF9B92334B5AF6515BBC69260123E61F13A81DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742749525, "uuid": "28f90639-7e85-47fe-b69c-abd96233ba73", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742749525, "uuid": "80ca49fd-53be-4853-958a-b2a5619dd18f", "value": "24576:2qDEvCTbMWu7rQYlBQcBiT6rprG8aFK+P:2TvC/MTQYxsWR7aFK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742749525, "uuid": "198649e0-09e0-4724-8735-a54bd8ec7002", "value": 969728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742749525, "uuid": "44050689-1f74-4d3e-a965-d1338737e7c9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18568e8d-0809-11f0-8bf2-82aee05be84a", "comment": "Malware payload", "timestamp": 1742749560, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742749560, "uuid": "99a9a39c-9aa4-4eb4-9390-28d19e6ef562", "comment": "Malware payload", "value": "e99d33905b4d94630e3f8958909e6c38", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742749560, "uuid": "d57e43df-1649-4ce6-961c-2f16226a017e", "comment": "Malware payload", "value": "2867171af5bbdfe8ea16517244bbbd5bb32246c30b3f74ff4cb756c7164b9858", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742749560, "uuid": "24e3aedf-e922-4349-888f-bf3f923db380", "value": "T185263359B5411026F46281B7BCB42EF50B8856EAF7498B13736F565A36C8FC0F88A4", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742749560, "uuid": "0cfcca41-5e58-41a6-a4f0-22476397fae5", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742749560, "uuid": "b2bbf2c2-3d40-47f6-a934-03624a9d74d1", "value": "98304:q7uZxBlkhETfbEoyP98AGcwpaNMKIfOjPv:q7uTBlkhETfA9wCNG8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742749560, "uuid": "a3a53463-2680-4eeb-8e65-31d5097ef550", "value": 4603904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742749560, "uuid": "96655127-0f5c-4b93-a2a5-2c20327708c9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "411ab9be-0809-11f0-8bf2-82aee05be84a", "comment": "Malware payload (DarkVisionRAT)", "timestamp": 1742749628, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742749628, "uuid": "c1339285-1e81-4b6b-b8fe-eb0a84f60c3a", "comment": "Malware payload (DarkVisionRAT)", "value": "eb3f82a230c97746ad6fc272582ecece", "object_relation": "md5", "Tag": [ { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742749628, "uuid": "84908a01-0267-41db-ac09-327c80528114", "comment": "Malware payload (DarkVisionRAT)", "value": "2fdc0a416cdb38a430a54ea70de97e9c9c5968432e0057725aafdba803f278f2", "object_relation": "sha256", "Tag": [ { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742749628, "uuid": "91b4bfae-6b4b-4572-9d01-b36fa0eaffc9", "value": "T11D553304A7856398F8D1E574004732BE33B5BFF28E990C259C6C773EA9B2C1376A57", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742749628, "uuid": "085c30b5-c0dd-4d1a-917f-514fe716046a", "value": "55347c971789434361ebf2c1c21a714b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742749628, "uuid": "86f2df2e-860a-4dff-9d7d-da0c47c88529", "value": "24576:gaSez3vCRF0IfTNZGkbQjI/z4xcBuVkYExhy2pZxz8vls3suWtAw:gaq9ZGkbCxLE/bl4ds8u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742749628, "uuid": "6d3c7315-bc77-4086-954f-3edb00d69c75", "value": 1331712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742749628, "uuid": "ede01fe9-3cb2-4493-bce2-16622a2ac640", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "413a34f7-0809-11f0-8bf2-82aee05be84a", "comment": "Malware payload (DarkVisionRAT)", "timestamp": 1742749629, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742749629, "uuid": "969ba79c-a0cd-4eef-a1a5-dc1567ed1c4a", "comment": "Malware payload (DarkVisionRAT)", "value": "5e9850567a55510d96b2c8844b536348", "object_relation": "md5", "Tag": [ { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742749629, "uuid": "3a73cf9b-d3e1-4494-84bc-082e494259c8", "comment": "Malware payload (DarkVisionRAT)", "value": "9f4190eb91c5241d0c41a77e1c12fe2dde01e67ef201b8032ada230333e2ae81", "object_relation": "sha256", "Tag": [ { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742749629, "uuid": "d8d9cff5-93d6-4fe9-a5cb-e59b8264fcec", "value": "T15155238E42C89265D86B82F652631A6E77247F740E744E6D38ACFA1CBCF381149737", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742749629, "uuid": "2e3f6e6c-b2e6-42b9-afed-e9c861f6ce0d", "value": "55347c971789434361ebf2c1c21a714b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742749629, "uuid": "f4a78a15-d45c-44dc-a363-4d1264f5c8b1", "value": "24576:z6+5tCBR7Z5TSnxt0hjeF3B4kNGkbQjI/zltV3Qvtz7Hy8/65W+fpt8LJt:GKAb7ZZUxCey0Gkbj3Qvtzby8/6c+pEJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742749629, "uuid": "d8004b09-1276-49a8-adb9-498d3c626398", "value": 1313792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742749629, "uuid": "d58ec429-6685-4ba0-adac-ae314627938d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a651ee5-0809-11f0-8bf2-82aee05be84a", "comment": "Malware payload", "timestamp": 1742749751, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742749751, "uuid": "5c483c9c-bf56-40bc-b8cd-83458678a51b", "comment": "Malware payload", "value": "37c130b37ec3b9b600cb8b447c240b58", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742749751, "uuid": "0e1c79e0-418f-41c5-9ade-9841cbfe9b83", "comment": "Malware payload", "value": "ad62b66aa3da97cd041e2894b11dc09008456f9f64565b47f3f353b165967220", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742749751, "uuid": "59678756-dd33-4c2d-a23e-dc74200e54c5", "value": "T1F4A5231A7437EC1BE8BA34F97BA1F2280C9DF9558C141D44A8D5832FB7A853BE4814", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742749751, "uuid": "cf1224d8-1818-4bb2-af2c-bee7863e4295", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742749751, "uuid": "9886a3c1-8d21-4eab-a6cb-64ea25972f43", "value": "49152:ANWDtXsPTQfdF1rdgmoeV4Y8Cp+JN5auk+ceNyXSbz1Y:ANWRYkreKaNmEPmkyWz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742749751, "uuid": "09b51804-6e3f-4ce8-a772-7fa267524e84", "value": 2092544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742749751, "uuid": "d5b4fcab-e9bf-4a8e-b1cf-6c41ecf22f78", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e51ef37e-0809-11f0-8bf2-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1742749904, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742749904, "uuid": "9ccc262f-385d-4bc2-a6b5-6e799ab80f15", "comment": "Malware payload (Stealc)", "value": "322998d904f7a4f1f606f1f12917ccc8", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742749904, "uuid": "988f2f6a-63c7-40ae-bad9-f6a494adaad2", "comment": "Malware payload (Stealc)", "value": "718201021626992f9e5b4735911503c61e3c844036b43ef407daf56bb71aa29a", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742749904, "uuid": "0ab68c16-890f-49ab-a40d-2db59e18208c", "value": "T1504633136EE430EBDCBDCB31669342CB851BB6C52778113EA78AAD9A462342435713", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742749904, "uuid": "86439bad-0b6f-4cd6-a251-dc78777687f7", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742749904, "uuid": "5453bee9-fea4-401b-8eeb-b2fd72b3e8f6", "value": "98304:xAtXGnPNzTh41c4FenEgeMfrCpPGPjLyowViYKdVZPEIwqu4CRDn35Lq9mWHL:CtXGldFEgeMfGpPG3wVLKzwqudRdqnL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742749904, "uuid": "c82d9985-bacb-4a03-aaa0-99bb342e14db", "value": 5846016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742749904, "uuid": "fb83d96c-679a-4456-8ee5-316c39850969", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ece7d225-0809-11f0-8bf2-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1742749917, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742749917, "uuid": "8cb370f4-33c1-4a3f-a60d-4cb4e6035e6f", "comment": "Malware payload (Stealc)", "value": "1f06f8fa9d46e7975fcdbf3e9e9a47a7", "object_relation": "md5", "Tag": [ { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742749917, "uuid": "1a44f512-d5aa-4739-a315-d3424f2fe813", "comment": "Malware payload (Stealc)", "value": "36d2b556f317a4d33c13dfa0c83a932a99f4217216703f6124c8d4caa1b84fba", "object_relation": "sha256", "Tag": [ { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742749917, "uuid": "01e24d0d-797b-4cc2-9390-40762b0942b6", "value": "T1A18533198FD955A2DB2CC233DC2E485DBB74A48C0F474CF8EAD39636A279F4123494", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742749917, "uuid": "c8c3c817-87d6-4b8d-843a-6078f84e1821", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742749917, "uuid": "c1608a1b-68d8-4d39-9401-673437aca3c5", "value": "49152:htoMG2h5nJrlicXdhs3/WvTrxtpHtXiRCzbrTcRU8Qg9K:xG2h3r8cDEErHpHtSRCXrTcWtg0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742749917, "uuid": "be247139-ccdd-41cf-beb0-d70b5b1ead92", "value": 1827840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742749917, "uuid": "6f587e05-7fd5-4d14-90f3-d64052dc8dcd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2f09a287-080a-11f0-8bf2-82aee05be84a", "comment": "Malware payload", "timestamp": 1742750028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742750028, "uuid": "b869ea03-51f7-4942-be7d-ad2e2dd8b96f", "comment": "Malware payload", "value": "6fbdd5f421ec369cb51c195be696f476", "object_relation": "md5", "Tag": [ { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742750028, "uuid": "8aabaaec-396c-4543-895e-53e30dab7b70", "comment": "Malware payload", "value": "08fe953ecf0fc5e86eeefc5d3ab91db09dbdac9ac6ae7d5348390eb002cdf897", "object_relation": "sha256", "Tag": [ { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742750028, "uuid": "40159a06-5ef4-4ab1-9497-5d2df65acc29", "value": "T1CB853367DE866136DE69EBB0A0632B2673118B33FEE46F12243175B1BD0760DF184E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742750028, "uuid": "a5917826-41f5-4f4b-a60b-b9b809170f23", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742750028, "uuid": "7d2fc82d-bb0f-48f9-80cb-96ebed56b0f6", "value": "49152:hRnPenQszFrHCdPGmpysjJZ0Yq9Nxpz+cEJwai:zP3sNHajKFpz+99i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742750028, "uuid": "bc36b93a-adc5-477f-8ba6-79a72034775e", "value": 1817600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742750028, "uuid": "53ab2dd6-bb74-4d9e-8f8d-4db637a9baea", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "57070e4e-080a-11f0-8bf2-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1742750095, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742750095, "uuid": "971b09b6-9474-4f94-bbd8-43961dfe2cae", "comment": "Malware payload (Healer)", "value": "88869a9174efa020e90311117a5f1a5f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742750095, "uuid": "df373c6d-925e-40f7-ae8b-2c73c631ad91", "comment": "Malware payload (Healer)", "value": "f4d11a4aa0b3f33dc2725b1e0dba101beb834836e58a8cba64ef5f24acac5fdc", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742750095, "uuid": "3f1aa08e-5cdb-4b23-8aed-dc9a42712e9c", "value": "T1048533627DC0ABE4C29431BC33EACE9733C5EB99954BE8E4D01907F1FA52D5897272", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742750095, "uuid": "1422ee23-8056-4825-aa60-01b98d20e8a4", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742750095, "uuid": "553255c2-7652-49d2-9d0e-fae654b89b07", "value": "24576:0+anXNQHQ3PYnMaXw5FlnCAU1oPdKQfrYZpxS/RxNalRfct3yKSnI/8O3Ya6dtTd:GXNz3PQM0wZguPtDYZ2RyRfclyKqq5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742750095, "uuid": "435cebc6-33e1-40c8-802e-dc77c45d46b7", "value": 1758720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742750095, "uuid": "595b5cb2-54c9-411b-8c2c-6c6ed7fb752c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2acfa91-080d-11f0-8bf2-82aee05be84a", "comment": "Malware payload", "timestamp": 1742751537, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742751537, "uuid": "a8de12a0-89d7-4029-9d7f-c35185c92b1b", "comment": "Malware payload", "value": "2248759ed4f2a668080607b1edcdff35", "object_relation": "md5", "Tag": [ { "name": "pw-2025", "colour": "#a9b1ab", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742751537, "uuid": "841ec107-4f01-480d-9644-f7a330fef75f", "comment": "Malware payload", "value": "24a6cd147cdaf9d863633c4e30d935d0046b1062c3054c80c5b49cfbea9cbb11", "object_relation": "sha256", "Tag": [ { "name": "pw-2025", "colour": "#a9b1ab", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742751537, "uuid": "80213920-24a3-46f5-a5d4-d3da7bb8953c", "value": "T11CE423E96993B76F81220F7ABD9E3B4E4212C9093228E761CD84156F7933C9CD4587", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742751537, "uuid": "11ab585e-f173-4d8e-bdeb-99bafe266722", "value": "12288:Ij7TsVdPZQzgJHQaUCAf9oAghNRw9t3FWcp3thbuTzQDjDrkcppdaa:I8sgeaj6SzRE33rKTzQDz3j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742751537, "uuid": "4585f8ed-f78e-4598-896a-d7655e9b544b", "value": 719123, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742751537, "uuid": "8b06b067-e142-43d7-8c06-07530d26e77a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "924570c0-080e-11f0-8bf2-82aee05be84a", "comment": "Malware payload", "timestamp": 1742751912, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742751912, "uuid": "fe75107d-1005-45a6-b614-074c2cf9d135", "comment": "Malware payload", "value": "5b77ba5c663b985ea10e879fefeaa545", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742751912, "uuid": "85c99e98-55d6-4ada-aa30-49de0674a6e7", "comment": "Malware payload", "value": "c959e859bfa25c45cd6981bcb9046852956f48fcd27d23dc51b206709b9a066a", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742751912, "uuid": "0f24c62a-542c-4119-b42f-63ae633abbb9", "value": "T173C302231F04470113E6F44B247DD5BFEB604E1AA51E2187DFE6FA6AC91DF408AA81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742751912, "uuid": "08d06d84-1b42-4bf7-bfe4-bd0ed2103d93", "value": "3072:EuAxrhIMXhgrqZfmbb8mKZTU33xwvwiqKdAV1cmYaz4z/VX8:EuGIghgmZfsDKs3xwiqi0bl8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742751912, "uuid": "be6a155c-0a40-4aff-b6c2-51b8b5ea055b", "value": 122517, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742751912, "uuid": "1b6dc6bb-860a-49dc-ac9e-1b547f163bc4", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a64b3dd2-0811-11f0-8bf2-82aee05be84a", "comment": "Malware payload", "timestamp": 1742753234, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742753234, "uuid": "0689bbba-6bd5-40a4-82a8-55f4523597a2", "comment": "Malware payload", "value": "e7a15b2a2f69c6485d12e61614d7024a", "object_relation": "md5", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742753234, "uuid": "8999a8ef-447a-4d28-bd5a-b4fd3dbef64b", "comment": "Malware payload", "value": "c085704be6ab131eb44a755395ea541e6088515e76bfb5c05917fd3d74346c79", "object_relation": "sha256", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742753234, "uuid": "b2b91a3f-a78f-4dcf-953e-53229386dbfd", "value": "T16CB4234C4908251CB62D7CCF0099E3A399E7D98BCAFC0A18654D89DBE8B9D74B9374", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742753234, "uuid": "1f32ba6a-0c1c-4a6d-bb59-51099885e0f7", "value": "6144:DKkG5m224WgXlNYOXym0oCuNzY5QEHJU2IvRyU3nds3eExmDZVfhPxj8Y3o5WRuU:D2mAXzYOXr7CuUTi2YNMxmHhPaCjH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742753234, "uuid": "826dd612-4ecb-4e6a-bd30-5b1279314338", "value": 498752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742753234, "uuid": "15ba7203-8540-45fb-a993-1bd61505cd14", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "015f398a-0815-11f0-8aea-82aee05be84a", "comment": "Malware payload", "timestamp": 1742754675, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742754675, "uuid": "eb97faf5-63d3-4e91-bffe-d47fcd7ceef6", "comment": "Malware payload", "value": "bec2314ade2b948f28ac9a62db2c1927", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742754675, "uuid": "31eee2ed-2cd6-4bc4-94c4-df69f4093880", "comment": "Malware payload", "value": "9f5c153d5277590d576d15be47d23f4375e3df3966f8595020e6c4d87d23045c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742754675, "uuid": "aefc849c-31a9-4b6a-8457-01a3965a7897", "value": "T160259E027391C062FF9B92334B5AF6515BBC79260123E61F13A81DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742754675, "uuid": "d61e8cac-b1a5-4370-b615-47e0e95901b3", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742754675, "uuid": "3b95c2d7-d694-44cb-8883-8128401e6d80", "value": "24576:sqDEvCTbMWu7rQYlBQcBiT6rprG8aZ1T/:sTvC/MTQYxsWR7aZ9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742754675, "uuid": "aaf6c89d-11f7-4d45-b97a-19ba00bef85c", "value": 968192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742754675, "uuid": "dece6973-e101-4472-bd4f-51c614ed3a59", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3d3fa6be-0815-11f0-8aea-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1742754776, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742754776, "uuid": "11fd2cdf-dca3-4260-a7b9-8e3d8b885944", "comment": "Malware payload (Stealc)", "value": "5090bb3f1376f4955afb3b5d87fbcc4b", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742754776, "uuid": "b212eb1d-fd27-47da-aa5a-1cefe351fcc6", "comment": "Malware payload (Stealc)", "value": "7b71572f82685c35206917f563a8a5ead9b33ee40c18ab8bbeb08ecfd6928427", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742754776, "uuid": "04ed0a31-a837-4de9-ae6d-da2def719550", "value": "T1134633C5E3AC9923C2C47372027349D716A37F214BFE966BB37F4E4D0A72591A5242", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742754776, "uuid": "67d73ab9-5e45-4c46-be49-2902affc7b63", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742754776, "uuid": "f35afd7e-5187-4445-8e0f-7d807eebd320", "value": "98304:rSsIKhEheXilS7KIzNyrj9pJlGxl8UkoKcP8IQBuI3ZMBhEIZmrANcqwTEVjlvTK:5F+wzonjHul8UklBuI3mBhNYrANcfIVO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742754776, "uuid": "6cd55822-9918-4999-ac80-9069dbc4fd60", "value": 5820928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742754776, "uuid": "11d8609e-d83f-42c3-98d0-57a08fff51bc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f301628-0815-11f0-8aea-82aee05be84a", "comment": "Malware payload", "timestamp": 1742754860, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742754860, "uuid": "618b428a-51a7-4c2a-8b69-0c5b68f43006", "comment": "Malware payload", "value": "f95c9823cd8d2d1be9c75795b01796db", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742754860, "uuid": "26ecded2-7e37-4aaf-b100-0bfa56a1084a", "comment": "Malware payload", "value": "e512478de3e53bcaac0c1241512ba83c22e598b5e6df65c256923114f8fa5e9d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742754860, "uuid": "2e94e8a3-1d65-49ba-8d6e-19ea8f9b986e", "value": "T14126332ED293FB3BE02C407670675215D5E98A89CA23B259FA1F20947FB7DBB37910", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742754860, "uuid": "661a59b7-5ccc-4dd2-aa1f-d1173ec5f031", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742754860, "uuid": "2d411ab0-2c1f-425a-b043-aabab0756e47", "value": "49152:4jqyQUQ4oh6QnhPo6GP4nG9sKwa79ClsnqympQoEiNfcc1GNgCUwDYNx8xvLcL:B6+9o6GAnqsKelsqbdcc1GIEYNO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742754860, "uuid": "a384ef22-1852-4015-b77b-782c91e14541", "value": 4511744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742754860, "uuid": "1a8bbe11-34a1-4583-93f7-b8084167f910", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8cd5e962-0815-11f0-8aea-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1742754909, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742754909, "uuid": "ae8bd57d-a839-41f0-b422-303eb6d2d4f3", "comment": "Malware payload (Healer)", "value": "79aeff1392adc1fbb9c4335a27cb94e9", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742754909, "uuid": "93a31c73-f393-4c0f-a3bb-4fb8f9446425", "comment": "Malware payload (Healer)", "value": "e4821a56e3f65120f1e4fd09a4e556aa6bafe9c7aa90354de09e24113d7969e7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742754909, "uuid": "03a0345c-c890-4ac0-a3ff-3625f1e16126", "value": "T1B88533AA16670309DA1E127B5293BEAE6EF6802345CB357F3D0953BCC4BBA2113D05", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742754909, "uuid": "41e20057-8f38-4345-bbca-ee0d32e7d7f8", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742754909, "uuid": "19f80d15-059e-43b5-ac16-754cb6fecc82", "value": "49152:f1qZ9u4eQcN3x7l1cOxDXQHdWShNipm1T:dEA4exh74o2d9IAT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742754909, "uuid": "b623bbae-041c-4e55-9190-a9ab16358057", "value": 1800192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742754909, "uuid": "14d23e22-ae8d-47d9-98fa-ef44cad85da8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fcb0561-0816-11f0-8aea-82aee05be84a", "comment": "Malware payload", "timestamp": 1742755183, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742755183, "uuid": "1e07fc62-bdb4-4e17-ad23-4f1c146f1a16", "comment": "Malware payload", "value": "61f62216dbc7efce0b829dc792aaed43", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742755183, "uuid": "df48e869-3213-4d18-8af8-dc8e0718a48d", "comment": "Malware payload", "value": "67a8655d0a239d32cff7132e5ba13f091b23bc69dc1a210a580d71d4f1890688", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742755183, "uuid": "6c5630ba-3fc7-4272-9751-4dccbca2c465", "value": "T1AC95332F3FC14421C19AA73F3580128B3ACB592E934B35B0BC7544AF5647FA6946EE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742755183, "uuid": "5a576dd0-828f-44f7-9cee-b28b6cac0631", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742755183, "uuid": "1274cfdc-293d-4e1c-aae6-c5a7e5fcf38f", "value": "24576:hzS1qE4nWB71y+SirWQp8zAh4t7oDA4fHhx+gEtSGe5Vk4cFz2lW7+/K3j3ubglZ:hu10W7yvQ95/Dhfb+v8lo4ceX/zSs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742755183, "uuid": "d6355129-cace-4ce4-af03-afdbcaa491f1", "value": 1912832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742755183, "uuid": "1328037e-f9a7-4ec3-af71-8bf538e76ded", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4bd6deb9-0816-11f0-8aea-82aee05be84a", "comment": "Malware payload", "timestamp": 1742755230, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742755230, "uuid": "8192abd3-277f-49f3-b1f4-f2158fe53dce", "comment": "Malware payload", "value": "e80bfbcfc0087cf8802624aab935dff8", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false }, { "name": "snojan", "colour": "#e8bdf9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742755230, "uuid": "6e19bcbc-4e8e-4745-97c2-85f5bf5c3db6", "comment": "Malware payload", "value": "9009fdf5996eab89835feb052047f3ade10e26f28a6667f47e62f021422f14ef", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false }, { "name": "snojan", "colour": "#e8bdf9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742755230, "uuid": "d3d1602b-bcf3-4369-9968-510fba2163ca", "value": "T1FF2633236F286980EC751E30969307FA6EBE659518F20733EDF09EDE8123B543291D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742755230, "uuid": "273cba20-1614-47e6-b10d-4feacd6053f6", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742755230, "uuid": "0f20899b-a80e-4e0d-96dd-e20c8f713ef2", "value": "98304:zgmhPhsJ5X2iobuZV5hBukoPFCQ1rOCF:zvhPhC5miob8uPMQ1C+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742755230, "uuid": "4e4c90d7-5275-46f0-9e16-52d739fab4f6", "value": 4672512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742755230, "uuid": "81b1d068-ae33-41fe-9ede-087ad2131b79", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93aba3c7-0817-11f0-8aea-82aee05be84a", "comment": "Malware payload", "timestamp": 1742755780, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742755780, "uuid": "c871cb54-79e0-4661-9506-85130d38c637", "comment": "Malware payload", "value": "941afbee32563f05c7e339e0aee9cc66", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742755780, "uuid": "b1db2ece-4205-4910-ad1c-67e27488c147", "comment": "Malware payload", "value": "262f438af57a820d73e2f04330c5f1b3740f3a227a0ab896bffbad5faa868e36", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742755780, "uuid": "a9da853c-a731-4960-9cbc-5a607bef8eef", "value": "T17CC302152F193B9145CB31CE603DA209A7D9454F5288AF38078ABEF7BA0EF35D16D0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742755780, "uuid": "aa37874c-4879-44db-a4cf-7b3aaeb665ab", "value": "1536:73yX49zfWAXMn8peOTigtiXSN3hpzC8AY/7RJasi4Hjw56VB5CLlm1K7B5PoU+8p:7304NMn6Tw+iBGR456Do7jo4RcK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742755780, "uuid": "2bfcf337-4e17-465f-90e0-608a2ec8b1af", "value": 121833, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742755780, "uuid": "34834572-19fe-49d2-ab9c-b46a00bf1ffe", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16aad771-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1742755858, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742755858, "uuid": "743ddd21-3dd2-4941-890a-fee7b80f7a01", "comment": "Malware payload", "value": "e739dc29e48462e4bee88c21474e51a7", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742755858, "uuid": "7ef4c825-2c4c-4028-940d-7866d48399b3", "comment": "Malware payload", "value": "56ed019e39933567056a99aa4822422af73d09886158c6aca16082388494d2f9", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742755858, "uuid": "78f73120-3499-4290-af75-e238c04e1143", "value": "D9F2024633943B73E16255F4E3BDAFCA601E7D64DFEE202BA4413A2270B311D688D81A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742755858, "uuid": "0da53c67-ba4d-4e77-af44-033631285c4e", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8g:yYI0ARqw1qAEW67UIWi7M8g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742755858, "uuid": "cc9258d7-9dfb-47ed-9289-58e52b5f7084", "value": 34752, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1699c40c-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1742756142, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742756142, "uuid": "faecdddd-9456-411b-90de-9456149d0f19", "comment": "Malware payload", "value": "21ab19d00f6577ebcb2e719b8a52344c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742756142, "uuid": "d0abfcfe-0ce2-4001-8b93-01915389549e", "comment": "Malware payload", "value": "898e00110e699b1381509252bd0614c8ffe8e04c7692678bf3eeaecf131f8af0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742756142, "uuid": "7e4a169c-7cd4-4b1d-87aa-3d5b0c3498a4", "value": "D953020233AA29B196714AF1E7FDBB88E6493D588FF26C256C113D6CF97239D1CC4908", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742756142, "uuid": "aaf3fddf-6ac4-43e8-a8ac-082bdb8f6a86", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8Px2:yYI0ARqw1qAEv7UIFM8oJorFquyjT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742756142, "uuid": "53c80928-1c04-4b97-9c5e-6f9fca8c02fe", "value": 65160, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cafe7e95-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1742757349, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742757349, "uuid": "a777e944-f6af-4ab9-b564-b8808cd72b60", "comment": "Malware payload", "value": "641d14d51d0de90367ae07abb61720b2", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742757349, "uuid": "d30c6cd4-bd50-4228-868d-aa480db58224", "comment": "Malware payload", "value": "dcaf0d697c1d9e9e0fa704828421b28b017bd4d6a5faf96deeb5ae80c21ed6a8", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742757349, "uuid": "b9973621-2272-41ab-ac59-451aab5a421b", "value": "B373D49D2BD85AE1FE4538327217955A2003910D53A172641F92C53444E68475887855", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742757349, "uuid": "4e054148-19ce-47d9-be29-dc4c0467c58f", "value": "12:eMaZAH/6iO/7dmEvVuwizuTG84r+xN3VKZsslrwb2Ozezeivlln:36LV4+f4rENFKZsslY2Ozebvll", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742757349, "uuid": "2632a4e5-3a19-464c-b0ef-aa1a3bd49030", "value": 80584, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4177e69b-081b-11f0-8aea-82aee05be84a", "comment": "Malware payload", "timestamp": 1742757360, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742757360, "uuid": "225886fa-7f4d-41f9-a53a-9caa9b91df94", "comment": "Malware payload", "value": "1e7234d7a974482a6138e28712f71267", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742757360, "uuid": "7537f2f0-d80a-448f-8fdb-b626ca75bbf5", "comment": "Malware payload", "value": "cce9f589c9ec910879070741d1e67fb55625cb64639ebcf4f5ab6dce766b6944", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742757360, "uuid": "c188fbb0-cf1f-4f79-b200-315f7727ce0f", "value": "T14AA522605920836FC96B84FE7F11BEE844F14BD719294122E559F7BCDEEA68C0CB20", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742757360, "uuid": "f13d8d56-6425-4a4b-b899-9655a786f2e8", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742757360, "uuid": "35070e1c-4c0d-4c0b-95b7-671ec532031d", "value": "49152:vsRKTJQZ8o6PUjjmkVvFN1lfAIlkOTEFgxBYWt8I:vsoJQqkjmkVvZ1LoggWt8I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742757360, "uuid": "87b9316b-8733-4911-ad3b-d4d859d09e0f", "value": 2104832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742757360, "uuid": "ca4b1367-4b6a-426e-abb4-3c8592c44e25", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e047af3e-081b-11f0-8aea-82aee05be84a", "comment": "Malware payload", "timestamp": 1742757626, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742757626, "uuid": "0f1097ab-aafd-40ad-9e7d-170e2681d7bb", "comment": "Malware payload", "value": "e13b8e511787a1d1fba4df4bef37ed4f", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742757626, "uuid": "12adcfaa-3587-459f-b482-bb28c1cc6948", "comment": "Malware payload", "value": "7217bdd25c216cb1d57bcd05dde5bbb5917cabb4b41c090a71ea3f897c36d9a3", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742757626, "uuid": "20c5a417-ae48-49bf-970a-27e3ab703477", "value": "T1A785336B38327D6DD3F84A33B5EBAB81DC102B521E729E331A64651CE197B1447B06", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742757626, "uuid": "1b45184c-067e-4cdd-9d5c-b4483293da68", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742757626, "uuid": "9204211a-f14b-42ea-adae-8f083cf417fe", "value": "24576:QAyHpGFysY88QNM7a9oBNcptVNL/fEy9mT6FsCM+EaIte2QZJ1j8E:QZH8E388sM7aiWptVNwlgjI30g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742757626, "uuid": "93fadaf3-cce4-4d6b-ad0f-e0bf7dbc1274", "value": 1874432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742757626, "uuid": "8a296e32-1f7f-4e8f-ae1b-b68a2e411bd9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f01e88f8-081b-11f0-8aea-82aee05be84a", "comment": "Malware payload", "timestamp": 1742757653, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742757653, "uuid": "9f210d2a-e79d-480f-9ab4-f1a5b37eb223", "comment": "Malware payload", "value": "41ce565cd6ed864f90a7544998c43d3b", "object_relation": "md5", "Tag": [ { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742757653, "uuid": "1bb8e4d8-2c8e-4c35-aa8c-bbc0617bbcda", "comment": "Malware payload", "value": "5fccdebb53c3043b8568fd904c5998588c21d283bd26538584ed467bf3b3f3f8", "object_relation": "sha256", "Tag": [ { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742757653, "uuid": "e682a65f-b460-435c-8404-64e4c6cd36f6", "value": "T1608533EEBD4B8462C0BDE271BBABDA84B7559F81895B3440117EC26758F2F00EF956", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742757653, "uuid": "df569fba-ee0b-45e3-8191-bb32f997586d", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742757653, "uuid": "899c2127-3ad6-4ce2-bad3-080ae09eb485", "value": "49152:Y+pE9Ua1OqQlXiYUdP1lW7noYBtpQ0UlpcYeGSM:ZVa1OqQlX/UduoMtylZeG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742757653, "uuid": "fc682d83-375f-4d1e-a098-cfa74ab9677b", "value": 1789440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742757653, "uuid": "75230830-b425-4502-882e-ed9ed7aebbed", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6baec30e-081e-11f0-8aea-82aee05be84a", "comment": "Malware payload", "timestamp": 1742758719, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742758719, "uuid": "67f231d2-25a0-4a1e-955f-9504bd8042e9", "comment": "Malware payload", "value": "15bda68d69138b00b18b8e238a6f3ce1", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false }, { "name": "snojan", "colour": "#e8bdf9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742758719, "uuid": "afcea118-9c91-406d-96b6-6958e065bef0", "comment": "Malware payload", "value": "da09fb0f1d8b48129724761fddef6d51e7f15e39bc3917eb5d14a85ca968ebbe", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false }, { "name": "snojan", "colour": "#e8bdf9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742758719, "uuid": "6500f297-4f51-47b1-bfba-8f39d0fa7530", "value": "T10F263317E21753DBEA087F7206A7C554FF64AD9902DCCD6FBC62263E2E3358789804", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742758719, "uuid": "1f5ec376-99fb-4831-a128-4523e59a7b90", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742758719, "uuid": "420166c1-7650-4520-8e4f-17a1a0a3449f", "value": "98304:4DR259tup2Ep136kqNFmzgQeXx0xtFm6caW:4DR2op2EzYNFmCXiFm6ca", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742758719, "uuid": "a73f1bbf-0ab9-4778-a9bf-1f2f1f853379", "value": 4671488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742758719, "uuid": "cfa6e607-e2ef-4063-ab19-ca20fdbde794", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab3bdded-0829-11f0-8aea-82aee05be84a", "comment": "Malware payload", "timestamp": 1742763550, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742763550, "uuid": "cd62c812-6373-4472-92ad-9784518cf1a3", "comment": "Malware payload", "value": "d9208dca4f09184278956a2a9b3d6ef0", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742763550, "uuid": "d439fcfa-5ec6-440e-8acd-c1414e57e336", "comment": "Malware payload", "value": "5a0b1259bb2a1024fa39660435e5744900c47573b7dacb1b54da1bbb0431e7ab", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742763550, "uuid": "777633a5-f376-4027-9ff2-c617728588ed", "value": "T1F22633CEF3B20DA3EFA79C72F91A10A46B710861EDEACA475B6D045214E1797E7314", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742763550, "uuid": "fa48be8b-15b8-46cc-b271-449f56022f56", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742763550, "uuid": "4d903789-be5d-4bcf-8b0d-7409cb08f26e", "value": "98304:Fz4hcnAsdIY7+ylc9Iq+ODzRyyvupXFn8NK3b9SJ:Fz4hsdh7yWqpvig0B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742763550, "uuid": "9f9d9f6c-ac08-409c-be93-61be95b09354", "value": 4560896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742763550, "uuid": "5aa08d1a-f330-4b49-9479-b6113bb8eab1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d85229c2-082a-11f0-8aea-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1742764055, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742764055, "uuid": "4b787f3b-a4c6-4db9-beb8-3049f14c6d0c", "comment": "Malware payload (ConnectWise)", "value": "1624a686af33f769bdc5a94c3398b603", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742764055, "uuid": "b54358e2-18d1-4882-a946-1d26fece5398", "comment": "Malware payload (ConnectWise)", "value": "a780102466ba018428efba486f36c20e174f330f42863f2b4748f3d46d653bc1", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742764055, "uuid": "8003eddc-475b-4aa9-bda0-2d2f8886140a", "value": "T1A0836C43B5D18876E9720E3118B1D9B4593FBE110E648EAF7398422E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742764055, "uuid": "c843657f-ea9e-4e4a-b075-556f91746c9e", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742764055, "uuid": "e3310cd0-55ee-4683-a4b2-4e116970e37d", "value": "1536:RoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYL7BJMO:LenkyfPAwiMq0RqRfbaWZJYYLTMO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742764055, "uuid": "5c5a2db8-cea0-4ecc-8f85-965474ef7eba", "value": 83216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742764055, "uuid": "4535adaa-4cdc-4fa0-8d39-9db3ec691e13", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "435712ec-082b-11f0-8aea-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1742764235, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742764235, "uuid": "aa7bfc9a-1371-4164-b1de-716c0a765906", "comment": "Malware payload (ConnectWise)", "value": "cea5aaa75fae852f477c93069c58bf00", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742764235, "uuid": "7a98b063-6668-4304-b928-8ed71f8e783c", "comment": "Malware payload (ConnectWise)", "value": "3922db1e7f716401e0e65df9bf08a972b680f100cd3e6087609ba355b2c7a367", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742764235, "uuid": "071bd0fe-b12e-40a6-b6ec-bb1638396d9b", "value": "T16E836C13B5D18475E8720E3118B1D9F4993FBE114E648EAB2398427E0F351D1AE3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742764235, "uuid": "f37a3ebe-b244-4d0d-a0aa-7e4028fff697", "value": "7631a79a9071099fa4803e1c4c5df207", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742764235, "uuid": "399bf08a-bf1b-42f4-a4ac-f0641f9bf23b", "value": "1536:bazWlKzJVcNp++yQNS6xNNCT2l8NE8llbpTaCJRpsWr6cdaQTJSvYY27QkPx3R:pFNpo6rIKlUE8fbkqRfbaQlaYY2Lx3R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742764235, "uuid": "067bb7b6-9943-46b3-ae95-e3feb9939446", "value": 86288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742764235, "uuid": "a08a37e1-0b78-4aee-93e1-99df59bbab82", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94273763-082b-11f0-8aea-82aee05be84a", "comment": "Malware payload", "timestamp": 1742764371, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742764371, "uuid": "72952684-dff9-45f9-8db5-71cd42f2d0dc", "comment": "Malware payload", "value": "844ac5084eb8970b9b48671d481f6186", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Lumma", "colour": "#4dc764", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742764371, "uuid": "c2ce92b8-fffa-4fba-8cb3-fb00943dc128", "comment": "Malware payload", "value": "8c0b11ccc08ca9295f15cc23733ce76f88ccb51f06435f29c32ebd200775118b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Lumma", "colour": "#4dc764", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742764371, "uuid": "b1bbcfa3-fcd1-4e23-b827-546d06002af0", "value": "T1DB453BBE71A73545FE624C306FECB624CB57287F8D6BDAF146D1A03069350A2EC868", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742764371, "uuid": "26a975dc-693b-48cb-ac7c-8b84ee72555e", "value": "d743740f06aa0a325bb5c948f63319ce", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742764371, "uuid": "6bafc412-2bd3-434d-a9f4-7b7b1343e86f", "value": "12288:CNjIp/hT9uYSYtk4IhpvyQa/quIi6RaZZBDN0y9GcWNgRcoSZcRfQKbY41InR/62:CEhUTi8SQayuIEN8uX7RfbXwLI95ttS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742764371, "uuid": "764536a8-05a1-4a3c-b4bb-aba342338127", "value": 1215488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742764371, "uuid": "9838ce23-0c7c-45f6-9bf1-ebeea10c11d5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2975afa5-082c-11f0-8aea-82aee05be84a", "comment": "Malware payload", "timestamp": 1742764621, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742764621, "uuid": "7d3cbfac-d561-4c37-bd6d-58353f686804", "comment": "Malware payload", "value": "d1f04f021b3ab86fb708e7234809e3e4", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742764621, "uuid": "89abc786-9723-453d-9f49-3e62da64a09f", "comment": "Malware payload", "value": "35f0811d7f8e077575f4a12f8976c1a52c15c2229628c80c3dc42a0fd7935f36", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742764621, "uuid": "8334a460-68e3-45c7-9aeb-d960031f06e0", "value": "T1425533E0DAC8C8063B30462C55955B9D939D81E7727430F66758E6FFAF5C348832E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742764621, "uuid": "2e6a6fb8-6d8d-43dc-8eca-b7fbc5de2340", "value": "24576:txAQiqvqToExwlta0Sc8VVW+cegCFfHx4mNft3QZYtxA7Gixi/vC:txAQiqSngQ3JJgClx4mNVXtxA7Dxb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742764621, "uuid": "086568d2-0667-470b-b802-39844d1a9cf9", "value": 1322034, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742764621, "uuid": "6353a04e-f452-45d2-b85c-c86a00086e8a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9251b693-082c-11f0-8aea-82aee05be84a", "comment": "Malware payload", "timestamp": 1742764797, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742764797, "uuid": "5e849df7-9dd9-4b16-9ad4-9fd4288d6040", "comment": "Malware payload", "value": "044a1bcb9876c29b9723bb77b3fa8b9e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742764797, "uuid": "860b3b02-c6e7-409c-bb61-79896c05d7b4", "comment": "Malware payload", "value": "24dc68593c43d1301e75fe6e44c84bab7e707035aa7a6f20ea7f80f8f39a28f5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742764797, "uuid": "c8ab1133-cf28-4a67-a5ab-dbc83bc9e432", "value": "T1D65274CA89B6BAFAC021B872B87554AD07102311BF4E1BDD356E45D003DF5CBE5AFA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742764797, "uuid": "1946e6dc-1ad4-4924-b3e8-24101a3f861b", "value": "192:XEzAhArA4v+yP7mOXh0dzOEEe75lKGoMgBJydXQPoPEAhjPTZhuu+2wDhcJnVJIQ:AELyK5EG1gzmCcJJlB+J0mqYFVG/n3N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742764797, "uuid": "d00fd70a-2c99-4ca2-801a-d304d9d5a5a9", "value": 14216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742764797, "uuid": "8d8f9c67-4ded-4ee9-98f2-d39407e0400d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6d0b5db-7fda-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1742764928, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742764928, "uuid": "a4ae046d-1b57-4ca4-841c-59d52f8d9ed0", "comment": "Malware payload (Hajime)", "value": "5377e8f2ebdb280216c37a6195da9d6c", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742764928, "uuid": "6a5f39e0-4d45-4e2f-8a73-093fe9f5a7a0", "comment": "Malware payload (Hajime)", "value": "020f1fa6072108c79ed6f553f4f8b08e157bf17f9c260a76353300230fed09f0", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742764928, "uuid": "17771d55-2376-4cd7-b591-fdd6123b467e", "value": "21831229135414E5D62681F1D3FD1B84AE981FA9CEE2EC147C12BC89EE333AD3CD2618", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742764928, "uuid": "17ed83c0-9e3d-438f-91fe-0428fafe1c32", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J1V+uBNu:yYI0ARqw1qAEv7UIFM8oJorFquyjkRks", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742764928, "uuid": "2cacb258-b0a9-4f60-9c5c-fb651b8f93d6", "value": 85232, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9588fc55-082d-11f0-8aea-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742765232, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765232, "uuid": "5b5f1f49-c229-43d2-a9dc-9e6c3cedb164", "comment": "Malware payload (Mirai)", "value": "c6e97e7019d1deb2815994f5c7241c09", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765232, "uuid": "2f77ea2f-a89a-49f0-b9c3-81717a990008", "comment": "Malware payload (Mirai)", "value": "fd69c599111ca3d7dbe937c74df58b1933d69fea6f47636d485bf5321135b6fe", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765232, "uuid": "bfe6fd4f-3f82-423e-9dde-6666bf1cd3a6", "value": "T10033F16EA539A38ECA65AEF977EC09880F8955D133EF9F0893214DA85BC4C0D6C4D1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765232, "uuid": "bb955458-1082-4df2-bea7-09c084bf78b6", "value": "768:nbbIVTCpNpqW10FtrDS+tZb9ddQm8MSbhYhFkQkVmKTlFHcmW5DQYgmJaD9UkV:nbcCfpqY0FtKm8h4uVmAlFHagyaqS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742765232, "uuid": "1c60b42f-6d67-47d7-b8f1-d1a0b1373b64", "value": 50520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765232, "uuid": "a64c6e8d-0f4d-49e1-a787-e7c2f90351ae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba7e2df9-082d-11f0-8aea-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742765294, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765294, "uuid": "75b9a8e3-9ca0-4ba3-a997-d8425abad03a", "comment": "Malware payload (Mirai)", "value": "1447ed7d5dac932442416bad5f2f7521", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765294, "uuid": "751298d6-bbb9-4279-9ac6-6e3030b554a7", "comment": "Malware payload (Mirai)", "value": "d86488a94580619c86c5ae1956536531230c33387bd09d916280279aa2fdbefd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765294, "uuid": "e1cfb6c1-720a-4807-a7da-b3cf06696307", "value": "T19DE2F154DCB42DE1FE6E2AB91CD2CBD6F78AAC0D2B85CC7820D04F1605B649ED64C9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765294, "uuid": "d1de6e09-367e-4b07-b977-765fcc1719a0", "value": "768:TVU0vqgi/0mba0aZJfciDgls97DHEvD/9ICnUWQBQzfB25m4uVcqgw092:T9DlxJxDgS9fE7/9bnGBQFGm4u+qgw0w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742765294, "uuid": "91a0c4b6-a1c3-4bea-b85b-a5e229b4765a", "value": 33484, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765294, "uuid": "317f96b3-4a5a-445f-8dcf-78d9bbe027c7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba862603-082d-11f0-8aea-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742765294, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765294, "uuid": "a2d311a1-4b58-45a7-be8e-235d8bf5e34e", "comment": "Malware payload (Mirai)", "value": "50b99e65e56d9aa3d0d24aac7d2cf9d9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765294, "uuid": "c60f98be-7a4f-41eb-94b1-c1c4d22d48f2", "comment": "Malware payload (Mirai)", "value": "d87823ee98db0ae6bff52751d9b52a0aa4edbd811e667a7ae618b4bce98b93cd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765294, "uuid": "67d53e2f-5bfa-4cc6-96c5-4fbc2432eafd", "value": "T10C2301165B12595DEC0323F25A6907B97F014BA301F3CCEB944DBE4EC7620A5750B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765294, "uuid": "d5bee81c-dbb0-436f-910a-1505d8e425ea", "value": "1536:YW8syYKPBnbabtiIajMKbalcUVJuUm5sK2:YpDVbYorMh9VQUm5f2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742765294, "uuid": "c0a01ffe-4ef4-406a-ac51-b4fbe221486d", "value": 49624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765294, "uuid": "ead5b164-6f2c-406d-8b38-389e69ecb1f3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d9423a9f-082d-11f0-8aea-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742765346, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765346, "uuid": "f1011ca7-ce4e-4366-a86f-13a59e262c35", "comment": "Malware payload (Mirai)", "value": "059f624a7df7afc0bcacda2b0984e095", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765346, "uuid": "3590ab42-a361-485a-8f9f-c559d16c12f4", "comment": "Malware payload (Mirai)", "value": "73c8b90db2e540d214b49be18c188d87f8674faae0e6dc1783e2ad8f76aab3bf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765346, "uuid": "645962e7-48a6-4514-94f5-5c7541bc711f", "value": "T10A539E77C8396E64D25581B0B8748E792B53F88482571FFE1A99C27A8047EECF6483", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765346, "uuid": "927224e8-c6ae-4e72-bcda-69e049352313", "value": "1536:caCwtuAPFqcgdEco5KU3AwHup+CSXHld5Zo:c58PMcgaRAUHup+5FPe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742765346, "uuid": "99fa70c3-392b-477d-8305-4d179f85b7e6", "value": 62948, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765346, "uuid": "f3f08dda-b66e-40d3-a247-8e80ff94a3a2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d9457eec-082d-11f0-8aea-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742765346, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765346, "uuid": "7815b837-4cc3-479b-ac77-411f3d135dc2", "comment": "Malware payload (Mirai)", "value": "54df6b48d75c9577b17343f47d909729", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765346, "uuid": "9462b413-39f4-4a77-90b8-a6638b9356aa", "comment": "Malware payload (Mirai)", "value": "6ac918962c801644c0a8773801657cdee81180ae46a417f7171ac196e9a84856", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765346, "uuid": "e04d93e0-d8d1-4d06-a572-14a26f133d3a", "value": "T19C43F269C1C3FBB0E7123EB1D297D84568455FB4C9FE28872EB0CA543CA4C5187E91", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765346, "uuid": "d5a9d9ae-2f3d-4967-a00b-494560c6bd96", "value": "768:e9SZLq7S4tG8w+LrjGEsJwTptVGqB7oOzAjlmI79U9q3UELiNwj8/5XDWBYVt6uD:ePS4tG8FL/+wTpnv2UilmIPLCYYH9rX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742765346, "uuid": "2421213a-1669-43da-a328-20c1641a85b1", "value": 59056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765346, "uuid": "4a96b42f-9f33-4f86-96e9-36a99700cd54", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d945ba8e-082d-11f0-8aea-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742765346, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765346, "uuid": "0f2e9303-a98a-4704-ba4c-a02ddfc4a509", "comment": "Malware payload (Mirai)", "value": "37b33f12886e78885689a3b2531b4ae3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765346, "uuid": "d51ba37b-8998-4b1a-94b2-406b9b7f2c6d", "comment": "Malware payload (Mirai)", "value": "504e3bf48958540a6abe6011fdc260d2af43536f0a0e79753949f6c92dc89af8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765346, "uuid": "b26c1621-e299-4fa7-8372-15a78f400dcd", "value": "T17D932AC7F801D97DF84EDB7B08534D19B271F2A10A830B766357B66BF93A198141AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765346, "uuid": "60741d3f-c6db-4d06-9931-c509f69f1857", "value": "1536:v/mzwj8JNdrQ2f3rN8nqkb8tFaZ0QeuacWjcW0JcWcBS8cO7St3nRj4wYTWJ20/q:vezwoJnD+qkb8tFM0QeuacWjcW0JcWc3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742765346, "uuid": "4d967080-0226-4df2-af40-d92ade83bda7", "value": 92428, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765346, "uuid": "0a4a4ed6-bb0d-47b7-a7b3-c3e71e1adac8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d94c5edb-082d-11f0-8aea-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742765346, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765346, "uuid": "250c3577-8889-4edb-918b-44f582653032", "comment": "Malware payload (Mirai)", "value": "dac23384f897c5a29ad94da7914fd993", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765346, "uuid": "fd841bc4-d44d-4f8f-94e7-bf532c5e90eb", "comment": "Malware payload (Mirai)", "value": "f4a33ba766bb8ad1b5e07429a771840d2ef1782949b789a352f8110773bb3aac", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765346, "uuid": "7aec44db-39fc-4e0d-9b41-f72843ead6fc", "value": "T125F2D0172599C9A1C4E17436C7E2C631EEE3476CC3FB3AF2BA18171097822199AB19", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765346, "uuid": "54f8e7bb-fe6e-45ee-a0eb-c19b84c83fe2", "value": "768:Nm60NIkyIKrK4+AYxpVwpchRvehVeLSpBAzKCgy7MVjO5mPs3Uoz2y:NmGVK4+AawuPmhMgizKzyGjomCz2y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742765346, "uuid": "1fcabb5d-c948-445c-aa84-da31161e42c1", "value": 36680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765346, "uuid": "912f77c9-7e01-40c1-a6b2-4186484d3e64", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d95959b0-082d-11f0-8aea-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742765346, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765346, "uuid": "4188fda6-aa5a-4641-a8b9-960fcc0d15bb", "comment": "Malware payload (Mirai)", "value": "1be67e8084f4102af05e2e4152f6c338", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765346, "uuid": "137a7a0b-c317-449f-8d32-467ef55f3a40", "comment": "Malware payload (Mirai)", "value": "9084996cb44d48b01e18242fff25cbfe87e47c8208b7315310c7c7a373927488", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765346, "uuid": "f6734246-bde4-4e71-865d-bd71fb78a44e", "value": "T11A735B22BA751D2BC4D4A87A22F30725F2F2479B25AC8A1A7D710D8DBF3165032477", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765346, "uuid": "592d8c70-a49a-499c-9ea5-797a870865c3", "value": "1536:mQMSZZm4fVFd9BPzzJCHQ7jtEeCNM5UeWzQSkWtgWG:DpzHzjjmpN8UeIjG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742765346, "uuid": "0e105c65-aab6-416c-bc06-11cb4ab7861e", "value": 76448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765346, "uuid": "43e398b5-93e9-486f-8e45-3093d01715f7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd689d74-082d-11f0-8aea-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742765406, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765406, "uuid": "944f19aa-f084-4c1d-80fc-5fd1f7eecd4e", "comment": "Malware payload (Mirai)", "value": "606118045fee881480d6a73e8aae9050", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765406, "uuid": "bcfaa914-53c3-4796-9fa7-da4fee4d47dc", "comment": "Malware payload (Mirai)", "value": "297399048d5f4b335008cc03664cf20426dbe14543f9eb049f4f59ade2d0f61d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765406, "uuid": "0844c90d-c838-4974-8b21-b8242ca1f7ce", "value": "T12543F2A5C0A66EB0BAB13EF4BAD6C84534088FB0C5EE35471EF0CD582C34E614AF55", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765406, "uuid": "96528810-0f14-453a-8172-e4a4306eb5b3", "value": "1536:ePS4tG8FL/+wTpnv2UilmIPL1ERbiEVuXgX:ePltG8dfBv2yYL1ERH5X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742765406, "uuid": "5325099b-d308-4564-a9dd-d5e175861c40", "value": 59132, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765406, "uuid": "d1bf4af1-8710-4f38-b12f-33a137762544", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd6991bc-082d-11f0-8aea-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742765406, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765406, "uuid": "68a7676b-6c94-4b6d-8e23-7d87eeeafed0", "comment": "Malware payload (Mirai)", "value": "4995d05bf5468109373f0a5608ec3793", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765406, "uuid": "333a12b6-7948-4040-949c-a3a19baad2d4", "comment": "Malware payload (Mirai)", "value": "48149300436783604a0ba8626ceba9d4060efad73592fcee69fc5cc8eedc6028", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765406, "uuid": "b79bb1ba-7735-48a6-b152-f1d72840906f", "value": "T19113F1D8BB72D737FE15C1701F27CD76D9A25C0ABF247340B80CC8991085A92A76AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765406, "uuid": "9060f88d-5754-44e3-a45c-bd8bcc4afff6", "value": "768:piwfWG3GcTE6BIQjt9wOEfrttCrzIDZwJn55kla4tIkjLUXFtWe1uocS9:piC53GqB7cByrzNjuaQIkjADci", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742765406, "uuid": "2cd55b86-f8f7-4d53-9bdd-4a6788af59f3", "value": 44796, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765406, "uuid": "97f9cd4d-735d-40ea-b689-a7d358f53e00", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd6c8404-082d-11f0-8aea-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742765406, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765406, "uuid": "04cb25e1-eb3d-44e3-8512-413e163d95b9", "comment": "Malware payload (Mirai)", "value": "e63fb873f7f6e27920da3d875da280cb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765406, "uuid": "27eab9f4-bcaf-4f39-bbf1-66c5b28f0b8f", "comment": "Malware payload (Mirai)", "value": "045878d5c5ff20c586f73206a82a443311a4c354f218090b98c3cfb3ea92279a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765406, "uuid": "42da9588-fc64-4f8b-9b4a-9f363aaeafb8", "value": "T18472B014C064DC62C9B00835E97C8ECB756B5B78E0EF303317948D9865931A7BDF99", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765406, "uuid": "a1f8855f-2510-4251-a78c-d9213d8a5e06", "value": "384:inDN9PdRIB8LpUQf7l95FXnyIZx+Rh7qmdGUEpiaL:IhtbxfL5FzZx69q3UELL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742765406, "uuid": "2543cf87-fa9b-4a25-a444-34b056e4eb79", "value": 17148, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765406, "uuid": "bfbe5645-795d-4802-86ef-40e05caeb4f1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b2d4a8c-082e-11f0-8aea-82aee05be84a", "comment": "Malware payload", "timestamp": 1742765590, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765590, "uuid": "ca806664-b353-4caa-99f7-3eceebe35816", "comment": "Malware payload", "value": "842e438a94897638b98719abce5e818d", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765590, "uuid": "e92cd28d-4a26-47d1-919c-fba483fbd692", "comment": "Malware payload", "value": "22b9976cb1953951ea9e239355ca64ea9673ea1629b4d37ff8fa119e3aace82c", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765590, "uuid": "6fc2bc8e-6998-4943-a239-1ae0b18c28a9", "value": "T1472148FF0026914195C78E9CE0148726632A8FE651D69E1C9C0D3FB963CFF297225A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765590, "uuid": "166fda30-7f46-47c4-9df1-5e72eda41dce", "value": "24:9UriNI2wKBEWDWDBavWQ+u8+7m9FAF/0QFrj5eGOGhnGEz9k6:9UrWwm5CDBa+Ql8+7m9Op0QRj5e3cnrl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742765590, "uuid": "a1c4bac1-bddb-4cb4-abbf-541842e41783", "value": 1355, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765590, "uuid": "b2f978dc-b489-4e82-b730-9206b5da9e9f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b2e1a84-082e-11f0-8aea-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742765590, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765590, "uuid": "4cc965d0-cbd2-4497-82ef-3fd7efd2e408", "comment": "Malware payload (Mirai)", "value": "51fc17f4b521ebcc36a2847801055bc3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765590, "uuid": "850c6b31-5253-45a2-ab54-88b92dce45b0", "comment": "Malware payload (Mirai)", "value": "8fb4d4a0113d2392383e176ae1464b2cefc35acc9fd8ac55c9d97124d7e8c239", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765590, "uuid": "44d7a35f-5af5-4e8a-9b81-3c499363460d", "value": "T137431A80F54781F9D40B8D3060A7F63FDA31D46D0171D6AEEF8AAE72DA67B4192063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765590, "uuid": "7250c053-2c20-4852-bf55-7b4b0d6feb52", "value": "1536:2Iken2zVxYWAIJVMJyPyxnIbzmf4kwalEu419+uj:2IVn2zYWzJVGyPygmfBvlEu41M", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742765590, "uuid": "cdaaeaf7-2f63-47eb-bb6b-09c11a133144", "value": 55964, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765590, "uuid": "758e168c-df1f-40a0-adc1-5d499311d32c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b2e3baf-082e-11f0-8aea-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742765590, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765590, "uuid": "4db9154a-c567-451a-9e7e-647303444619", "comment": "Malware payload (Mirai)", "value": "ea3b29b91605882e97c9ff16317bb15d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765590, "uuid": "b41ed6e7-1128-4289-9bcf-c49b047f9464", "comment": "Malware payload (Mirai)", "value": "3700aa2ec75dae720f5b528d5e57c18f1a0b5ee9fd7fd01fb35cda509cb895ef", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765590, "uuid": "e5e7c709-ec18-44b3-b53b-73b094c258c2", "value": "T1D9434A25ADBA2E16D0D4E57B21F74324B1F1129D39A4C62E7D630E8EFF146006B877", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765590, "uuid": "8bde512b-999a-4ff2-903c-a3b097247aeb", "value": "1536:oOaJlRwSAn0oG0wa05fp0FbY2nMIRbINO:LoEtPaD0Fs2MON", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742765590, "uuid": "98e567e6-7f7b-4b82-94ba-4dee2a3bb4c5", "value": 58436, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765590, "uuid": "1fc3145c-7892-40c8-be35-d9ebb5fa5063", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b3c0657-082e-11f0-8aea-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742765590, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765590, "uuid": "4ebc4c92-20bf-452e-a7f4-9597b8f54ab6", "comment": "Malware payload (Mirai)", "value": "0396b6b1dc23b6eda5a6a8172f6306b8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765590, "uuid": "71c1fc46-aa1b-4f22-a8a9-d8e8631cd8d8", "comment": "Malware payload (Mirai)", "value": "bc37655267c8850a1c168eed4091d55394ab429161e8e2b2d860bdb6fcc41f0e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765590, "uuid": "dec27bf5-a48a-42f2-8cf6-decfccfca8c7", "value": "T131639509BF654FB7EC9FCC3749A91B45298C641A21A93B357E34C828F25B24F09E39", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765590, "uuid": "8c679584-65d0-43b4-9cae-8bbe253d0e17", "value": "768:RTxTxBEYlDEVyUc15YFOygG7iMNt57qeWe+ieNXNoNbpk+/nXi/MihP1p579yfXe:RTxTxiYltaZGMNtIb3iSXByUhP6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742765590, "uuid": "b6b4b541-0e88-4fa5-aae3-9eb5e7ffdfd5", "value": 72616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765590, "uuid": "8e896595-3bf9-4993-b61e-b88197285eff", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b41a6f7-082e-11f0-8aea-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742765590, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765590, "uuid": "10064eb1-c5ea-4d16-853f-e3ffc75a0855", "comment": "Malware payload (Mirai)", "value": "ac717cde1f2698e081a137c21af6c816", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765590, "uuid": "394d0c79-6211-4c96-9b46-6b54acfc3c8b", "comment": "Malware payload (Mirai)", "value": "169c63e055eec728891097e466cac03370911ae9fd7405d7ce8a89196b5499b7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765590, "uuid": "108a42a1-132f-4363-9125-a5ffd5cbefe2", "value": "T136C33A06EA418B13C4D527BABAEF42493322D758D3EB730699185FB43F8776E0E636", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765590, "uuid": "02cb61cd-e525-4eb5-9c65-4f2b5aef55a5", "value": "3072:sRGq/kvyj0CH2rTCCehHSMRKI+QLyM/9Zk/:Tq/kvyjUrTCCeFS6+QGM/9Zk/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742765590, "uuid": "89eb8223-5a21-453c-8c0c-584519d4d80c", "value": 128031, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765590, "uuid": "2648f531-604e-49ff-a0f6-8b848650a217", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b4246cf-082e-11f0-8aea-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742765590, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765590, "uuid": "b89096d2-1f22-440b-b1f0-86e94e9aa91a", "comment": "Malware payload (Mirai)", "value": "a22d14a80406b8bb98eb9abbbdb5278e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765590, "uuid": "0214c631-ca12-4ed0-9ab2-f1ead8738d96", "comment": "Malware payload (Mirai)", "value": "e325754552d19b04c3ddf774d57146436b36ab1838e8a2f7619b80c685b9c18f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765590, "uuid": "57117914-c369-489e-af69-770a35d1e4ce", "value": "T149431A5578929B12D5D4A27BFE6E41CC332663ECE2EF32039D121F50769A81F0EAB7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765590, "uuid": "3ecb8eb2-792a-4a39-bbb5-ecd0fa4ef2d4", "value": "768:8NE7Cnkf+3qV6s0xqaZW2C0mh0n6/MT9cRZcHw/Il6PySslx2BI1/Ra/k0PFbpEx:H7vm3QMmhU6myIlSkIaFI2ew7p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742765590, "uuid": "b828c412-030f-4dbf-a8c6-ebf5d84c787d", "value": 56204, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765590, "uuid": "f918e0c0-3449-40ab-9b2d-58d874d3fe49", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b443024-082e-11f0-8aea-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742765590, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765590, "uuid": "8be8710e-e355-46a0-8100-1668bf27cf1e", "comment": "Malware payload (Mirai)", "value": "80c818df040dd34717ed3c8965f188ca", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765590, "uuid": "26893cb8-9eee-4eef-b71a-f0843f26a08b", "comment": "Malware payload (Mirai)", "value": "e34402fa33486b3c93ae45b40535aa6c20dfd804b0eea26bf4071713d53a927d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765590, "uuid": "c8d77dbc-19e7-4959-8a37-f22c9eb21318", "value": "T1BB331A9AB401AE3CF94BE67A90360D09B632229415A3072777A7FDD35D321A44E96F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765590, "uuid": "2f590436-76c6-4632-86b5-79a14b13b2bf", "value": "768:kMbP4v0IXWpaEOSbl4Eq+jEUuJBecu3WeqzpFxkJTIWjCs1Fr8GN2Z9yfXp:Fc0wWpxzblZXEFeV3pwFxkJ3Wip8Chh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742765590, "uuid": "f65fe5ee-3c8c-470b-b250-589e43b0e879", "value": 54508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765590, "uuid": "7c70a4df-08a3-46be-a1ea-26bd9c283d99", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b45f6a2-082e-11f0-8aea-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742765590, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765590, "uuid": "169031fd-a819-4b5e-abd2-9c6c6d4a9833", "comment": "Malware payload (Mirai)", "value": "dbbffb0dba4c62e529146cc8c4600543", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765590, "uuid": "743b92af-23ee-4e59-bf36-e1f9fa689138", "comment": "Malware payload (Mirai)", "value": "5e56617b5a70733366fd966a4c457a71660c9f96240371d02901964d691dfb9e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765590, "uuid": "0058299e-2703-4216-b214-e9ded2da4426", "value": "T170233AC09643DAB5FC119571347BBB329736F07E3029EAD7E3865932E991701A60B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765590, "uuid": "21735c48-120f-4b87-90e9-67fe1c417af8", "value": "1536:tZ9HZylQqsFvqDlVt3rrgv8lWYiPVry3XQBe9:VZyW/FvqDlVh/gv8MvV23g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742765590, "uuid": "f0bb3b83-27eb-49f8-9f40-d4a5ee388749", "value": 50044, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765590, "uuid": "47420d7a-8b46-4ac2-9ca0-f12796ac4d1a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b4aceaf-082e-11f0-8aea-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742765591, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765591, "uuid": "0adc8441-8bf3-438f-8b0d-2d2e9758f9e6", "comment": "Malware payload (Mirai)", "value": "5b5e159304e84be3f52ac2b4045117f2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765591, "uuid": "a10ab1fd-2957-4f63-9a38-acfae1b1cd67", "comment": "Malware payload (Mirai)", "value": "ab036aa57b71129e76667830dee36e652fddd39f7ab4c90cd5c81b45512ed947", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765591, "uuid": "981a9027-57e3-4ab0-92dd-29e2d5ac9084", "value": "T1AF33280232280A07F5569EF0393F0BF053BFE98529F5B2852A4FEA468635F331585F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765591, "uuid": "4cdfea9b-3658-4bd8-a9a9-ba8803998d12", "value": "768:S+git3Pbc1U8O8+gECahRNFIndBfdGatrdj5jK+iVTrvrSXhByRE79yfXP:YS/bc1U8O8ZWOnZ9tzjKDjGX7aXn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742765591, "uuid": "a941d89a-305e-4715-a7f0-cf2c9d039dca", "value": 54180, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765591, "uuid": "cd820d8b-9657-47f3-b249-ab9aae823ea5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b4b7d18-082e-11f0-8aea-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742765591, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765591, "uuid": "03020037-6e3c-4300-b549-4074347de8d1", "comment": "Malware payload (Mirai)", "value": "6ff938dc7b61374b91043761337a7cb6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765591, "uuid": "e410f331-7c08-4749-a59c-2191b6290084", "comment": "Malware payload (Mirai)", "value": "045c96782e758cf9025e1a3a95e52b6589c9ba1ea100c9870e7ebca9b057b62a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765591, "uuid": "7ac7808f-1c6e-4397-adcc-deb18c5e2df8", "value": "T184238E75C43AAD94F249C674B9340E781B63F00996676EBA6782CAD24053F9CFB493", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765591, "uuid": "c66a4217-b8bd-48d1-951e-24203d0ca0bf", "value": "768:8agL7wt7pWIOKSm7peUAbSPV6SkHt+1rr2fCdokKiCzh879yfX:8ak7wtVvP6SkHt+dU9niCzhP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742765591, "uuid": "435cf9a8-c741-45ca-9128-f821de04ffaa", "value": 49984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765591, "uuid": "e9c275b8-6be1-40d7-88c1-6ba32cbdcceb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b4cc6f3-082e-11f0-8aea-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742765591, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765591, "uuid": "be4e4a0f-d817-4c9d-bb0f-d54a380494de", "comment": "Malware payload (Mirai)", "value": "c301799f79458b2ecc3737e1c09a3076", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765591, "uuid": "62e98ba7-be61-4a9a-9d64-12ca1b097765", "comment": "Malware payload (Mirai)", "value": "6af322ba75dc541cf2025dfe7e2863da0313948d67e6688e13b58350368cac9c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765591, "uuid": "e5bba139-eb82-43fe-a977-c09e58220be4", "value": "T15963950A3E318FBDFBACC63447B74E209659339526E1C584E19CEA015EB034D785FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765591, "uuid": "dc6a5714-ec61-4e06-b2ec-3967ecabc1c9", "value": "1536:BANTVhDuVi/JxMB4QqPrb3ChtRN5Okeuu/G7fGn/3:eNTvDIEl9Db3ChtRnOUu/GLO3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742765591, "uuid": "f51d78b2-e5a4-45ed-91c2-4c3960b10161", "value": 71528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765591, "uuid": "b2c28527-5bfe-4891-bb49-703b146bc508", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b5084c3-082e-11f0-8aea-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742765591, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765591, "uuid": "3befbf19-aef4-46be-baec-0bd110fe2cbb", "comment": "Malware payload (Mirai)", "value": "07d86dbea72e621f7c2d15af11124ba1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765591, "uuid": "23770e76-b85a-4505-a037-4d03fa27b80b", "comment": "Malware payload (Mirai)", "value": "3758ba58a2b22a27b05692aa5355fcf8047b89abb9b6edb215febe92cac1b271", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765591, "uuid": "f632ee9d-e4e4-4a7b-8d5d-316eb0b2c706", "value": "T1E143195578929B12D9D49277FA6E02CC332663ECE1EF33179D221F10769691F0EAB3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765591, "uuid": "c74ca6ed-e998-406d-bbc9-c43eb7708757", "value": "768:dy0zqplZebdDoROwQI+TOWl650m5OEblBMKuArj9FPhskOPN5WXC5BhA1rPNOL+/:tz8ydMcm59jThsk+/HJA31p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742765591, "uuid": "148d906d-e2a3-4aa3-8079-c5da5059dea7", "value": 56044, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765591, "uuid": "937da37a-96ad-4945-9a3a-eca2771b339a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b520682-082e-11f0-8aea-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742765591, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765591, "uuid": "48b9e873-8757-47bd-9a0e-81a52e311a52", "comment": "Malware payload (Mirai)", "value": "134f14751151531895292bffbf79a9a0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765591, "uuid": "416ad028-87e1-4c2d-bb81-5d36dbeb57cc", "comment": "Malware payload (Mirai)", "value": "7f36625094dd92376871f6c693753054eeac3675713685482c614dfe11b0eaaa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765591, "uuid": "505aefeb-c940-4e0a-aee9-3cc160c15613", "value": "T160433A29D203D9F0EC4609B0216BF77AA631AC652634DEE7E7C9FA63ADB170154433", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765591, "uuid": "5e4fa343-ec9d-45ae-9962-c007c1fc5900", "value": "768:SRreUGhWdwd4wMK3fQRdwdcCL9XjAd2GYwucTxDG/8U7SfxKG2mjqyhzZrL79yfX:HhWdw33fQRdOpjmYuTprU7SCyhFrI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742765591, "uuid": "53b4da43-8f8a-4ac7-b38d-b957ee2d26d1", "value": 57940, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765591, "uuid": "fb654fd9-db72-4b96-a216-ed06035155d9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b53d194-082e-11f0-8aea-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742765591, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765591, "uuid": "324512fd-e692-4990-a404-b10e15855a04", "comment": "Malware payload (Mirai)", "value": "cb0d1a1fe3048df4e68a961a4a02b5f1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765591, "uuid": "5999ca59-d2d3-4410-a7ca-d5a85a858f12", "comment": "Malware payload (Mirai)", "value": "ba8a29094ff34d523f7cc612095fb1109b3c45758d319ce5153c19fb1c8cd914", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765591, "uuid": "458eefc3-7a61-4ef7-9eaf-da62da960b4c", "value": "T12253E846B8918F11D5D462BBFE2E118D332263ACE2DFB2239D105F1067C792B0E7BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765591, "uuid": "f259c216-5f85-4187-bffb-75ad88ab5ac8", "value": "1536:4dnr6+KZbwEr3smrVWXk/ZaYaQTKLfIDi6b2PKWzVpG:pJZMi3HJpHlb2PKWz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742765591, "uuid": "8337a409-84b2-4f77-b3c3-2bf7fc5c466c", "value": 66688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765591, "uuid": "068aa321-344f-4f22-b9a1-ff8cf0570e9a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8d25e618-082e-11f0-8aea-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742765647, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765647, "uuid": "a8270f9d-a0b9-4e9c-9e4f-856f1e97a597", "comment": "Malware payload (Mirai)", "value": "8720d274f130d20835785f90591ed87d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765647, "uuid": "22f4ff7d-c394-4ee3-b672-1d2f6c21b2a1", "comment": "Malware payload (Mirai)", "value": "bd9a85defb1ef4140f80c45fca01e629ad07d37e0510542f781b0509d8c5c232", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765647, "uuid": "a26802e8-1eac-4a76-9ad3-5b341f975c8a", "value": "T1C233070BA84180FDD49DC57027BA763AD07370FD1738B2A637D4FF266A4AE211E8E6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765647, "uuid": "10f272a2-592c-484c-96db-2acf8fc39057", "value": "1536:uJBp5q0B5eco7xzMmmNFt2i6gZUIwpZs:4f5q0KP7xgPNFt4gdwp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742765647, "uuid": "45ff5852-afa8-4ba0-91ad-945057c7f5e3", "value": 54752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765647, "uuid": "c45cc585-1765-4eb1-9c3d-2c460b5b99da", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d4949b24-0832-11f0-8aea-82aee05be84a", "comment": "Malware payload", "timestamp": 1742767485, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742767485, "uuid": "99dccb88-6031-4de2-89d7-7e87242ed5f2", "comment": "Malware payload", "value": "c14b7c69c3db36b8a32295be93275ddf", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742767485, "uuid": "082e9839-37f9-4e06-a853-d670bfd0185c", "comment": "Malware payload", "value": "d191919ff4ced60ec9796d5292992fb0f97e220a93c081e79bedf0ebbc15ae07", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742767485, "uuid": "5ab6a0e2-e69b-4615-bfe8-14a21a5d35e9", "value": "T14CA512EEBE842D4ED814E03184EA5523197490C439738546AB7BC36A476D7B82BFD8", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742767485, "uuid": "c69d0d5b-217f-4e9b-90d4-ac6ea03f9c12", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742767485, "uuid": "72890876-1279-43b6-93dd-b9f01866d7b9", "value": "49152:YPzIayVUYEvZhRHnIddPfRlL1V6/C4l+fEvs:8IpyDHIPfnLS6CSes", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742767485, "uuid": "87653654-601e-4583-bb0f-6d8778ae13d8", "value": 2071552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742767485, "uuid": "9ebff536-62f1-4aa0-a141-e9a2d4906460", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df266526-0833-11f0-8aea-82aee05be84a", "comment": "Malware payload", "timestamp": 1742767932, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742767932, "uuid": "0b8b78e8-764f-432f-889a-91381a083ce1", "comment": "Malware payload", "value": "fb6876711f6b8dc3b3a77eca6cfe18ad", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742767932, "uuid": "aef667ad-2039-4333-a576-68063cef6773", "comment": "Malware payload", "value": "282e31723283def9fc60bb1818f2e29d4a2c9a3e499e8b37e90b880bde03e49c", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742767932, "uuid": "0fc5821f-d994-44ce-9c05-b62c961e1bb6", "value": "T1DB953328AF1CAADAC583E37CDDD3C098C7B44F84258D8DDE6B99D0B46067B9809532", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742767932, "uuid": "40c1ddc6-ea41-4192-8f7b-98603a073f6c", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742767932, "uuid": "e2bbfc4d-e213-4a96-bdba-6932db15b85d", "value": "49152:9SfQucSYVguFB6PN0imvQVMkrqRL+MFgRrEyooQ:AfNcSYvFwFgv+MkraSRXoo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742767932, "uuid": "b5f503f1-e173-48f4-9dfa-f0383d6de86a", "value": 1903104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742767932, "uuid": "e20564fb-eaaf-434b-9ba9-3f00550fa664", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1849ab32-0834-11f0-8aea-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1742768028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742768028, "uuid": "688335e1-e2c7-4918-92fb-9e12d1fe1f15", "comment": "Malware payload (CredentialFlusher)", "value": "8d85ccedc6cef58e5a02427525dfbc50", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742768028, "uuid": "e219ab8f-950e-4d9e-ad30-44d43ec6fc9d", "comment": "Malware payload (CredentialFlusher)", "value": "8f2ec0373dcc70e378714a51396f73db1d6ef8705ec24dcbc53625ec3d03e5a7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742768028, "uuid": "314b87b3-f62d-4de3-8579-51135f98d95b", "value": "T160259E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742768028, "uuid": "d2bd6a60-ff85-48e4-afc7-ec5123fe3b6f", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742768028, "uuid": "9c6044ed-aa31-4a03-bb15-173751b53a68", "value": "24576:HqDEvCTbMWu7rQYlBQcBiT6rprG8arrU4:HTvC/MTQYxsWR7arrU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742768028, "uuid": "e4dc01e3-0761-4d61-a669-3df7d938e6ac", "value": 969216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742768028, "uuid": "7bfc60f1-4b6e-4f03-8646-d9a86de58ede", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1742771051, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742771051, "uuid": "2749f602-3fba-4357-98e1-589acad01e42", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742771051, "uuid": "00ecbea2-4376-4569-8a05-e46de191dd88", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742771051, "uuid": "d16d9f8b-fa94-46f3-8c25-9199f9fdc1f3", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742771051, "uuid": "5669c332-62fb-48e4-a461-beb297080b5c", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742771051, "uuid": "b3d4b2ca-c5dc-45ec-bd9a-4899743ee411", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0a5b967e-083c-11f0-8aea-82aee05be84a", "comment": "Malware payload", "timestamp": 1742771441, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742771441, "uuid": "27568967-c86b-4854-87c0-bc0de3ffbbfd", "comment": "Malware payload", "value": "064b2be32919cb0fbf3167406d1ee84a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false }, { "name": "snojan", "colour": "#e8bdf9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742771441, "uuid": "742423a6-b26e-488a-97b2-7a022184040a", "comment": "Malware payload", "value": "a8f98112b9ae05da6d4768ba8376f8a816b5d80cb1b497b873e8c26f9430f05b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false }, { "name": "snojan", "colour": "#e8bdf9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742771441, "uuid": "dd278852-69dd-42a2-ba4c-7d42eaa69ac0", "value": "T1FB26330E77503625EE4C46337EA391092371BE3C26AF62FA5D25BB3C469F11649E2E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1742771441, "uuid": "df1766ca-4435-48cb-8c5e-fb7f4f2264e8", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742771441, "uuid": "8c8c02b5-ff21-4291-a27a-901980895df8", "value": "98304:aF8C/FXNJBbqk0KsZqxtp2XosxlCdumexOQvPjLZgVsxIYJnXsN:OR/FLVqKsZqoXoAlzxXvbft", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742771441, "uuid": "bff86d47-7cba-4f8e-b871-16428ab2ffb6", "value": 4684800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742771441, "uuid": "5556b6de-b31c-4425-bd6a-fcf0c97305b8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "640997df-083f-11f0-b0af-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1742772880, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1742772880, "uuid": "e92ce42e-78a7-4fba-a8b7-5bfcd7b37f25", "comment": "Malware payload (Mirai)", "value": "76b844babf7386f4e44a4e385aff6d33", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1742772880, "uuid": "f829d007-83ab-4af2-acfa-89935a264124", "comment": "Malware payload (Mirai)", "value": "766b21b6f1fcd9551e519174dd076aed2093d859bb120fcb5de02b5384d4ad9e", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1742772880, "uuid": "29d901b3-f74d-4c5d-aaa1-7427ee5e4c7c", "value": "T1A0D2E0A0C5FC0E67F105173922183CADA6B9AEC71D4BA4EB6E47CDD948A216503F5C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1742772880, "uuid": "4cfd4896-7bfd-4170-bd8a-60a53b145638", "value": "768:QyRiGvxEDcUzh4hwDHlZ/kANp9Ij2Lyek:LcGveYUdzMyI2LyZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1742772880, "uuid": "b2298bd6-a032-45c4-96cd-9d4acf034332", "value": 30228, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1742772880, "uuid": "8f42ddee-9229-4b74-8d26-d28b104b10bc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742688031, "uuid": "d65ed8f8-0779-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.31.219:36660/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742688070, "uuid": "ed8f1e2d-0779-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.8.77:37416/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742688189, "uuid": "345e7bbd-077a-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://69.23.253.119:59047/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742688191, "uuid": "35d7647b-077a-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.190.15:54447/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742688197, "uuid": "39106070-077a-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.5.11.91:59499/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742688218, "uuid": "45b048c3-077a-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.152.103:51725/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742688218, "uuid": "45b06662-077a-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.107.0.204:41976/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742688218, "uuid": "45b367e3-077a-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.149:11315/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742688219, "uuid": "46138440-077a-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.75.113.210:45875/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742688219, "uuid": "4613b210-077a-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.10.157.71:51459/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742688219, "uuid": "46490394-077a-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.98.38.182:35625/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742688219, "uuid": "4659fca3-077a-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.49.130:42347/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742688248, "uuid": "5795348a-077a-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.211:11788/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742688249, "uuid": "581d817e-077a-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.159.96.179:43180/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742688259, "uuid": "5ddee70e-077a-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.208.105.4:37316/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742688278, "uuid": "69ad07a7-077a-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.180.45:37981/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742688278, "uuid": "69be8489-077a-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.244.73.161:11301/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742688377, "uuid": "a4723e58-077a-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.194.37:42917/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742688556, "uuid": "0f56efaa-077b-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.175.64.204:39060/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742688558, "uuid": "10387e73-077b-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.242.142:53908/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742688570, "uuid": "179b8b4c-077b-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.173.45:45963/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742688612, "uuid": "30a0c0b5-077b-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.6.125.95:50540/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742688675, "uuid": "5659d187-077b-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.140.2:43556/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742688796, "uuid": "9e288c6a-077b-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.9.133:59684/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742688796, "uuid": "9e289ea4-077b-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.119.91:59800/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742688858, "uuid": "c34faf9e-077b-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.dormitoryzoom.shop/hofhu533ek.mp3", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742688930, "uuid": "ee1e002e-077b-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.224.75:56256/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742688972, "uuid": "06e79bec-077c-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.21.68:34140/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742689102, "uuid": "547a6a4c-077c-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.31.219:36660/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742689102, "uuid": "54bdc572-077c-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.152.32:49581/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742689153, "uuid": "72cde55e-077c-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.231.153.86:36645/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742689160, "uuid": "76ffdc62-077c-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.209.238:44520/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742689220, "uuid": "9b25da10-077c-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.12.234:46792/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742689344, "uuid": "e4cf583f-077c-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.70.96:49553/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742689381, "uuid": "faad963e-077c-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.34.30:33089/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742689451, "uuid": "24d50b81-077d-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.91.109:50809/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742689754, "uuid": "d96a128f-077d-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.178.6.239:55854/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742689990, "uuid": "65c3b840-077e-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.194.37:42917/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742690053, "uuid": "8b3000c5-077e-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.27.106:44519/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742690065, "uuid": "92df0635-077e-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.233.169:40919/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742690295, "uuid": "1ba6b9bf-077f-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.70.96:49553/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742690295, "uuid": "1ba6c065-077f-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.24.159.163:49965/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742690296, "uuid": "1c0c8bc6-077f-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.234.75:57656/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742690296, "uuid": "1c23c514-077f-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.192.157.118:45910/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742690351, "uuid": "3d3da121-077f-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.152.32:49581/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742690379, "uuid": "4de569a2-077f-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.117.2:49171/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742690528, "uuid": "a66b8dc0-077f-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.211.226.32:47822/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742690596, "uuid": "cef4e39b-077f-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.52.252:37994/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742690596, "uuid": "cf28eee9-077f-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.219.145:60155/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742690652, "uuid": "f06ede7c-077f-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.87.125:46515/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742690953, "uuid": "a3f79b44-0780-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.146.69.83:34720/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742691072, "uuid": "ea9f3c25-0780-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.6.102.253:52726/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742691130, "uuid": "0da4ce77-0781-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.73.83:48106/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742691374, "uuid": "9efcd431-0781-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.73.20:36837/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742691428, "uuid": "bf0c0a4e-0781-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.74.129:49885/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742691428, "uuid": "bf22fd19-0781-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.192.157.118:45910/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742691517, "uuid": "f41c6e59-0781-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.117.2:49171/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742691555, "uuid": "0a7dd8b2-0782-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.50.68:34957/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742691555, "uuid": "0a8e8231-0782-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.27.106:44519/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742692034, "uuid": "285171be-0783-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.35.8:39912/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742692096, "uuid": "4d2c6a58-0783-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.233.169:40919/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742692359, "uuid": "e9dc7201-0783-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.52.252:37994/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742692460, "uuid": "2609201d-0784-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.dormitoryzoom.shop/71qrf5eoak.mp3", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742692752, "uuid": "d3ea5a00-0784-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.251.0.136:46400/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742692871, "uuid": "1b04ba08-0785-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.192.34.149:51826/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742693052, "uuid": "86b562b4-0785-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.232.3.106:60812/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742693232, "uuid": "f24ff1fd-0785-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.73.20:36837/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742693250, "uuid": "fd060922-0785-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.56.155:34174/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742693472, "uuid": "81629aa2-0786-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.86.202:37238/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742693610, "uuid": "d37ffc1e-0786-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.253.104.203:53768/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742693651, "uuid": "ebc25262-0786-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.35.8:39912/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742693654, "uuid": "ede62ecc-0786-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.188.91.108:60478/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742694131, "uuid": "0a0893fd-0788-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.154.208:53241/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742694267, "uuid": "5b761876-0788-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.84.88:45991/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742694311, "uuid": "758ea2d8-0788-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.251.0.136:46400/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742694374, "uuid": "9b3a58bd-0788-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.197.69:33012/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742694437, "uuid": "c06bcd64-0788-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.87.240.121:51939/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742694488, "uuid": "df17f32a-0788-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.236.248:45856/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742694489, "uuid": "df607536-0788-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.86.202:37238/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742694549, "uuid": "0338d4ee-0789-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.192.34.149:51826/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742694610, "uuid": "27d548e1-0789-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.232.3.106:60812/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742694851, "uuid": "b7547c03-0789-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.32.162.27/lmaoWTF/loligang.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742694851, "uuid": "b7549d51-0789-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.32.162.27/lmaoWTF/loligang.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742694852, "uuid": "b7fb0590-0789-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.241.37:53021/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742694914, "uuid": "dce11a78-0789-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.32.162.27/lmaoWTF/loligang.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742694914, "uuid": "dce12016-0789-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.32.162.27/lmaoWTF/loligang.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742694914, "uuid": "dce124a5-0789-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.32.162.27/lmaoWTF/loligang.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742694914, "uuid": "dce1470e-0789-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.32.162.27/lmaoWTF/loligang.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742694972, "uuid": "ff1b4e68-0789-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.32.162.27/lmaoWTF/loligang.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742695031, "uuid": "224b4af2-078a-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.32.162.27/lmaoWTF/loligang.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742695031, "uuid": "224b5893-078a-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.32.162.27/lmaoWTF/loligang.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742695390, "uuid": "f8d184ab-078a-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.253.104.203:53768/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742695453, "uuid": "1e5b427e-078b-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.82.42:43085/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742695468, "uuid": "2708dc8a-078b-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.236.100:55513/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742695520, "uuid": "45e33b11-078b-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.175.88.177:37330/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742695811, "uuid": "f35ca52a-078b-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.80.224:39382/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742695996, "uuid": "619df2ff-078c-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.146.69.83:34720/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742696051, "uuid": "82614f72-078c-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.dormitoryzoom.shop/f503mlg6cf.mp3", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742696115, "uuid": "a876846d-078c-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.87.240.121:51939/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742696115, "uuid": "a8768729-078c-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.84.88:45991/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742696234, "uuid": "ef9645f6-078c-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.70.189.103:42123/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742696292, "uuid": "1273a99f-078d-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.140.110:52580/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742696359, "uuid": "3a4806f9-078d-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.175.8.25:48686/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742696376, "uuid": "44255da5-078d-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.215.252:39644/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742696414, "uuid": "5ad5b957-078d-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.199.138:57756/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742696533, "uuid": "a1cc646f-078d-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.24.176.168:49166/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742696715, "uuid": "0e90ac22-078e-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.88.11:48889/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742696838, "uuid": "57cff066-078e-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.255.139.110:52251/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742696955, "uuid": "9d15339e-078e-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.241.37:53021/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697074, "uuid": "e442811c-078e-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.198.193:55857/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697134, "uuid": "0825597e-078f-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.82.42:43085/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697255, "uuid": "4feb2032-078f-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.32.223:44648/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697316, "uuid": "74ca1bbc-078f-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.224.166.68/sshd", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697317, "uuid": "74d39017-078f-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.44.132.155:8080/sshd", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697317, "uuid": "74e2fbff-078f-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.52.157.210/sshd", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697317, "uuid": "74f29943-078f-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.65.121:2003/sshd", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697318, "uuid": "756cf8ea-078f-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.50.73.171:9301/sshd", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697318, "uuid": "756dce6f-078f-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.205.241.163:4212/sshd", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697318, "uuid": "756dfcdd-078f-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.159.30.59:50005/sshd", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697318, "uuid": "75afade7-078f-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.200.2.217:8080/sshd", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697318, "uuid": "75c21c77-078f-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.40.119.59:8001/sshd", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697318, "uuid": "75c26a4c-078f-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://161.81.123.63/sshd", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697318, "uuid": "75c5f668-078f-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.191.153.3:10004/sshd", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697318, "uuid": "75c66198-078f-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.110.189.39/sshd", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697319, "uuid": "76946f9e-078f-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.47.8.11:9000/sshd", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697320, "uuid": "76bad825-078f-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.182.106.234/sshd", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697320, "uuid": "76d79ff3-078f-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.171.132.45/sshd", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697320, "uuid": "76d7caae-078f-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://161.81.123.64/sshd", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697338, "uuid": "81b3aaab-078f-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.200.168.67:8080/sshd", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697363, "uuid": "90923cf1-078f-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.244.68.119:8082/sshd", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697435, "uuid": "bb8c4cd0-078f-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.211.240:48879/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697498, "uuid": "e139e819-078f-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://voozaak.ru/Documents/plplo5.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697499, "uuid": "e14da479-078f-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://voozaak.ru/Documents/testo2.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697499, "uuid": "e14dab13-078f-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://voozaak.ru/Documents/testo.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697556, "uuid": "035f2420-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.80.224:39382/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697556, "uuid": "03b578b3-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.47.211.208:21180/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697557, "uuid": "03e41c23-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.231.18.9:62605/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697557, "uuid": "0441fb08-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.29.232.203:37255/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697557, "uuid": "0442c615-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.44.250:9000/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697557, "uuid": "04503e20-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://49.71.68.52:50995/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697558, "uuid": "047d5fac-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.131.119.70:50389/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697558, "uuid": "0489642f-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://86.41.214.182:6135/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697558, "uuid": "04c3139b-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.143.49.217:20034/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697559, "uuid": "055cdae1-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.24.166.28:3080/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697559, "uuid": "055cdb20-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.31.188.138:39786/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697559, "uuid": "05785141-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.177.219.239:56281/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697559, "uuid": "0596e5e3-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.12.53.190:7001/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697559, "uuid": "0596ff84-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.18.229.76:5432/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697559, "uuid": "05972a8d-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://131.100.34.174:27424/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697559, "uuid": "0597352f-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.184.123.45:6362/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697559, "uuid": "059752b8-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.19.47.16:5452/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697559, "uuid": "05976083-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.215.100.6:1099/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697559, "uuid": "0597699e-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.196.99.168:64040/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697559, "uuid": "05976da9-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.149.223.80:26179/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697560, "uuid": "05aa4bcd-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.27.81.143:35510/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697560, "uuid": "05af14a9-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.239.196.94:1913/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697560, "uuid": "05c9e36c-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.47.103.116:48643/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697560, "uuid": "05d5fc17-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.115.101.244:32242/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697560, "uuid": "05da89a7-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.34.29.129:21945/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697560, "uuid": "05da9003-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.176.73.92:6218/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697562, "uuid": "06df4d99-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.115.101.20:32242/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697565, "uuid": "08bd2168-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.18.196.217:65003/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697568, "uuid": "0a6cc883-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.235.249.197:5984/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697577, "uuid": "0fdd928a-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.18.203:50580/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697581, "uuid": "12b3b2a9-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.213.175.184:25565/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697615, "uuid": "269aa02b-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.6.209.99:46313/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697676, "uuid": "4b59e07c-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.24.176.168:49166/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697853, "uuid": "b464cdf9-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.98.101:53846/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697976, "uuid": "fe2f7f2d-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.245.211.199/bins/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697977, "uuid": "fe417431-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.245.211.199/bins/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697977, "uuid": "fe418251-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.245.211.199/bins/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697977, "uuid": "fe41864d-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.245.211.199/bins/spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697977, "uuid": "fe418b63-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.245.211.199/phantom.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697977, "uuid": "fe418d0e-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.245.211.199/bins/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697977, "uuid": "fe419220-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.245.211.199/bins/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697977, "uuid": "fe4195c5-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.245.211.199/bins/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697977, "uuid": "fe419806-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.245.211.199/bins/arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697977, "uuid": "fe419983-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.245.211.199/bins/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697977, "uuid": "fe41a08d-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.245.211.199/bins/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697977, "uuid": "fe41a1b8-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.245.211.199/bins/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742697977, "uuid": "fe41a293-0790-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.245.211.199/bins/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698032, "uuid": "1f07ce91-0791-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.140.110:52580/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698092, "uuid": "430ca7d3-0791-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.76.43:53241/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698092, "uuid": "430cf77b-0791-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.175.8.25:48686/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698092, "uuid": "433e3492-0791-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.81.236.226:44713/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698148, "uuid": "645d7109-0791-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.121.13.205/hidakibest.sh", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698149, "uuid": "65362774-0791-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.121.13.205/hidakibest.ppc", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698149, "uuid": "653631fe-0791-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.121.13.205/hidakibest.mips", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698149, "uuid": "653633ba-0791-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.121.13.205/hidakibest.arm4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698149, "uuid": "653640e2-0791-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.121.13.205/hidakibest.arm6", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698149, "uuid": "65364ff3-0791-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.121.13.205/hidakibest.x86", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698149, "uuid": "65365240-0791-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.121.13.205/hidakibest.mpsl", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698149, "uuid": "65366430-0791-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.121.13.205/hidakibest.sparc", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698149, "uuid": "654296da-0791-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.121.13.205/hidakibest.arm5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698635, "uuid": "86e7e79d-0792-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.3.75:51246/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698756, "uuid": "cedcc34b-0792-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.27.155.194:46074/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698925, "uuid": "3394d943-0793-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitbucket.org/mcafee-online/hodh009/downloads/output.bin", "Tag": [ { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698929, "uuid": "3600590c-0793-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitbucket.org/mcafee-online/hodh009/downloads/ConsoleApp1.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698929, "uuid": "360089e2-0793-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitbucket.org/mcafee-online/hodh009/downloads/XClient2.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698929, "uuid": "36009351-0793-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitbucket.org/mcafee-online/hodh009/downloads/encrypted.bin", "Tag": [ { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698929, "uuid": "3600ad14-0793-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitbucket.org/mcafee-online/hodh009/downloads/output_encrypted.bin", "Tag": [ { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698929, "uuid": "3600ae79-0793-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitbucket.org/mcafee-online/hodh009/downloads/loader_encrypted.bin", "Tag": [ { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698929, "uuid": "3600c2e1-0793-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitbucket.org/mcafee-online/hodh009/downloads/XClient3.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698929, "uuid": "3600cbbd-0793-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitbucket.org/mcafee-online/hodh009/downloads/loader.bin", "Tag": [ { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698989, "uuid": "59e415e0-0793-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.159.96.179:43779/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698990, "uuid": "5a32a07a-0793-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.72.186:41339/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698992, "uuid": "5b93eb40-0793-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.28.185:48642/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698992, "uuid": "5b93f1b7-0793-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.83.130:39062/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698993, "uuid": "5c279585-0793-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.1.57:52660/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698994, "uuid": "5cdaa552-0793-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.5.0.4:47220/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698996, "uuid": "5e25133c-0793-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.70.19:48708/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698997, "uuid": "5e9835cb-0793-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.180.147.72:57501/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742698999, "uuid": "5fac4d19-0793-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.95.91:47685/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742699003, "uuid": "6232259e-0793-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.207.125.45:51886/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742699005, "uuid": "6384abea-0793-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.125.255:57679/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742699010, "uuid": "666b7926-0793-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.2.100:52956/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742699015, "uuid": "68f0fdfa-0793-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.105.116:43972/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742699019, "uuid": "6ba9b1c7-0793-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.180:11150/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742699019, "uuid": "6ba9b88a-0793-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.203.187:56833/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742699020, "uuid": "6c07bfbf-0793-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.10.158.78:43165/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742699020, "uuid": "6c07c038-0793-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.128:11859/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742699131, "uuid": "ae103eec-0793-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.16.223:33298/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742699235, "uuid": "ec86d184-0793-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.98.101:53846/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742699235, "uuid": "ec9e55e4-0793-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.77.168:39531/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742699368, "uuid": "3bb74fcb-0794-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.112.174:42332/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742699370, "uuid": "3ce60c4f-0794-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.100.94:38588/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742699658, "uuid": "e85e2cf1-0794-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.16.223:33298/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742699659, "uuid": "e90eec36-0794-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.dormitoryzoom.shop/87tn6hc3hc.mp3", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742699775, "uuid": "2e1fdb28-0795-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.201.122:54421/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742699899, "uuid": "78341446-0795-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.3.229:37157/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742700319, "uuid": "72b1680b-0796-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.188.91.108:60478/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742700507, "uuid": "e2c50e8d-0796-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.3.75:51246/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742700560, "uuid": "01f3fd87-0797-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.152.30:47946/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742700688, "uuid": "4e9f9600-0797-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.100.94:38588/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742700732, "uuid": "68909cc1-0797-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.112.174:42332/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742700797, "uuid": "8f3b59cc-0797-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.81.120:39829/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742700912, "uuid": "d3ea9a74-0797-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.54.194:48152/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742700913, "uuid": "d4644f36-0797-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.125.50:46301/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742701030, "uuid": "1a14c22b-0798-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.3.229:37157/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742701091, "uuid": "3ec7a43d-0798-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.56.199:50097/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742701091, "uuid": "3ed7f9d4-0798-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.100.197:39339/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742701214, "uuid": "87c8b44f-0798-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.159.77:51663/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742701276, "uuid": "acd8c2a8-0798-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.94.132:52199/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742701376, "uuid": "e847147f-0798-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.25.94:36004/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742701394, "uuid": "f3606932-0798-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.140.0.63:58145/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742701454, "uuid": "16ab44d1-0799-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.82.0:45299/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742701570, "uuid": "5bd3583e-0799-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.242.106.12:54419/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742701646, "uuid": "891f7879-0799-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.174.137:44055/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742701913, "uuid": "2881f333-079a-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.23.112:43311/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742701991, "uuid": "572d2312-079a-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.125.50:46301/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742702114, "uuid": "a09b537e-079a-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.13.146:49284/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742702117, "uuid": "a1d64497-079a-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.179.9.0:51394/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742702319, "uuid": "1a936319-079b-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.107.28:43912/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742702352, "uuid": "2e621016-079b-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.54.194:48152/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742702480, "uuid": "7a743409-079b-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.198.193:55857/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742702642, "uuid": "db579dd6-079b-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.4.165:34884/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742702715, "uuid": "06c8446c-079c-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.159.77:51663/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742702895, "uuid": "71ba165f-079c-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.140.0.63:58145/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742702960, "uuid": "987d780e-079c-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.94.132:52199/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742702960, "uuid": "988cd369-079c-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.174.137:44055/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742702979, "uuid": "a3f01d42-079c-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.177.189:35570/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742703016, "uuid": "b9d1b5e8-079c-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.69.61.200:45128/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742703016, "uuid": "b9d1ba3e-079c-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.82.0:45299/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742703258, "uuid": "49ef2bc8-079d-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.dormitoryzoom.shop/ew73q9rvx3.mp3", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742703441, "uuid": "b73569dd-079d-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.242.106.12:54419/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742703490, "uuid": "d48fdf3f-079d-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.151.19:42083/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742703549, "uuid": "f7c757f9-079d-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.13.146:49284/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742703614, "uuid": "1e80ad91-079e-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.69.61.200:45128/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742703752, "uuid": "7099918d-079e-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.159.28:36125/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742704034, "uuid": "18bc43c2-079f-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.179.9.0:51394/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742704091, "uuid": "3a706aef-079f-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.4.165:34884/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742704178, "uuid": "6e7458fd-079f-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.91.99:57763/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742704222, "uuid": "890475dc-079f-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.244.253:40175/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742704341, "uuid": "cfe6de1d-079f-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.247.148.128:19796/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742704452, "uuid": "12001edd-07a0-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.14.124:34764/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742704457, "uuid": "14e53047-07a0-11f0-9a93-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.110.85:35114/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742705106, "uuid": "9785d319-07a1-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.91.99:57763/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742705106, "uuid": "978f86b4-07a1-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.14.124:34764/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742705130, "uuid": "a60d00ae-07a1-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.95.51:58677/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742705241, "uuid": "e8200076-07a1-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.187.127:58709/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742705645, "uuid": "d8dd8b61-07a2-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.159.91.2:38516/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742705840, "uuid": "4d68c365-07a3-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.216.39:42750/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742705886, "uuid": "6890eaea-07a3-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.116.170.52:65353/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742706006, "uuid": "aff2689d-07a3-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.3.165:60503/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742706154, "uuid": "089db80f-07a4-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.177.5:46384/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742706246, "uuid": "3f212ae0-07a4-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.157.84:38832/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742706305, "uuid": "6258045a-07a4-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.97.4:34251/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742706484, "uuid": "cd2375e0-07a4-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.244.253:40175/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742706546, "uuid": "f1e670fb-07a4-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.32.119:40893/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742706681, "uuid": "42589295-07a5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.235.132:33907/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742706785, "uuid": "809bb39c-07a5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.202.45:42073/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742706845, "uuid": "a3fdf22a-07a5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.187.127:58709/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742706845, "uuid": "a4242c07-07a5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.dormitoryzoom.shop/osaqogmxob.mp3", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742707085, "uuid": "33487882-07a6-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.159.91.2:38516/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742707085, "uuid": "338cf40f-07a6-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.3.165:60503/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742707685, "uuid": "98b23094-07a7-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.177.5:46384/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742707866, "uuid": "04992ff8-07a8-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.92.191:44286/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742707927, "uuid": "290ae497-07a8-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.32.119:40893/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742708045, "uuid": "6f52c482-07a8-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.97.4:34251/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742708047, "uuid": "70840f6d-07a8-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.95.51:58677/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742708108, "uuid": "94dc6797-07a8-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.33.217:52544/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742708350, "uuid": "2565c75c-07a9-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.0.147:60002/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742708468, "uuid": "6b7e90e4-07a9-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.167.165.167:35340/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742708528, "uuid": "8f51953b-07a9-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.73.126.255:46200/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742708593, "uuid": "b64c7b08-07a9-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.83.242:53742/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742708708, "uuid": "fab25d41-07a9-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.202.45:42073/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742708950, "uuid": "8ab93a1e-07aa-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.117.232:37609/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742709127, "uuid": "f4535c6b-07aa-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.235.132:33907/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742709187, "uuid": "184bef4e-07ab-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.33.217:52544/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742709515, "uuid": "dbb3f835-07ab-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.224.108:54576/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742709550, "uuid": "f0719e5e-07ab-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.8.232:34771/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742709791, "uuid": "7ffe3f87-07ac-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.81.143:57930/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742709791, "uuid": "800d4f55-07ac-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.84.139.188:55104/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742709816, "uuid": "8f29b9bc-07ac-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.126:10834/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742709816, "uuid": "8f36d179-07ac-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.166:10476/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742709816, "uuid": "8f36d4d6-07ac-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.20.246:49226/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742709816, "uuid": "8f36d631-07ac-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.123:11659/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742709817, "uuid": "8fd99db8-07ac-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.46.247.218:52959/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742709817, "uuid": "8fd99db3-07ac-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.128.38:53180/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742710028, "uuid": "0d80705c-07ad-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.167.165.167:35340/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742710032, "uuid": "100eff3f-07ad-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.227.28:56226/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742710329, "uuid": "c0d4e802-07ad-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.139.87:60983/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742710451, "uuid": "09622610-07ae-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.dormitoryzoom.shop/iqdwjvguww.mp3", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742710510, "uuid": "2cfc7df3-07ae-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.233.69:51961/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742710603, "uuid": "6434895e-07ae-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.150.89:42919/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742710626, "uuid": "71ead4b6-07ae-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.205.81:55455/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742710686, "uuid": "95c6e8ba-07ae-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.73.126.255:46200/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742711286, "uuid": "fb6ea93f-07af-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.156.236:43832/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742711291, "uuid": "fdfb0500-07af-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://parallels.ltd/downloads/Installer.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742711408, "uuid": "43ee3b4c-07b0-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.47.13:41500/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742711465, "uuid": "661911d0-07b0-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.227.28:56226/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742711466, "uuid": "66c04fc0-07b0-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.139.87:60983/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742711706, "uuid": "f597b571-07b0-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.150.89:42919/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742711706, "uuid": "f5e30f75-07b0-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.233.69:51961/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742712127, "uuid": "f0a25e28-07b1-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.23.31:54493/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742712486, "uuid": "c67af0ff-07b2-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.112.240:51902/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742712664, "uuid": "30ee1055-07b3-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.156.236:43832/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742712726, "uuid": "556c049f-07b3-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://healthy-deemed-essays-opens.trycloudflare.com/mp3.bat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742712727, "uuid": "56337ab1-07b3-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://healthy-deemed-essays-opens.trycloudflare.com/1YSNAGHSA/RE_0639273740212.pdf.lnk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742712727, "uuid": "56338fad-07b3-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://healthy-deemed-essays-opens.trycloudflare.com/2YSNAHSJAJD/RE_00740936439473.pdf.lnk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742712739, "uuid": "5d3c6813-07b3-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://healthy-deemed-essays-opens.trycloudflare.com/ta.msi", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742713146, "uuid": "4fbc9739-07b4-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.160.132:41641/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742713268, "uuid": "989278b5-07b4-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.53.92:44655/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742713325, "uuid": "ba584679-07b4-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.23.31:54493/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742713325, "uuid": "ba60398d-07b4-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.11.33:58422/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742713325, "uuid": "bae5b97a-07b4-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.13.69.60:44853/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742713684, "uuid": "90cc13fd-07b5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.112.240:51902/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742713693, "uuid": "960a42fb-07b5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.247.30.16:41118/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742713759, "uuid": "bd8a702b-07b5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.133.152:47361/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742714047, "uuid": "68d05977-07b6-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.dormitoryzoom.shop/gbaxvthz7e.mp3", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742714525, "uuid": "8605fdb3-07b7-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.58.254:44846/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742714542, "uuid": "8ff09517-07b7-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.57.71:35514/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742714765, "uuid": "14cba47f-07b8-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.13.69.60:44853/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742714826, "uuid": "3938a2ae-07b8-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.247.30.16:41118/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742714945, "uuid": "8045efaa-07b8-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.53.92:44655/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742715067, "uuid": "c8c985b3-07b8-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.45.146:55708/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742715364, "uuid": "79cc3e40-07b9-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.89.179:47324/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742715365, "uuid": "7a43d0c7-07b9-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.86.186:60714/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742715365, "uuid": "7a905d26-07b9-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.57.177:42896/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742715485, "uuid": "c21a8074-07b9-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.188.171:41857/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742715485, "uuid": "c2217559-07b9-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.121.23:58050/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742715844, "uuid": "981f9383-07ba-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.188.74.98:34780/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742715845, "uuid": "98a11d51-07ba-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.97.175.69:53936/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742715998, "uuid": "f39a0cbd-07ba-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.80.95:58644/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742716146, "uuid": "4be98054-07bb-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.58.254:44846/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742716231, "uuid": "7e8de5d9-07bb-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.138.94:59472/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742716263, "uuid": "9212d934-07bb-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.188.74.98:34780/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742716264, "uuid": "9245e57e-07bb-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.127.178:36848/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742716326, "uuid": "b755e507-07bb-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.90.49:47023/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742716385, "uuid": "daa40884-07bb-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.170.7:48792/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742716745, "uuid": "b0f49601-07bc-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.154.57:55843/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742716807, "uuid": "d5c6bfc5-07bc-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.133.152:47361/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742717106, "uuid": "883c8075-07bd-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.121.23:58050/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742717165, "uuid": "ab2875f7-07bd-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.57.177:42896/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742717166, "uuid": "abca336f-07bd-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.10.125:39260/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742717408, "uuid": "3c159f36-07be-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.80.95:58644/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742717418, "uuid": "42176592-07be-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.4.111:46576/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742717424, "uuid": "45fb3c74-07be-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.42.210:33089/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742717586, "uuid": "a62a48fa-07be-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.138.94:59472/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742717586, "uuid": "a631c50d-07be-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.97.175.69:53936/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742717646, "uuid": "ca4b3807-07be-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.dormitoryzoom.shop/w9ldo6spgy.mp3", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742718005, "uuid": "a01d016a-07bf-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.90.49:47023/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742718063, "uuid": "c2de1582-07bf-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.45.146:55708/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742718125, "uuid": "e7ebafbd-07bf-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.81.165:51887/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742718185, "uuid": "0b6e23bb-07c0-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.6.192:48931/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742718244, "uuid": "2e97f58c-07c0-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.154.57:55843/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742718485, "uuid": "be38f8d9-07c0-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.170.7:48792/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742718545, "uuid": "e1c7a3eb-07c0-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.116.170.52:65353/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742718545, "uuid": "e1f2a732-07c0-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.201.202:44642/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742718913, "uuid": "bd0ffdf6-07c1-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.10.125:39260/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742719143, "uuid": "46732b0b-07c2-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.dormitoryzoom.shop/45q4hywmi7.mp3/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742719143, "uuid": "467aa9fa-07c2-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.dormitoryzoom.shop/c8c0yzr2ng.mp3/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742719143, "uuid": "467ab092-07c2-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.dormitoryzoom.shop/zywmy14kiq.mp3/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742719143, "uuid": "467ab4e9-07c2-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.dormitoryzoom.shop/pn4pjp1h20.mp3/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742719143, "uuid": "4696b97b-07c2-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.dormitoryzoom.shop/smppqcrzun.mp3/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742719143, "uuid": "469bf683-07c2-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.dormitoryzoom.shop/gbaxvthz7e.mp3/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742719143, "uuid": "469bfb4e-07c2-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.dormitoryzoom.shop/0pjqp722r8.mp3/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742719143, "uuid": "46abdfd9-07c2-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.dormitoryzoom.shop/3pxblqlrcc.mp3/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742719143, "uuid": "46b2a36e-07c2-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://u1.dormitoryzoom.shop/kbt9pbq2qr.mp3", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742719144, "uuid": "46b867d3-07c2-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.dormitoryzoom.shop/0e2yez3naj.mp3/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742719144, "uuid": "46bc1200-07c2-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.dormitoryzoom.shop/7dmej2tbdz.mp3/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742719144, "uuid": "46bc6025-07c2-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.dormitoryzoom.shop/4vetwd26w0.mp3/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742719144, "uuid": "46bcb207-07c2-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.dormitoryzoom.shop/9jhgm4gao6.mp3/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742719144, "uuid": "46bd0e4f-07c2-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.dormitoryzoom.shop/tam21vjt3g.mp3/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742719144, "uuid": "46be7ea9-07c2-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.dormitoryzoom.shop/fqcj89uxe1.mp3/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742719144, "uuid": "46be9576-07c2-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.dormitoryzoom.shop/8twojl66ch.mp3/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742719144, "uuid": "46bea66f-07c2-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.dormitoryzoom.shop/iqdwjvguww.mp3/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742719144, "uuid": "46bec115-07c2-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.dormitoryzoom.shop/hofhu533ek.mp3/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742719144, "uuid": "46bec367-07c2-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.dormitoryzoom.shop/kbt9pbq2qr.mp3/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742719144, "uuid": "46c0518f-07c2-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.dormitoryzoom.shop/iz4ps4liac.mp3/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742719144, "uuid": "46c0eb42-07c2-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.dormitoryzoom.shop/dm3oriol9j.mp3/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742719145, "uuid": "47ab6aef-07c2-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.dormitoryzoom.shop/iueghfjfxc.mp3/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742719145, "uuid": "47b3f1df-07c2-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.dormitoryzoom.shop/2zdz888kme.mp3/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742719145, "uuid": "47b670c9-07c2-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.dormitoryzoom.shop/fnclocgo1s.mp3/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742719145, "uuid": "47c89ae4-07c2-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.dormitoryzoom.shop/o634qa4nta.mp3/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742719205, "uuid": "6b465f4c-07c2-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.dormitoryzoom.shop/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742719353, "uuid": "c36e3f3a-07c2-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.81.165:51887/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742719564, "uuid": "4189be97-07c3-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.111.98.194:58799/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742719626, "uuid": "661d69b0-07c3-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.196.66:42856/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742719653, "uuid": "765d339e-07c3-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.241.79:50218/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742719685, "uuid": "89965708-07c3-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.177.129:16236/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742719808, "uuid": "d2b94ba5-07c3-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.17.2:60719/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742719865, "uuid": "f4b54ef4-07c3-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.217.46:43632/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742719985, "uuid": "3c69d6c5-07c4-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.201.202:44642/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720585, "uuid": "a1f5bef0-07c5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.177.129:16236/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720643, "uuid": "c47a68bd-07c5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.93.20.224/Reader/Build104.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Rhadamanthys", "colour": "#f4ae28", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720643, "uuid": "c487626f-07c5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.168.28.10/003/01/d1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720644, "uuid": "c4fc7b71-07c5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://uplstack-protect.netlify.app/", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720644, "uuid": "c56129b3-07c5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://smarthomecookingtools.com/road/222.html", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720645, "uuid": "c5c5e339-07c5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://updateappdd.com/apps/StartAppIT.ps1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720646, "uuid": "c613e953-07c5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://twitch.cheap/ejnntse.bat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720647, "uuid": "c6d7e406-07c5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-8cc19ee7f6db401b873bdd6baa90c5c2.r2.dev/2.mp3", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720647, "uuid": "c6dc6f90-07c5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.170.22.205/dl19", "Tag": [ { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720648, "uuid": "c787070b-07c5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.91.42/up/uploads/LAP97.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720648, "uuid": "c78dbe86-07c5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://default-web-security.fly.storage.tigris.dev/pass-this-security-check.html?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=tid_owfoTAR_BvLlqAUqxYDAGAIrNaXTLHNPOfPUfoExVRdeGfSSjU%2F20250322%2Fauto%2Fs3%2Faws4_request&X-Amz-Date=20250322T122115Z&X-Amz-Expires=518400&X-Amz-SignedHeaders=host&X-Amz-Signature=c6604863941a9754d294ca78766e9cc92ff578ad4a1e9b26a92c01cfab7a8e8f", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720648, "uuid": "c797f13f-07c5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.91.42/up/uploads/SP/1908.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720648, "uuid": "c7a46b32-07c5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.91.42/up/uploads/SP/1909.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720648, "uuid": "c7a49c93-07c5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.91.42/up/uploads/dsl.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720648, "uuid": "c7a49d18-07c5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.91.42/up/uploads/1909.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720648, "uuid": "c7a4da62-07c5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.91.42/up/uploads/1908.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720648, "uuid": "c7a56d63-07c5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.91.42/up/uploads/rclight.exe", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720648, "uuid": "c7a8cdd2-07c5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.91.42/up/uploads/File.bat", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720649, "uuid": "c80aa1e8-07c5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.93.20.28/test/exe/random.exe", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720649, "uuid": "c821ffdf-07c5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/zenn000000/Roblox-Moon/releases/download/v1.0.2/Release-x64.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720649, "uuid": "c824f706-07c5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.40.172/ohshit.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720649, "uuid": "c82f79dd-07c5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/zenn000000/Roblox-Moon/releases/download/v1.0.1/Release-x64.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720650, "uuid": "c8bd5877-07c5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/chenjee/Roblox-Scriptify/releases/download/v1.0/Application.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720650, "uuid": "c8c3b342-07c5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://boomingdeals.shop/file3.bin", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720650, "uuid": "c8e5ac39-07c5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.91.42/up/uploads/rcpro.exe", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720651, "uuid": "c982df6e-07c5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://bossmart.shop/file2.bin", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720652, "uuid": "c9daf923-07c5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/0926160888/CasualStockScript/releases/download/3.9.6/Release.3.9.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720652, "uuid": "c9f49129-07c5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/sasikaanoj/roblox-fisch-script/releases/download/v2.0.4/robloxfischscript_v204.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720655, "uuid": "cb65579c-07c5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.91.42/up/uploads/SKD.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720655, "uuid": "cbee5dbb-07c5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://kiserman.shop/mysteriousplay.mp3", "Tag": [ { "name": "Lumma", "colour": "#4dc764", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720656, "uuid": "cc0488f9-07c5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://h1.yyoiy.shop/750413b4e6897a671bc759e04597952a0be747830189873b.xlsm", "Tag": [ { "name": "Lumma", "colour": "#4dc764", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720656, "uuid": "cc048934-07c5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://h3.yyoiy.shop/087296f1dee69c2624b2eddca0f347c520eb5afc96080203.vstm", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720656, "uuid": "cc1a96d7-07c5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://i.yeaio.shop/a55fee51fe469b7ed4f23ef3753b380fb548d65f40306962.pptm", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720656, "uuid": "cc38494d-07c5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/abunaj3/abjjd/releases/download/2/2.mp3", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720656, "uuid": "cc57fa34-07c5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://h2.yyoiy.shop/7fbe5fb3ba958a77f17d1d400555809e71d86fe8999830c1.wpd", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720656, "uuid": "cc7a187e-07c5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://hxptlqrz.store/forgot.mp3", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720668, "uuid": "d397ceb7-07c5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://libwaresourcewsd.com/newkl/114.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720711, "uuid": "ed0ce340-07c5-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.91.42/up/uploads/SDR.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720885, "uuid": "548042b9-07c6-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.17.2:60719/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720887, "uuid": "55bb801b-07c6-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/KSCHcuck/sub/blob/main/VBS_Persist.vbs", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720887, "uuid": "55cfcdcf-07c6-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/KSCHcuck/sub/refs/heads/main/VBS_Persist.vbs", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720887, "uuid": "5619a8fa-07c6-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/KSCHcuck/sub/blob/main/microsoft_credz.ps1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720887, "uuid": "5620af28-07c6-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/KSCHcuck/sub/refs/heads/main/microsoft_credz.ps1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742720946, "uuid": "78fef628-07c6-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.241.79:50218/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721082, "uuid": "ca522d93-07c6-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.214.225.11:34237/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721125, "uuid": "e3ec2aad-07c6-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.196.66:42856/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721185, "uuid": "076f2182-07c7-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.111.98.194:58799/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721249, "uuid": "2dda9233-07c7-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.dormitoryzoom.shop/p6nkjo2eyg.mp3", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721291, "uuid": "4683862a-07c7-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.121.242:58790/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721366, "uuid": "73383412-07c7-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.217.46:43632/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721489, "uuid": "bcc9d267-07c7-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.40.172/hiddenbin/boatnet.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721489, "uuid": "bcca0160-07c7-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.40.172/hiddenbin/boatnet.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721489, "uuid": "bcca0589-07c7-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.40.172/hiddenbin/boatnet.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721489, "uuid": "bcca1b21-07c7-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.40.172/hiddenbin/boatnet.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721489, "uuid": "bcca2282-07c7-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.40.172/hiddenbin/boatnet.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721489, "uuid": "bcca2ec0-07c7-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.40.172/hiddenbin/boatnet.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721489, "uuid": "bcca3a78-07c7-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.40.172/hiddenbin/boatnet.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721489, "uuid": "bcca4aa3-07c7-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.40.172/hiddenbin/boatnet.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721489, "uuid": "bcca4f57-07c7-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.40.172/hiddenbin/boatnet.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721489, "uuid": "bcca5fa4-07c7-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.40.172/hiddenbin/boatnet.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721489, "uuid": "bcca6824-07c7-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.40.172/hiddenbin/boatnet.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721506, "uuid": "c6f5d7cb-07c7-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.246.253.5:46599/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721548, "uuid": "dfd94e41-07c7-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.40.172/hiddenbin/boatnet.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721549, "uuid": "e04e5e79-07c7-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.35.133:53964/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721605, "uuid": "01c806ef-07c8-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://check.ugarob.icu/gkcxv.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721606, "uuid": "02baa9ac-07c8-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.254.171:45132/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721848, "uuid": "92f887ae-07c8-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.175.150.157:33334/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742721969, "uuid": "daf2eb02-07c8-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.187.133:50908/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722030, "uuid": "ff35918c-07c8-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.81.236.226:44713/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722116, "uuid": "32a2e2b7-07c9-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.134.201:8080/bejv86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722116, "uuid": "32a2e4f0-07c9-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.134.201:8080/c.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722116, "uuid": "32a2e51d-07c9-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.134.201:8080/vejfa5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722116, "uuid": "32a2e83e-07c9-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.134.201:8080/rjfe686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722116, "uuid": "32a2ed92-07c9-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.134.201:8080/jfeeps", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722116, "uuid": "32a2ede8-07c9-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.134.201:8080/rrrdsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722116, "uuid": "32a2f189-07c9-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.134.201:8080/eehah4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722116, "uuid": "32a2f1a1-07c9-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.134.201:8080/w.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722116, "uuid": "32a2f379-07c9-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.134.201:8080/efefa7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722116, "uuid": "32a2f3f7-07c9-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.134.201:8080/efea6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722173, "uuid": "5490f7c0-07c9-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.134.201:8080/drea4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722173, "uuid": "5490f97f-07c9-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.134.201:8080/vjwe68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722173, "uuid": "54910cc5-07c9-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.134.201:8080/efjepc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722173, "uuid": "549114f7-07c9-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.134.201:8080/weje64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722268, "uuid": "8d149a42-07c9-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.67.94:42050/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722506, "uuid": "1b11859e-07ca-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.214.225.11:34237/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722753, "uuid": "ae3faba5-07ca-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.84.113:53803/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742722898, "uuid": "04b22e01-07cb-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.121.242:58790/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742723048, "uuid": "5dc37c0f-07cb-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.32.51:56047/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742723231, "uuid": "cb376aa8-07cb-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.254.171:45132/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742723232, "uuid": "cb752bd0-07cb-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://211.36.174.179:4195/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742723467, "uuid": "57fdc21c-07cc-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://check.ohuxah.icu/gkcxv.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742723589, "uuid": "a0361062-07cc-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.10.117.81:41380/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742723735, "uuid": "f79fb1bd-07cc-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.67.94:42050/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742723782, "uuid": "1349f644-07cd-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://zoom-meet-live.carriebrigham-c.com/downloads/ZoomInstallerFull.exe", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "fakezoom", "colour": "#a84ea8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742723782, "uuid": "13a06fa6-07cd-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.wesco-distributors.com/downloads/Zoom.ClientSetupv-204827038.pkg", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "fakezoom", "colour": "#a84ea8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742723783, "uuid": "13ec5e13-07cd-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.zoommeetplace.com/downloads/ZoomInstallerFull.exe", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "fakezoom", "colour": "#a84ea8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742723783, "uuid": "13ec8bc7-07cd-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.wesco-distributors.com/downloads/Zoom.ClientSetupv-204827038.exe", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "fakezoom", "colour": "#a84ea8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742723783, "uuid": "142343c7-07cd-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.periqi.com/assets/downloads/Zoom.ClientSetup_v0564.exe", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "fakezoom", "colour": "#a84ea8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742723783, "uuid": "1447469b-07cd-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.zoommeetplace.com/downloads/ZoomInstallerFull.sh", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "fakezoom", "colour": "#a84ea8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742723789, "uuid": "179c0512-07cd-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://zoom-meet-live.carriebrigham-c.com/downloads/ZoomInstallerFull.sh", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "fakezoom", "colour": "#a84ea8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742723829, "uuid": "2f6846b5-07cd-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.zoommeetspace.com/assets/downloads/Zoom.ClientSetup_v0564.exe", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "fakezoom", "colour": "#a84ea8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742724610, "uuid": "012f2475-07cf-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.13.31.84:39391/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742724800, "uuid": "71fd420e-07cf-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.35.133:53964/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742724800, "uuid": "722c9d79-07cf-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.238.90:47229/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742724800, "uuid": "725cb8f8-07cf-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://211.36.174.179:4195/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742724850, "uuid": "90503077-07cf-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.issuingdingbat.shop/rvj600pbx9.mp3", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742725329, "uuid": "ad4d07f6-07d0-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://check.equcym.icu/gkcxv.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742725402, "uuid": "d9514327-07d0-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.72.182.100:2369/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742725418, "uuid": "e298ed87-07d0-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.52.33:41115/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742725967, "uuid": "2a180f7d-07d2-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.87.179:34570/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742725998, "uuid": "3c7618af-07d2-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.50.62:48534/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742726114, "uuid": "815c6542-07d2-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.13.31.84:39391/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742726532, "uuid": "7ab55ddd-07d3-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "https://check.alosym.icu/gkcxv.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742726623, "uuid": "b0af3aa8-07d3-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.63.228:53083/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742726653, "uuid": "c2965324-07d3-11f0-819a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.238.90:47229/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727243, "uuid": "22961f47-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://fmt2as.ddns.net/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727244, "uuid": "22bc2e5d-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://vjhelp.top/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727244, "uuid": "22c3222c-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://natbhelp.top/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727244, "uuid": "22cc0805-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://m.fphelp.top/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727245, "uuid": "23aa6c7d-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://sisngl21a.ddns.net/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727245, "uuid": "23ac349b-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://bvft221.ddns.net/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727245, "uuid": "23b5982a-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://m.opnhelp.top/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727246, "uuid": "23e5266e-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://spockosw.innoxiously.com/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727246, "uuid": "24467163-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.mr26pan.top/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727246, "uuid": "245ba9eb-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://gmthelp.top/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727246, "uuid": "245d0956-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.117.126:42081/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727246, "uuid": "245e0223-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://m.wpahelp.top/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727246, "uuid": "24603ba7-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://qprt6-uy.top/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727246, "uuid": "247a506f-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://zantmi.innoxiously.com/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727248, "uuid": "255afa1b-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://onyxwatchdog.de/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727248, "uuid": "255e90f0-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://bwg-kundendaten.com/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727248, "uuid": "2567b789-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://iu-pks.screensconnectpro.com/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727248, "uuid": "256ae2d7-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.prmahelp.top/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727248, "uuid": "256d8e68-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://kasin22.zapto.org/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727248, "uuid": "256d8fef-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.okhelp.top/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727248, "uuid": "25751e0b-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://wzuhelp.top/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727248, "uuid": "25753217-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://web.lrjhelp.top/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727248, "uuid": "257db51a-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://mzwuzd.screenvconnects.com/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727248, "uuid": "25856ce4-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://web.opnhelp.top/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727248, "uuid": "2587017d-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://m.lrjhelp.top/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727248, "uuid": "259403e5-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://cs3699log.dlmhelp.top/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727249, "uuid": "25aeb47f-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.pthkpan.top/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727249, "uuid": "25b10c51-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://nospws.innoxiously.com/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727249, "uuid": "25fa95b9-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://acc.vujhelp.top/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727606, "uuid": "faf64d9f-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.52.33:41115/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742727964, "uuid": "d03db594-07d6-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.32.51:56047/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742728085, "uuid": "1851f59f-07d7-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.98.51.68/GOONGANGONTOP/arm", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742728087, "uuid": "19566ad5-07d7-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://check.ugodat.icu/gkcxv.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742728145, "uuid": "3c272d1e-07d7-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.98.51.68/GOONGANGONTOP/mpsl", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742728145, "uuid": "3c285518-07d7-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.98.51.68/GOONGANGONTOP/i486", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742728145, "uuid": "3c2928db-07d7-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.98.51.68/GOONGANGONTOP/mips", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742728145, "uuid": "3c2b529c-07d7-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.98.51.68/GOONGANGONTOP/arm5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742728145, "uuid": "3c2ea6d8-07d7-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.98.51.68/GOONGANGONTOP/arm6", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742728145, "uuid": "3c31553e-07d7-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.98.51.68/GOONGANGONTOP/arm7", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742728145, "uuid": "3c37d69d-07d7-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.98.51.68/GOONGANGONTOP/x86_64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742728205, "uuid": "5f962af8-07d7-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.98.51.68/GODLYBINSNIGGAYOUCANTCRACKTHESEBITCH11111222268.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742728205, "uuid": "5f962bdf-07d7-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.98.51.68/GOONGANGONTOP/x86", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742728266, "uuid": "83f48b18-07d7-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.63.228:53083/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742728325, "uuid": "a7599ff1-07d7-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.191.196:56888/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742728326, "uuid": "a7d9e6e7-07d7-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.167.168:57508/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742728448, "uuid": "f0e3e79d-07d7-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.14.198:55356/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742728507, "uuid": "139cdc3c-07d8-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.117.126:42081/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742728507, "uuid": "14111e38-07d8-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.issuingdingbat.shop/d9fg2f0dr8.mp3", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742728627, "uuid": "5b6032ed-07d8-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.36.119:58700/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742728628, "uuid": "5ba49e0d-07d8-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.251.73:35581/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742728864, "uuid": "e864acd8-07d8-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.150.42.185:38450/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742729165, "uuid": "9c425530-07d9-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.251.73:35581/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742729285, "uuid": "e3ae9fb3-07d9-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.26.185:46032/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742729406, "uuid": "2be6df01-07da-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.167.168:57508/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742729585, "uuid": "965dbf19-07da-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://86.42.150.144:35263/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742729646, "uuid": "baca9dc1-07da-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.247.27.57:59787/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742729763, "uuid": "003f1b5a-07db-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.133.61.254/Downloads/mytestfile.pdf.lnk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742729947, "uuid": "6df0e636-07db-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.244.172:43104/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742730306, "uuid": "444bc43a-07dc-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.39.197:49617/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742730367, "uuid": "687246b6-07dc-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.226.248:41050/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742730500, "uuid": "b7a276d3-07dc-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.112.134:41993/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742730549, "uuid": "d5211910-07dc-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.87.122:56751/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742730550, "uuid": "d56f5364-07dc-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://check.uzuqed.icu/gkcxv.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742730793, "uuid": "663ecf81-07dd-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Uelenka/supreme-spork/refs/heads/main/RuntimeBroker.exe", "Tag": [ { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742730794, "uuid": "67054887-07dd-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Uelenka/supreme-spork/raw/refs/heads/main/RuntimeBroker.exe", "Tag": [ { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742731384, "uuid": "c6b66154-07de-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.22.160.79:46746/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742731386, "uuid": "c7bfa8f7-07de-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.8.98.149:36039/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742731443, "uuid": "e9eb14f0-07de-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.154.102.103:58467/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742731445, "uuid": "eb1e1aba-07de-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.26.185:46032/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742731457, "uuid": "f1eab48c-07de-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.115.89.66:36725/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742731465, "uuid": "f6b13f2f-07de-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.122.61.221:42059/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742731473, "uuid": "fb8ac461-07de-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.254:10637/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742731473, "uuid": "fbd85ea6-07de-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.13.33.206:52003/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742731473, "uuid": "fbd865e1-07de-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.15.10.40:58534/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742731474, "uuid": "fc19a529-07de-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.244.73.170:10498/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742731564, "uuid": "322057ce-07df-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.244.172:43104/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742731752, "uuid": "a1ecc1fc-07df-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.10.204:58422/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742731810, "uuid": "c4501966-07df-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.84.139:52471/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742731871, "uuid": "e8edb3f5-07df-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.112.134:41993/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742732055, "uuid": "56d5336f-07e0-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.issuingdingbat.shop/u1p9tuuhnx.mp3", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742732889, "uuid": "47bc1893-07e2-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.160.132:41641/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742733130, "uuid": "d7193beb-07e2-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.84.139:52471/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742733130, "uuid": "d760c5ed-07e2-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://205.250.173.97:43554/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742733608, "uuid": "f43a5c8c-07e3-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.163.187:43706/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742733792, "uuid": "621c3817-07e4-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.5.4:51979/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742734104, "uuid": "1bb95083-07e5-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.59.99:57558/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742734689, "uuid": "78463e7b-07e6-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://205.250.173.97:43554/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742735000, "uuid": "3218b7dd-07e7-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.251.180.153:49764/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742735045, "uuid": "4ce263b4-07e7-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.5.4:51979/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742735107, "uuid": "71700b6d-07e7-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.183.54.242:52175/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742735410, "uuid": "26967480-07e8-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.192.233.164:43404/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742735659, "uuid": "bab950a4-07e8-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.issuingdingbat.shop/tmptwiuuyk.mp3", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742736306, "uuid": "3c9bbdaf-07ea-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.183.54.242:52175/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742736307, "uuid": "3cfb4185-07ea-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.53.90:58768/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742736371, "uuid": "63293e90-07ea-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.150.42.185:38450/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742736372, "uuid": "63aae699-07ea-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.111.1:60983/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742736372, "uuid": "63e7e603-07ea-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.10.6:38736/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742736393, "uuid": "7013b0c5-07ea-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.88.48:55755/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742736611, "uuid": "f24cc180-07ea-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.192.233.164:43404/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742736731, "uuid": "39d4ff37-07eb-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.251.180.153:49764/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742736792, "uuid": "5e40806d-07eb-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.36.183:43397/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742736912, "uuid": "a58de761-07eb-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.64.70:44451/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742737326, "uuid": "9c2463fa-07ec-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.111.1:60983/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742737506, "uuid": "079db576-07ed-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.112.94:43567/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742737625, "uuid": "4e9f1fc1-07ed-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.81.169:46475/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742737685, "uuid": "726d8699-07ed-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.53.90:58768/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742737985, "uuid": "24f46b1a-07ee-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.98.199:44753/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742738046, "uuid": "498c2c73-07ee-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.12.9.23:55658/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742738105, "uuid": "6cd2cea2-07ee-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.36.183:43397/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742738288, "uuid": "d98e1ced-07ee-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.10.6:38736/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742738348, "uuid": "fd897261-07ee-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.132.95.187:45987/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742738648, "uuid": "b06e38ca-07ef-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.39.17:58412/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742738829, "uuid": "1c285a2d-07f0-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.28.224:57305/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742738947, "uuid": "626ec16d-07f0-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.112.94:43567/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742739008, "uuid": "8697d8be-07f0-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.12.9.23:55658/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742739246, "uuid": "14e73f00-07f1-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.81.169:46475/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742739313, "uuid": "3ceab0ed-07f1-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.issuingdingbat.shop/e37hfvea1z.mp3", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742739426, "uuid": "802666a2-07f1-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.9.148.108:53631/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742739549, "uuid": "c925f5d1-07f1-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.132.95.187:45987/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742739788, "uuid": "57dd296b-07f2-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.163.187:43706/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742739907, "uuid": "9ed479e0-07f2-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.168.133.136:50845/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742740031, "uuid": "e8c8c540-07f2-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.39.17:58412/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742740032, "uuid": "e9372d52-07f2-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.28.224:57305/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742740594, "uuid": "385594ac-07f4-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.118.12.87:42089/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742740809, "uuid": "b817ad90-07f4-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.198.143:51569/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742741047, "uuid": "465032ea-07f5-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.9.148.108:53631/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742741189, "uuid": "9a98220e-07f5-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.107.232:47173/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742741407, "uuid": "1cb4fb5b-07f6-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.168.133.136:50845/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742741474, "uuid": "44e458af-07f6-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.137.205:49712/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742741527, "uuid": "649b5241-07f6-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.30.96:52643/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742741770, "uuid": "f50ee7ba-07f6-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.141.95:53533/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742741785, "uuid": "fe56d68c-07f6-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.213.246:44536/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742742187, "uuid": "ed9ad4fe-07f7-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.159.96.179:34315/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742742188, "uuid": "ee1092b8-07f7-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.155.93:55847/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742742189, "uuid": "eebb501f-07f7-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.144.232/botpilled/rbot", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742742189, "uuid": "eee00649-07f7-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.198.143:51569/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742742189, "uuid": "eee929ed-07f7-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.9.171:52447/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742742191, "uuid": "f0041628-07f7-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.169.93:37460/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742742192, "uuid": "f08cee25-07f7-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.29.47:53686/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742742198, "uuid": "f438d25e-07f7-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.251.140:41099/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742742199, "uuid": "f492cfc1-07f7-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.30.168.147:35863/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742742200, "uuid": "f569cf76-07f7-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.166.109:54475/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742742201, "uuid": "f635a22a-07f7-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.180.180:51495/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742742203, "uuid": "f72a7de2-07f7-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.241.27:59651/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742742217, "uuid": "ff6d9f4c-07f7-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.96:11465/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742742248, "uuid": "12185f46-07f8-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.130.90:36725/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742742249, "uuid": "12d40df8-07f8-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.46.101.42:38437/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742742262, "uuid": "1a6eee7b-07f8-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.33.127:46361/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742742276, "uuid": "22848c17-07f8-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.133:10685/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742742276, "uuid": "22d6a01a-07f8-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.88.134.111:44402/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742742280, "uuid": "25199b22-07f8-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.96.198:52661/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742742306, "uuid": "34bd0956-07f8-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.40.207:37374/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742742368, "uuid": "5982ea77-07f8-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.195.97:39948/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742742368, "uuid": "5987cd6a-07f8-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.45.164:52388/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742742429, "uuid": "7df8a7cb-07f8-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.63.239:46664/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742742489, "uuid": "a19ff3c8-07f8-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.78.134:49623/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742742909, "uuid": "9be85eb7-07f9-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.issuingdingbat.shop/ke60e7lqtv.mp3", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742742967, "uuid": "bed22e53-07f9-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.30.96:52643/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742743031, "uuid": "e4aca067-07f9-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.95.52:48334/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742743046, "uuid": "edf64ef6-07f9-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.82.170:58636/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742743221, "uuid": "55be05b1-07fa-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://49.87.1.227:60226/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742744470, "uuid": "3e615cc9-07fd-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.1.144:43336/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742744596, "uuid": "89ad8b4b-07fd-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.82.170:58636/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742744651, "uuid": "aa2494c0-07fd-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.95.52:48334/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742744790, "uuid": "fd66d9f4-07fd-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.52.25:36798/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742744960, "uuid": "62758afb-07fe-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.230.70:56256/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745069, "uuid": "a3bbc987-07fe-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.42.78:35164/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745070, "uuid": "a4014272-07fe-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.254.98:59920/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745135, "uuid": "cb044941-07fe-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.89.90:53416/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745490, "uuid": "9e5182e8-07ff-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.15.13:50482/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745613, "uuid": "e7d4d0b6-07ff-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.154.213:45992/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745670, "uuid": "097d9f45-0800-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.42.78:35164/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745731, "uuid": "2de0ab1a-0800-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.98.51.68/GOONGANGONTOP/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745731, "uuid": "2de0af7a-0800-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.98.51.68/GOONGANGONTOP/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745731, "uuid": "2de0b1fe-0800-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.98.51.68/GOONGANGONTOP/spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745731, "uuid": "2de0b297-0800-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.98.51.68/GOONGANGONTOP/arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745731, "uuid": "2df90e91-0800-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.98.51.68/GOONGANGONTOP/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745788, "uuid": "4ff52c9d-0800-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://onlyfans.gift/folder/Fedora.bat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745789, "uuid": "50a99574-0800-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.98.51.68/GOONGANGONTOP/i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745790, "uuid": "5117a68a-0800-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.180.158.53/bins.sh", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745792, "uuid": "522c942f-0800-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Adithyanadiadi/JJSploit-executor-best/releases/download/3.7.0/JJSploitExecutorBest-3.7.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745792, "uuid": "522cabc7-0800-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/earth789dadadad/Roblox-Scriptify/releases/download/v1.0.1/Release-x64.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745792, "uuid": "522cacac-0800-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/chaojidashuaige-svg/Roblox-Krampus/releases/download/v1.0.1/Release-x64.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745792, "uuid": "522cadab-0800-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/chaojidashuaige-svg/Roblox-Krampus/releases/download/v1.0.2/Release-x64.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745792, "uuid": "524fa7fd-0800-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/wer812/bhh666666666666/raw/refs/heads/main/Service.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745792, "uuid": "524fea3f-0800-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://kick.com.de/LOL.vbs", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745792, "uuid": "527563a7-0800-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/agwismana/Wave-Executor/releases/download/1.3.0-alpha.3/wave-executor-1.3.0-alpha.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745792, "uuid": "52756dcb-0800-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/wer812/vbvgghjjio999000/raw/refs/heads/main/bnoaprihjatuasss.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745792, "uuid": "52c1b7f2-0800-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/wer812/bbgy555555551/raw/refs/heads/main/ntladlklthawd.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745794, "uuid": "53844f78-0800-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Okaminosaigai/Blox-Fruits-Ultimate-Script-2025/releases/download/3.7.5/blox-fruits-ultimate-script-2025-3.7.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742745911, "uuid": "99458f75-0800-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.40.207:37374/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742746034, "uuid": "e29e015c-0800-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.39.144:40006/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742746153, "uuid": "296a15c0-0801-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://check.azaler.icu/gkcxv.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742746153, "uuid": "29ec100e-0801-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.89.90:53416/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742746272, "uuid": "704c3a56-0801-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.124.207:34143/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742746337, "uuid": "976257e7-0801-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.78.134:49623/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742746339, "uuid": "9884e3d2-0801-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.247.82.72:59297/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742746456, "uuid": "ddfbc47a-0801-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.issuingdingbat.shop/rcknx2ojcz.mp3", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742746577, "uuid": "265586fc-0802-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.254.98:59920/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742746876, "uuid": "d87520ef-0802-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.106.238:33538/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742747052, "uuid": "413e5a5a-0803-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.106.238:33538/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742747172, "uuid": "88bc6acb-0803-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.36.119:58700/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742747350, "uuid": "f2fb60be-0803-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.39.144:40006/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742747471, "uuid": "3b24e9fa-0804-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.52.132:41357/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742747530, "uuid": "5e360492-0804-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.199.138:57756/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742747715, "uuid": "ccd90815-0804-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.247.82.72:59297/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742748083, "uuid": "a7ece80e-0805-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.151.19:42083/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742748728, "uuid": "28b7a3d0-0807-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.56.199:50097/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742748791, "uuid": "4dc763d4-0807-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.233.133:38671/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742748967, "uuid": "b71b9c69-0807-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.124.207:34143/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742748968, "uuid": "b77640ef-0807-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://207.244.199.201/updated", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742749329, "uuid": "8ee38bd2-0808-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.156.29.187:57017/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742749564, "uuid": "1aa1ca11-0809-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.180.158.53/yakuza.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742749565, "uuid": "1b97f192-0809-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.180.158.53/yakuza.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742749565, "uuid": "1b97f4a4-0809-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.180.158.53/yakuza.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742749570, "uuid": "1e0a88d5-0809-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.100.68.249:62264/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742749628, "uuid": "40ae2031-0809-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.180.158.53/yakuza.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742749628, "uuid": "40afb7d7-0809-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.180.158.53/yakuza.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742749630, "uuid": "41f033a3-0809-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.174.192.179/app/laf6w_001.exe", "Tag": [ { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742749630, "uuid": "42071aae-0809-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.174.192.179/app/d3jhg_003.exe", "Tag": [ { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742749688, "uuid": "64bca7c1-0809-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.180.158.53/yakuza.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742749688, "uuid": "64bcaaed-0809-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.180.158.53/yakuza.x32", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742749688, "uuid": "64bcae8b-0809-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.180.158.53/yakuza.i586", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742749688, "uuid": "64bcb22a-0809-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.180.158.53/yakuza.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742749688, "uuid": "64bcd709-0809-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.180.158.53/yakuza.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742749775, "uuid": "989bf133-0809-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.180.158.53/yakuza.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742749867, "uuid": "cf7286bb-0809-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://check.fidec.icu/gkcxv.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742749986, "uuid": "1671a6bc-080a-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.1.28:52035/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742750049, "uuid": "3b92d113-080a-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.233.133:38671/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742750109, "uuid": "5fe21fe1-080a-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.issuingdingbat.shop/5rilgbxrly.mp3", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742750470, "uuid": "36bd116e-080b-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://check.fepub.icu/gkcxv.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742750649, "uuid": "a1c02553-080b-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.156.29.187:57017/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742751130, "uuid": "c03103d1-080c-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.52.132:41357/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742751312, "uuid": "2c7136d1-080d-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.131.254:46687/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742751430, "uuid": "72b8fbe3-080d-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.125.121.116:47974/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742751794, "uuid": "4c028f93-080e-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.247.151.8:56700/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742752330, "uuid": "8b7d8521-080f-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.131.254:46687/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742752633, "uuid": "40328446-0810-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.63.239:46664/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742752874, "uuid": "cff61be9-0810-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.94.185.167:38375/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742753028, "uuid": "2b9eb08b-0811-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.180.65.92:42731/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742753065, "uuid": "41524b2f-0811-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.194.129.203:60933/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742753066, "uuid": "420b1dd6-0811-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.34.188:52199/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742753118, "uuid": "60ea0ec3-0811-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.247.151.8:56700/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742753230, "uuid": "a41868c0-0811-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://od.lk/d/NTFfNDY2MDU4Mzhf/pinQRkwOPUVYDT219.bin", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742753236, "uuid": "a763c3a4-0811-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://web.opendrive.com/api/v1/download/file.json/NTFfNDY2MDU4Mzhf?temp_key=%A6%29%D0FL%0E%3DEX%3D%B5%F5%B8%A7&inline=0", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742753362, "uuid": "f2739fa4-0811-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.213.137:47740/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742753366, "uuid": "f51409a0-0811-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.128.84:40463/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742753655, "uuid": "a14d2080-0812-11f0-8bf2-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.issuingdingbat.shop/99eog8zcwl.mp3", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742754554, "uuid": "b8fc03f3-0814-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.128.84:40463/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742754666, "uuid": "fbfed5a8-0814-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.194.129.203:60933/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742754667, "uuid": "fc779dca-0814-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.180.169:38101/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742754847, "uuid": "67c501dc-0815-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.237.121:60454/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742755207, "uuid": "3e146fa0-0816-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.8.209.73:51329/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742755266, "uuid": "61973b45-0816-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.232.4.177:60225/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742755385, "uuid": "a86522f1-0816-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.207.236:48555/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742755444, "uuid": "cb8bdbca-0816-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.125.121.116:47974/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742755629, "uuid": "3991739d-0817-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.3.25.126:33913/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742755745, "uuid": "7ec31116-0817-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.0.206:47093/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742755986, "uuid": "0eaf11b4-0818-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.101.0:48044/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742756046, "uuid": "324b4693-0818-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.79.135:52138/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742756106, "uuid": "55e1b83a-0818-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.180.169:38101/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742756497, "uuid": "3f384db2-0819-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.253.233:50007/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742756650, "uuid": "9a3dcfea-0819-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.101.0:48044/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742756891, "uuid": "2a39f795-081a-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.125.51.34:34382/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742757080, "uuid": "9a7284b4-081a-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.101.183:33259/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742757128, "uuid": "b71942e2-081a-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.0.206:47093/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742757249, "uuid": "ff1d2bf4-081a-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.228.13:50335/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742757312, "uuid": "250ea587-081b-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.issuingdingbat.shop/ucrzx3wjj3.mp3", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742757550, "uuid": "b2c96eab-081b-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.8.209.73:51329/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742757551, "uuid": "b35e611a-081b-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.115.186.73:52713/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742757745, "uuid": "272a1cf9-081c-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.96.211:51287/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742757850, "uuid": "6581a830-081c-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.8.77:37416/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742758089, "uuid": "f3dff972-081c-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.15.13:50482/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742758267, "uuid": "5e446f4c-081d-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.16.221:46192/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742758329, "uuid": "8344760c-081d-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.75.66.243:42649/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742758572, "uuid": "14398182-081e-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.68.254:35631/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742758751, "uuid": "7e9561de-081e-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.147.168:37344/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742758869, "uuid": "c4b12984-081e-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.79.135:52138/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742758926, "uuid": "e722b8dc-081e-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.35.185:45842/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742758987, "uuid": "0b977b57-081f-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.142.218:56566/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742759048, "uuid": "2faeada1-081f-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.228.13:50335/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742759225, "uuid": "993192a7-081f-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.96.211:51287/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742759346, "uuid": "e1455259-081f-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.213.246:44536/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742759408, "uuid": "063fdb5f-0820-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.88.240:54800/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742759422, "uuid": "0e651f32-0820-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.52.213:42224/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742759525, "uuid": "4c34c9c4-0820-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.144.32.113/Aqua.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742759765, "uuid": "db084702-0820-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.115.186.73:52713/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742759890, "uuid": "25bac7fe-0821-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.253.233:50007/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742759984, "uuid": "5d67fbd2-0821-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.59.0:54926/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742760191, "uuid": "d8bf6038-0821-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.68.254:35631/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742760191, "uuid": "d91e7806-0821-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.75.66.243:42649/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742760200, "uuid": "de384282-0821-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.101.213:34303/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742760487, "uuid": "8972c107-0822-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.77.93:48935/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742760487, "uuid": "89842efc-0822-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.101.213:34303/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742760607, "uuid": "d0b46d8f-0822-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.142.218:56566/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742760911, "uuid": "86548e22-0823-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.issuingdingbat.shop/h5porr3813.mp3", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742760968, "uuid": "a8462e7a-0823-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.59.0:54926/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742761210, "uuid": "3849c8ac-0824-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.3.54:32807/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742761267, "uuid": "5a399678-0824-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.25.173:57917/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742761268, "uuid": "5aeaf7f1-0824-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.27.79:36004/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742761392, "uuid": "a48d3fc8-0824-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.147.168:37344/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742761830, "uuid": "aa1374e8-0825-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.121.207:43754/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742761932, "uuid": "e6df6627-0825-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.77.93:48935/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742761988, "uuid": "083197d0-0826-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.44.180:44988/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742762050, "uuid": "2d0c6c26-0826-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.166.134:59827/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742762169, "uuid": "739ef292-0826-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.126.144:42426/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742762286, "uuid": "b9932655-0826-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.52.213:42224/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742762287, "uuid": "ba30c0dd-0826-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.70.208:38259/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742762348, "uuid": "dec8589f-0826-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.190.15:54447/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742762408, "uuid": "0298c51d-0827-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.3.54:32807/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742762768, "uuid": "d935e8e9-0827-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.88.240:54800/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742762769, "uuid": "d96a7181-0827-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.143.82:59893/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742762829, "uuid": "fd8c9069-0827-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.254.74:40017/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742762838, "uuid": "02ca70b9-0828-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.221.118:40997/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742762902, "uuid": "288e9c3d-0828-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.144.197:52887/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742762948, "uuid": "4484de37-0828-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.149.137:60964/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742763146, "uuid": "ba06035d-0828-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.232.1.97:34264/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742763249, "uuid": "f79d043a-0828-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.44.180:44988/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742763313, "uuid": "1ddb5313-0829-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.25.173:57917/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742763490, "uuid": "872e6dd0-0829-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.166.134:59827/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742763491, "uuid": "879dd574-0829-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.99.44:47985/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742763791, "uuid": "3ac90b54-082a-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.247.142.141:34247/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742763817, "uuid": "4a76ee84-082a-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.27:11284/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742763818, "uuid": "4ad32706-082a-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.181.64.233:38266/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742764509, "uuid": "e6bc1cfa-082b-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.issuingdingbat.shop/v1xbn84agt.mp3", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742764514, "uuid": "e97a25b5-082b-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.144.197:52887/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742764755, "uuid": "798943ce-082c-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.232.1.97:34264/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742764805, "uuid": "972d735b-082c-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.149.137:60964/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742764869, "uuid": "bd80d1d7-082c-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.11.229.103/HideChaotic/ub8ehJSePAfc9FYqZIT6.x86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742764875, "uuid": "c1163d45-082c-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.138.112:57588/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742764927, "uuid": "dfd4104f-082c-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.11.64:1080/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742764927, "uuid": "e000ec42-082c-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.17.51:18246/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742764927, "uuid": "e0154810-082c-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.111.94:2086/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742764927, "uuid": "e015511b-082c-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.25.212.149:5986/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742764928, "uuid": "e0224c2d-082c-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.38.17.127:47220/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742764928, "uuid": "e0309754-082c-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.92.135.46:33420/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742764928, "uuid": "e0377386-082c-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.157.58.34:50714/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742764928, "uuid": "e09a20f0-082c-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://168.205.209.71:23448/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742764929, "uuid": "e0bfc833-082c-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.67.151.84:40708/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742764929, "uuid": "e127191c-082c-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.237.238.119:62476/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742764935, "uuid": "e4c7e96f-082c-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.13.6.194:38905/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742764986, "uuid": "0327fe7f-082d-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://207.244.199.201/payload.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742764988, "uuid": "03e9d679-082d-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://207.244.199.201/bot", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742764989, "uuid": "04ca25b3-082d-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.67.128:56811/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765045, "uuid": "26687be5-082d-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.99.44:47985/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765109, "uuid": "4c816b76-082d-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.237.20:48255/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765232, "uuid": "95cb2cf6-082d-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.32.162.27/bins/pmpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765233, "uuid": "95e95bc9-082d-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.224.137.197/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765233, "uuid": "95e95e0a-082d-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.80.144.107/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765233, "uuid": "95e9618b-082d-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.5.216.152:8001/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765233, "uuid": "95e965e6-082d-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.224.144.7/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765233, "uuid": "960cf54d-082d-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.31.18.47:10000/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765233, "uuid": "966d2a7c-082d-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.116.213:2003/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765233, "uuid": "966d6ddb-082d-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.50.47.137:9301/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765233, "uuid": "96795dc5-082d-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.144.159.130:8082/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765234, "uuid": "96986612-082d-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.217.103.131:8082/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765234, "uuid": "96988a3a-082d-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.71.135:2003/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765234, "uuid": "96ae380b-082d-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.116.19:2000/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765234, "uuid": "96d21caa-082d-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.146.70.197:8081/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765234, "uuid": "96d2678c-082d-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.167.89.12:8082/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765234, "uuid": "96fb9e83-082d-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.236.55.42/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765235, "uuid": "971aca08-082d-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.168.17.192:85/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765236, "uuid": "98147f53-082d-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.210.138.244:85/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765241, "uuid": "9aacd5bb-082d-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.153.223:2000/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765241, "uuid": "9ad7d606-082d-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.119.76:2000/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765247, "uuid": "9ed6d609-082d-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://79.205.181.48/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765295, "uuid": "bae411f4-082d-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.32.162.27/bins/pmips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765295, "uuid": "bae411ee-082d-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.32.162.27/bins/pppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765346, "uuid": "d965a1d4-082d-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.32.162.27/bins/psh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765346, "uuid": "d965c9a2-082d-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.32.162.27/bins/parm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765346, "uuid": "d965cde5-082d-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.32.162.27/bins/parm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765346, "uuid": "d965cfd3-082d-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.32.162.27/bins/pm68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765346, "uuid": "d9787196-082d-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.32.162.27/bins/pspc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765406, "uuid": "fd8c334c-082d-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.32.162.27/bins/parm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765406, "uuid": "fd8c4310-082d-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.32.162.27/bins/parm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765406, "uuid": "fd8c6698-082d-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.32.162.27/bins/px86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765526, "uuid": "44a79855-082e-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://155.138.230.16/bins/armv5l", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765526, "uuid": "44b1884c-082e-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://155.138.230.16/bins/bins.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765528, "uuid": "461380da-082e-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://155.138.230.16/bins/powerpc", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765528, "uuid": "46138551-082e-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://155.138.230.16/bins/i486", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765528, "uuid": "46138a26-082e-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://155.138.230.16/bins/i586", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765528, "uuid": "4613c2bc-082e-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://155.138.230.16/bins/x86_64", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765528, "uuid": "4613c32f-082e-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://155.138.230.16/bins/sparc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765528, "uuid": "4613c76c-082e-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://155.138.230.16/bins/armv4l", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765528, "uuid": "4613c7f6-082e-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://155.138.230.16/bins/m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765528, "uuid": "461dd818-082e-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://155.138.230.16/bins/armv6l", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765528, "uuid": "46277ff3-082e-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://155.138.230.16/bins/sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765591, "uuid": "6b79f57f-082e-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.209.129.92/bins/owari.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765591, "uuid": "6b7a05d7-082e-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.209.129.92/bins/owari.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765591, "uuid": "6b7a0a47-082e-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.209.129.92/lickmynutsnigah.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765591, "uuid": "6b7bd766-082e-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.209.129.92/bins/owari.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765591, "uuid": "6b7befa0-082e-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.209.129.92/bins/owari.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765591, "uuid": "6b7bf6ea-082e-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.209.129.92/bins/owari.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765591, "uuid": "6b7c03e8-082e-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.209.129.92/bins/owari.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765591, "uuid": "6b86f3cb-082e-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.209.129.92/bins/owari.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765591, "uuid": "6b86fd54-082e-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.209.129.92/bins/owari.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765591, "uuid": "6b88db27-082e-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.209.129.92/bins/owari.i586", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765591, "uuid": "6b88e0af-082e-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.209.129.92/bins/owari.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765591, "uuid": "6b88e152-082e-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.209.129.92/bins/owari.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765591, "uuid": "6b88e25f-082e-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.209.129.92/bins/owari.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765591, "uuid": "6b88e2d3-082e-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.209.129.92/bins/owari.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765591, "uuid": "6b9c5970-082e-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://155.138.230.16/bins/mipsel", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765591, "uuid": "6b9c6388-082e-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://155.138.230.16/bins/mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765591, "uuid": "6b9c75d7-082e-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://155.138.230.16/bins/i686", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765648, "uuid": "8d44e6bd-082e-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.209.129.92/bins/owari.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765708, "uuid": "b18e6f95-082e-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.143.82:59893/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742765949, "uuid": "40b71afc-082f-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://168.195.7.86:34282/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742766006, "uuid": "6321c37e-082f-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.86.27.23:34355/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742766365, "uuid": "38cc239f-0830-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.235.194:6082/mp3.bat", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742766366, "uuid": "393b1b4a-0830-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.235.194:6082/1YSNAGHSA/RE_0639273740212.pdf.lnk", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742766372, "uuid": "3ce35f40-0830-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.235.194:6082/ta.msi", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742766427, "uuid": "5d984f09-0830-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.232.235.194:6082/2YSNAHSJAJD/RE_00740936439473.pdf.lnk", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742766489, "uuid": "829e6cfd-0830-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://olympics-inform-batteries-afterwards.trycloudflare.com/mp3.bat", "Tag": [ { "name": "cloudflare", "colour": "#74781d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742766489, "uuid": "83189c79-0830-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://olympics-inform-batteries-afterwards.trycloudflare.com/2YSNAHSJAJD/RE_00740936439473.pdf.lnk", "Tag": [ { "name": "cloudflare", "colour": "#74781d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742766490, "uuid": "838a368c-0830-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://olympics-inform-batteries-afterwards.trycloudflare.com/1YSNAGHSA/RE_0639273740212.pdf.lnk", "Tag": [ { "name": "cloudflare", "colour": "#74781d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742766491, "uuid": "8434b2a4-0830-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://olympics-inform-batteries-afterwards.trycloudflare.com/ta.msi", "Tag": [ { "name": "cloudflare", "colour": "#74781d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742766806, "uuid": "3fa3142b-0831-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.160.190:35570/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742766906, "uuid": "7b236426-0831-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.192.126:57725/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742766968, "uuid": "a08fc7d3-0831-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.254.74:40017/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742767567, "uuid": "058707d5-0833-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.158.106:56855/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742767629, "uuid": "2a121447-0833-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.179.69:54419/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742767747, "uuid": "70ddae93-0833-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.80.113:58125/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742767943, "uuid": "e5a2f35f-0833-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.100.18:50676/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742768121, "uuid": "4fde48c6-0834-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.issuingdingbat.shop/zry1gvcat8.mp3", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742768229, "uuid": "8fe73413-0834-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.237.20:48255/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742768290, "uuid": "b484a02e-0834-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.137.174:58179/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742768351, "uuid": "d8846a3d-0834-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.158.106:56855/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742768826, "uuid": "f40d8d6e-0835-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.1.144:43336/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742769016, "uuid": "64e1653d-0836-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.74.152:47195/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742769016, "uuid": "65092039-0836-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.84.73:37426/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742769068, "uuid": "8413f3a8-0836-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.150.52:47749/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742769204, "uuid": "d5593d5b-0836-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.16.18:37345/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742769249, "uuid": "efb23cd1-0836-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.40.48:57266/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742769311, "uuid": "14cdf3f0-0837-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.121.64:43152/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742769428, "uuid": "5a6e680c-0837-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.80.113:58125/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742769490, "uuid": "7f69588c-0837-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.98.199:44753/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742769986, "uuid": "a74e2ccd-0838-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.17.23:34675/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742770207, "uuid": "2afe6abc-0839-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.213.213:52931/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742770266, "uuid": "4e53a55d-0839-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.227.57:42038/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742770284, "uuid": "589b4c53-0839-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.63.80:53147/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742770869, "uuid": "b59164e2-083a-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.74.152:47195/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742770869, "uuid": "b5cb5d78-083a-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.115.180:59824/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742770932, "uuid": "dadb28c4-083a-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.121.64:43152/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742770994, "uuid": "ffe2b3b3-083a-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.11.26:50750/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742771070, "uuid": "2d70c38f-083b-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.48.43:56964/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742771298, "uuid": "b55733f5-083b-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.61.227:52615/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742771471, "uuid": "1c785018-083c-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.87.152:49262/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742771591, "uuid": "63efcd82-083c-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.253.162:35581/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742771718, "uuid": "afc43b36-083c-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.issuingdingbat.shop/apbckpnrf9.mp3", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742771779, "uuid": "d406cfc5-083c-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.213.213:52931/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742771838, "uuid": "f7365f97-083c-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.227.57:42038/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742772134, "uuid": "a7b91e50-083d-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.80.151.66/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742772136, "uuid": "a8d35b6a-083d-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.224.169.99/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742772143, "uuid": "ad0396dd-083d-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.98.194.71:59266/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742772194, "uuid": "cb58af3f-083d-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.11.26:50750/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742772253, "uuid": "ee3faf23-083d-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.115.180:59824/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742772323, "uuid": "17efa6bf-083e-11f0-8aea-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.192.126:57725/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742772619, "uuid": "c8ac0a91-083e-11f0-b0af-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.56.13.145:46915/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742772905, "uuid": "7351580c-083f-11f0-b0af-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.22.12.81:46767/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742772982, "uuid": "a12bc257-083f-11f0-b0af-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.226.169.44:64413/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742773024, "uuid": "b9f9e2d4-083f-11f0-b0af-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.61.227:52615/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742773025, "uuid": "ba8c7368-083f-11f0-b0af-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.8.188.128:35089/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742773687, "uuid": "45269a1e-0841-11f0-b0af-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.165.6:34287/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742773806, "uuid": "8c43e614-0841-11f0-b0af-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.237.121:60454/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742774165, "uuid": "623e9397-0842-11f0-b0af-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.87.152:49262/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742774286, "uuid": "aa529b13-0842-11f0-b0af-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.8.209.187:46319/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1742774286, "uuid": "aa65fc96-0842-11f0-b0af-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.31.7:57421/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742736369, "uuid": "6213ffe6-07ea-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.70.10.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742755983, "uuid": "0cfb285d-0818-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.70.101.0", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742764923, "uuid": "dd7add37-082c-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.70.11.64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742704448, "uuid": "0fbbfeaa-07a0-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.70.14.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742764923, "uuid": "dd7a8a68-082c-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.70.17.51", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765227, "uuid": "92b3d3fc-082d-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "101.168.17.192", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742764923, "uuid": "dd7a575f-082c-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.13.6.194", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742688248, "uuid": "5745853b-077a-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.159.96.179", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742763787, "uuid": "387ea011-082a-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.181.64.233", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698988, "uuid": "593b3fd8-0793-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.207.125.45", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742688248, "uuid": "5745827b-077a-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.208.105.4", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742688188, "uuid": "339c4ef9-077a-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.98.38.182", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697552, "uuid": "01501217-0790-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.213.175.184", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742749626, "uuid": "3f731a30-0809-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.174.192.179", "Tag": [ { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697312, "uuid": "7206942f-078f-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "109.200.168.67", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742735103, "uuid": "6f83095f-07e7-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.183.54.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742772962, "uuid": "95344d68-083f-11f0-b0af-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.226.169.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742721486, "uuid": "bb035902-07c7-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.246.253.5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698988, "uuid": "593b39f9-0793-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.125.255", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742693589, "uuid": "c7194afb-0786-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.253.104.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742725395, "uuid": "d50c208b-07d0-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.72.182.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765227, "uuid": "92b12d18-082d-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.167.89.12", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697312, "uuid": "720781c2-078f-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.182.106.234", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697312, "uuid": "7207aa2f-078f-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.191.153.3", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742731748, "uuid": "9f989ff5-07df-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.10.204", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697552, "uuid": "014ebb04-0790-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.44.250", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742745610, "uuid": "e5c9b0de-07ff-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.231.154.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742745067, "uuid": "a256102d-07fe-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.236.254.98", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742700553, "uuid": "fe2c3209-0796-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.239.152.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742694371, "uuid": "98f32fb2-0788-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.239.197.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697552, "uuid": "0150765d-0790-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.24.166.28", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742764923, "uuid": "dd7ac2d7-082c-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.25.212.149", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697552, "uuid": "0151f147-0790-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.27.81.143", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742742186, "uuid": "ed3f6f3a-07f7-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.30.168.147", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697312, "uuid": "7206d0a3-078f-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.159.30.59", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697552, "uuid": "014eec8e-0790-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.34.29.129", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742756043, "uuid": "30c72a18-0818-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.79.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742758985, "uuid": "09fc5c8f-081f-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.142.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742709786, "uuid": "7d253a7e-07ac-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.128.38", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742737504, "uuid": "062c63b6-07ed-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.112.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742688374, "uuid": "a27a7187-077a-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.194.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742716743, "uuid": "afe49dfd-07bc-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.154.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742767564, "uuid": "03b94952-0833-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.158.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742719683, "uuid": "880e721b-07c3-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.177.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742749563, "uuid": "1a6a1e15-0809-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.100.68.249", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697312, "uuid": "72071be8-078f-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.110.189.39", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742746872, "uuid": "d646b937-0802-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.138.106.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742701391, "uuid": "f11c2bc5-0798-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.140.0.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742758325, "uuid": "806be777-081d-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.75.66.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742690292, "uuid": "1a03427b-077f-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.192.157.118", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742692868, "uuid": "19184273-0785-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.192.34.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742767924, "uuid": "d9e1ed5a-0833-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.195.100.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698988, "uuid": "593b2fa0-0793-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.195.105.116", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742708945, "uuid": "881eaf44-07aa-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.195.117.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742773683, "uuid": "42c1f586-0841-11f0-b0af-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.165.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742715482, "uuid": "c0731ba1-07b9-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.188.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742770987, "uuid": "fb9abffc-083a-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.11.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742714523, "uuid": "8488c1b2-07b7-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.199.57.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742689098, "uuid": "5247f253-077c-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.152.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742699771, "uuid": "2bc933af-0795-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.201.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742705222, "uuid": "dd2524bc-07a1-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.201.187.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742742186, "uuid": "ed3f920d-07f7-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.166.109", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742728323, "uuid": "a61e188e-07d7-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.167.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742742186, "uuid": "ed4008be-07f7-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.169.93", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742716382, "uuid": "d900d187-07bb-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.170.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742688550, "uuid": "0bae374c-077b-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.173.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742695450, "uuid": "1c054c0c-078b-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.82.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742713743, "uuid": "b3c8a137-07b5-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.133.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742716204, "uuid": "6e7c1883-07bb-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.138.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742769964, "uuid": "9a031c6d-0838-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.17.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742690049, "uuid": "88caa4f4-077e-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.233.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742695450, "uuid": "1c053b10-078b-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.236.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742766785, "uuid": "33281207-0831-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.160.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742761808, "uuid": "9ca444d6-0825-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.121.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742769185, "uuid": "c9a319fb-0836-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.16.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742701879, "uuid": "147f5621-079a-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.23.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742688012, "uuid": "cab896e7-0779-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.31.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742689333, "uuid": "de221f59-077c-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.34.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742717404, "uuid": "3a1e6525-07be-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.42.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742715962, "uuid": "de25c044-07ba-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.80.95", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742743028, "uuid": "e2b8f805-07f9-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.82.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742694247, "uuid": "4f6077f6-0788-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.84.88", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742725936, "uuid": "174d46e3-07d2-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.87.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742736369, "uuid": "6213f618-07ea-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.88.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742704157, "uuid": "61dc04da-079f-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.91.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742705103, "uuid": "961aa6eb-07a1-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.95.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742711283, "uuid": "f97b6ee3-07af-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.156.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742711405, "uuid": "422f4988-07b0-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.47.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742770263, "uuid": "4c3c5bad-0839-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.212.63.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742742186, "uuid": "ed3fd67c-07f7-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.241.27", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742721062, "uuid": "be29c5f1-07c6-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.214.225.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742699348, "uuid": "2fbc647e-0794-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.100.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742705823, "uuid": "42cdc713-07a3-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.216.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742771048, "uuid": "20007f92-083b-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.48.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742744769, "uuid": "f0e4c5cb-07fd-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.52.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742725395, "uuid": "d50c2f52-07d0-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.52.33", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742734088, "uuid": "125b91d7-07e5-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.59.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742726600, "uuid": "a2eb5929-07d3-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.63.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742710507, "uuid": "2ac445ab-07ae-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.150.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742703730, "uuid": "638b3de3-079e-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.159.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742742186, "uuid": "ed3faede-07f7-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.180.180", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742701328, "uuid": "cbc6b11c-0798-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.25.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742742245, "uuid": "105e132f-07f8-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.33.127", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742742186, "uuid": "ed3fe3a4-07f7-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.155.93", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742706243, "uuid": "3d452a0b-07a4-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.157.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742715362, "uuid": "78dfebd5-07b9-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.57.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742769012, "uuid": "62be2d36-0836-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.220.74.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742730487, "uuid": "b01f0904-07dc-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.112.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742759405, "uuid": "042e837d-0820-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.52.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742706663, "uuid": "37d35047-07a5-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.222.235.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742769244, "uuid": "ecd8babf-0836-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.40.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742763137, "uuid": "b52816c0-0828-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.232.1.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742693048, "uuid": "845c9c63-0785-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.232.3.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742755263, "uuid": "5f83351c-0816-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.232.4.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742760188, "uuid": "d75dc5fe-0821-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.101.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742741167, "uuid": "8e084b1b-07f5-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.107.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742702296, "uuid": "0cb3c470-079b-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.107.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742699348, "uuid": "2fbc4e3b-0794-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.112.174", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742721246, "uuid": "2bc61e5b-07c7-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.121.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742762885, "uuid": "1eb50e9f-0828-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.144.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697552, "uuid": "01514229-0790-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.18.203", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742742245, "uuid": "105dfefc-07f8-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.96.198", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742757725, "uuid": "1b1dfafd-081c-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.96.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742696354, "uuid": "36e91d45-078d-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.241.215.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742693229, "uuid": "f093fcb0-0785-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.241.56.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742759946, "uuid": "469d49cc-0821-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.241.59.0", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742688911, "uuid": "e286aa47-077b-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.224.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742710024, "uuid": "0b402406-07ad-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.227.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742744949, "uuid": "5bf02697-07fe-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.230.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742757245, "uuid": "fcefed45-081a-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.244.228.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765227, "uuid": "92b20655-082d-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.244.71.135", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742708344, "uuid": "21e434da-07a9-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.0.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698988, "uuid": "5939b220-0793-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.1.57", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742717162, "uuid": "a9dbacfd-07bd-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.10.125", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742770203, "uuid": "28d5bd9d-0839-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.213.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742709547, "uuid": "ee786d78-07ab-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.8.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742751789, "uuid": "48f67224-080e-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.247.151.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742729643, "uuid": "b8b976ab-07da-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.247.27.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742713682, "uuid": "8f91acba-07b5-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.247.30.16", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742734983, "uuid": "27a1ee6c-07e7-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.251.180.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742709786, "uuid": "7d257397-07ac-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.81.143", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742761206, "uuid": "362832b2-0824-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.3.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742763487, "uuid": "859a7505-0829-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.99.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742702954, "uuid": "95205366-079c-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.177.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742756887, "uuid": "27ccaa80-081a-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "118.125.51.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742692748, "uuid": "d1868150-0784-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "118.251.0.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742762766, "uuid": "d7a22143-0827-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.116.143.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742753060, "uuid": "3ec84287-0811-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.116.34.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742690049, "uuid": "88ca9b3c-077e-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.179.27.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742772589, "uuid": "b67a397e-083e-11f0-b0af-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.56.13.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742761265, "uuid": "58f8af95-0824-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.27.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742742186, "uuid": "ed40429c-07f7-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.29.47", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698988, "uuid": "593adcda-0793-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.70.19", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742694127, "uuid": "07fd162e-0788-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.154.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742713143, "uuid": "4df2e6fc-07b4-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.160.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742728624, "uuid": "5976b67f-07d8-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.36.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742696289, "uuid": "106abab6-078d-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.13.140.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742712124, "uuid": "eedf70c9-07b1-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.13.23.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742688188, "uuid": "339cab17-077a-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.13.49.130", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742749326, "uuid": "8cd5a0c0-0808-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.156.29.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742719803, "uuid": "cfe4b511-07c3-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.189.17.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742768287, "uuid": "b2b3e0d1-0834-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.137.174", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765227, "uuid": "92b148c0-082d-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.210.138.244", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742742485, "uuid": "9f80e8f4-07f8-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.78.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742723045, "uuid": "5bfccca0-07cb-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.32.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742703486, "uuid": "d2457092-079d-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.131.151.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697552, "uuid": "014effd5-0790-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.235.249.197", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742688608, "uuid": "2e20feed-077b-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.6.125.95", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742761985, "uuid": "06891254-0826-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.44.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742744467, "uuid": "3c6c5f2f-07fd-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.1.144", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742706783, "uuid": "7f3c63ce-07a5-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.42.202.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742704215, "uuid": "84a689c6-079f-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.42.244.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742701088, "uuid": "3c96262f-0798-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.56.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742709786, "uuid": "7d25650b-07ac-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.46.247.218", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742694849, "uuid": "b60076ed-0789-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.241.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742742426, "uuid": "7c1051d6-07f8-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.63.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697552, "uuid": "014f6c34-0790-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "131.100.34.174", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698988, "uuid": "593adcdc-0793-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "139.5.0.4", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742688188, "uuid": "339c2416-077a-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "139.5.11.91", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742731443, "uuid": "e98328d7-07de-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "14.154.102.103", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765227, "uuid": "92b1adfd-082d-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "14.236.55.42", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697312, "uuid": "7206a33b-078f-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "14.244.68.119", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742746334, "uuid": "956b0983-0801-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "14.247.82.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742696834, "uuid": "5538e28f-078e-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "140.255.139.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742764923, "uuid": "dd7a41c9-082c-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "143.92.135.46", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765525, "uuid": "4460f5ab-082e-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "155.138.230.16", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697973, "uuid": "fbe6c28c-0790-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "157.245.211.199", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742702111, "uuid": "9e449ebf-079a-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "160.179.9.0", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697312, "uuid": "7207ba66-078f-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "161.81.123.63", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697312, "uuid": "72067ddd-078f-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "161.81.123.64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742764923, "uuid": "dd7ad5af-082c-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "168.205.209.71", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742688248, "uuid": "5745db0e-077a-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "170.244.73.161", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742731443, "uuid": "e9831f7a-07de-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "170.244.73.170", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742733789, "uuid": "5fd3d756-07e4-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.146.5.4", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742758567, "uuid": "10d84edd-081e-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.146.68.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742713263, "uuid": "9572ad2a-07b4-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.147.53.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742710507, "uuid": "2ac44332-07ae-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.148.233.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742701448, "uuid": "138af533-0799-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.82.0", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742771466, "uuid": "19153891-083c-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.87.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742708464, "uuid": "69704e50-07a9-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.167.165.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742739904, "uuid": "9cdb21a2-07f2-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.168.133.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742690647, "uuid": "ed81856b-077f-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.173.87.125", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742721843, "uuid": "8fe1353e-07c8-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.175.150.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742696354, "uuid": "36e90ae8-078d-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.175.8.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697552, "uuid": "014e8394-0790-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.31.188.138", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742705882, "uuid": "66464fce-07a3-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.116.170.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742742186, "uuid": "ed3fdcc1-07f7-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.144.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697552, "uuid": "015134ae-0790-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.131.119.70", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698988, "uuid": "593b112f-0793-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.141.72.186", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697552, "uuid": "014fd146-0790-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.19.47.16", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765227, "uuid": "92b2a9a7-082d-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.50.47.137", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697312, "uuid": "7206e001-078f-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.50.73.171", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697312, "uuid": "7206b3b4-078f-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "181.200.2.217", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742748726, "uuid": "27623248-0807-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.233.133", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698632, "uuid": "84ca6c38-0792-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.3.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742746030, "uuid": "e09d4798-0800-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.39.144", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742762826, "uuid": "fbc105f1-0827-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.254.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742757547, "uuid": "b1392da6-081b-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.115.186.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742736304, "uuid": "3b28c6d3-07ea-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.53.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742721546, "uuid": "deba103b-07c7-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.35.133", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742688067, "uuid": "ebc8118a-0779-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.8.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742742186, "uuid": "ed405295-07f7-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.251.140", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742742364, "uuid": "575df001-07f8-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.45.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742696410, "uuid": "5888bf17-078d-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.199.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742709484, "uuid": "c933697b-07ab-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.224.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742719623, "uuid": "6469c6f3-07c3-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.122.196.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742754843, "uuid": "656b69cf-0815-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.122.237.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742751427, "uuid": "70fbdd09-080d-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.125.121.116", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742762047, "uuid": "2b2f75b2-0826-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.166.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742706123, "uuid": "f5fdcc38-07a3-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.177.5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742767625, "uuid": "27fd97a8-0833-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.179.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742689745, "uuid": "d3e0f994-077d-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.178.6.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742704331, "uuid": "c99de172-079f-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.247.148.128", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742742245, "uuid": "105e0de2-07f8-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.46.101.42", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742689211, "uuid": "95c05526-077c-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.60.12.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742699888, "uuid": "71419fd0-0795-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.60.3.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742717404, "uuid": "3a1e6b4e-07be-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.60.4.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742709786, "uuid": "7d24ed87-07ac-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.84.139.188", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742694433, "uuid": "bdf2dc7e-0788-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.87.240.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742742245, "uuid": "105e1019-07f8-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.88.134.111", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698147, "uuid": "6393377d-0791-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.121.13.205", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697552, "uuid": "014ef0b9-0790-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.47.211.208", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697552, "uuid": "015138bd-0790-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "189.176.73.92", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697552, "uuid": "014fdf0c-0790-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "190.196.99.168", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742688188, "uuid": "339ccb49-077a-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.10.157.71", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698988, "uuid": "593ab126-0793-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.10.158.78", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742731443, "uuid": "e9833ecc-07de-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.15.10.40", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742731383, "uuid": "c63f5e99-07de-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.22.160.79", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742745787, "uuid": "4f5f4a6c-0800-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "194.180.158.53", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742715843, "uuid": "973a0f2f-07ba-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "196.188.74.98", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720643, "uuid": "c4501073-07c5-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "196.251.91.42", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697552, "uuid": "0150b979-0790-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "196.29.232.203", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742728083, "uuid": "1740fa77-07d7-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "198.98.51.68", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697552, "uuid": "01512fbd-0790-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "203.115.101.20", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697552, "uuid": "014fe958-0790-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "203.115.101.244", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742733127, "uuid": "d5855d59-07e2-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "205.250.173.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742748965, "uuid": "b5ec4e24-0807-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "207.244.199.201", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720643, "uuid": "c458fc42-07c5-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "209.141.40.172", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742723227, "uuid": "c8d447a9-07cb-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "211.36.174.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742772904, "uuid": "722d6be9-083f-11f0-b0af-82aee05be84a", "comment": "Malware payload delivery host", "value": "213.22.12.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742766364, "uuid": "3845f145-0830-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "213.232.235.194", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742730546, "uuid": "d351e94c-07dc-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.87.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742751308, "uuid": "2a4374ed-080d-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.131.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742758866, "uuid": "c332fc5f-081e-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.35.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742706543, "uuid": "f05ebbb3-07a4-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.32.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742714523, "uuid": "8488d175-07b7-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.58.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742745486, "uuid": "9bf21834-07ff-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.15.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742764923, "uuid": "dd7ac763-082c-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.157.58.34", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765106, "uuid": "4ab9b6cd-082d-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.237.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742754664, "uuid": "fa967d38-0814-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.180.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742762283, "uuid": "b81ea777-0826-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.70.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742700908, "uuid": "d1a004bf-0797-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.125.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742701209, "uuid": "8514e47f-0798-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.159.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727243, "uuid": "2249a1b8-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.117.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742771294, "uuid": "b28da445-083b-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.61.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742723585, "uuid": "9dccfa87-07cc-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.10.117.81", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742738043, "uuid": "47990584-07ee-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.12.9.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742731443, "uuid": "e98318bb-07de-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.13.33.206", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742713323, "uuid": "b92b4965-07b4-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.13.69.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742774283, "uuid": "a87a8e39-0842-11f0-b0af-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.8.209.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742755203, "uuid": "3c1184c4-0816-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.8.209.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742731383, "uuid": "c63f4b66-07de-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.8.98.149", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742739423, "uuid": "7e154e06-07f1-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.9.148.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742731443, "uuid": "e982db0e-07de-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.122.61.221", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742753060, "uuid": "3ec84e7d-0811-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.194.129.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742755623, "uuid": "36594c75-0817-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.3.25.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742701088, "uuid": "3c963ef1-0798-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.100.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765227, "uuid": "92b1460b-082d-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "31.217.103.131", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697552, "uuid": "014f124a-0790-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "31.47.103.116", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742764923, "uuid": "dd7ae157-082c-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.67.151.84", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742715843, "uuid": "973a0519-07ba-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.97.175.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697552, "uuid": "014f4be2-0790-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.6.209.99", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742696231, "uuid": "ed9131cf-078c-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.70.189.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742708525, "uuid": "8dc7da2b-07a9-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.73.126.255", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742688188, "uuid": "339c8c8d-077a-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.75.113.210", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698089, "uuid": "414fc567-0791-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.81.236.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742762945, "uuid": "42a60a2f-0828-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.90.149.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765227, "uuid": "92b0f50b-082d-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "41.144.159.130", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765227, "uuid": "92b0e963-082d-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "41.146.70.197", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697552, "uuid": "0150b20d-0790-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "41.215.100.6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742752997, "uuid": "19163382-0811-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.180.65.92", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742719861, "uuid": "f2a45e25-07c3-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.217.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742708105, "uuid": "933218f9-07a8-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.33.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742715064, "uuid": "c726b756-07b8-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.45.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742733605, "uuid": "f26ad95b-07e3-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.163.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742707863, "uuid": "0332f665-07a8-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.92.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742740805, "uuid": "b6077654-07f4-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.198.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742729944, "uuid": "6c51b1b6-07db-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.244.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742691069, "uuid": "e91d39df-0780-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.6.102.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742764867, "uuid": "bc181fae-082c-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.11.229.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742731443, "uuid": "e983280a-07de-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.115.89.66", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698988, "uuid": "593a2c55-0793-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.164.177.128", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697552, "uuid": "0150e6ab-0790-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.12.53.190", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742743205, "uuid": "4c466db2-07fa-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "49.87.1.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697312, "uuid": "7206b870-078f-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.205.241.163", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742764923, "uuid": "dd7a7069-082c-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.237.238.119", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697552, "uuid": "014f6573-0790-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.239.196.94", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697312, "uuid": "720757e0-078f-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "51.171.132.45", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742764923, "uuid": "dd7aa646-082c-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.47.111.94", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742704448, "uuid": "0fbbfe6b-07a0-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.178.110.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698988, "uuid": "593b17a2-0793-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.180.147.72", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742757067, "uuid": "92cbbab4-081a-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.101.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765227, "uuid": "92b20d5d-082d-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.116.19", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765227, "uuid": "92b13502-082d-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.119.76", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742762165, "uuid": "719e1357-0826-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.126.144", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742741464, "uuid": "3ec4e9b7-07f6-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.137.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765227, "uuid": "92b23f1b-082d-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.153.223", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742736906, "uuid": "a1bfa67b-07eb-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.64.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742764986, "uuid": "02f020a0-082d-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.67.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742722263, "uuid": "8a3a9c77-07c9-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.67.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742708585, "uuid": "b132b9a4-07a9-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.83.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742716323, "uuid": "b579b7c6-07bb-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.90.49", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698988, "uuid": "593abaac-0793-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.95.91", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742690348, "uuid": "3b46c422-077f-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.117.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742764867, "uuid": "bc18235f-082c-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.138.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742688550, "uuid": "0bae33e5-077b-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.242.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742756466, "uuid": "2cc8e50b-0819-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.253.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742753358, "uuid": "f02eb5a3-0811-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.128.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742769064, "uuid": "81763fd0-0836-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.150.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742738824, "uuid": "19462106-07f0-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.28.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742774283, "uuid": "a87a41ea-0842-11f0-b0af-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.31.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742725994, "uuid": "3a05c2bd-07d2-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.50.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742728443, "uuid": "eda40e31-07d7-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.14.198", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742702637, "uuid": "d8054755-079b-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.4.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742701635, "uuid": "829fecf2-0799-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.174.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742759405, "uuid": "042fa9ab-0820-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.88.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742745130, "uuid": "c816c680-07fe-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.89.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742770866, "uuid": "b391fd9e-083a-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.115.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765227, "uuid": "92b3bdab-082d-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.116.213", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742715482, "uuid": "c07323ca-07b9-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.121.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697312, "uuid": "720663d0-078f-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.65.121", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742712482, "uuid": "c425c5de-07b2-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.112.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742710325, "uuid": "be775226-07ad-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.139.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742688671, "uuid": "53d0b038-077b-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.140.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742688248, "uuid": "57458873-077a-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.180.45", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697431, "uuid": "b8f16b72-078f-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.211.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742728624, "uuid": "597686db-07d8-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.251.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742771587, "uuid": "6189d787-083c-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.253.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742772132, "uuid": "a6574ce3-083d-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.98.194.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742746266, "uuid": "6cfc9aeb-0801-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.18.124.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742698988, "uuid": "593afd07-0793-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.18.2.100", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742702111, "uuid": "9e448fda-079a-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.19.13.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742762826, "uuid": "fbc1349b-0827-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.19.221.118", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742699112, "uuid": "a3415088-0793-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.16.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742770263, "uuid": "4c3c4a6b-0839-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.227.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742747467, "uuid": "391dbffa-0804-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.52.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742715362, "uuid": "78dfeb45-07b9-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.86.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742742364, "uuid": "575dff38-07f8-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.195.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742710623, "uuid": "6fe17a89-07ae-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.205.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742688188, "uuid": "339c76e7-077a-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "69.23.253.119", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697312, "uuid": "7207ca6d-078f-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.52.157.210", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697552, "uuid": "01500b16-0790-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "78.149.223.80", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742764923, "uuid": "dd7aebb7-082c-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "78.38.17.127", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765227, "uuid": "92b3b552-082d-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "79.205.181.48", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697312, "uuid": "7207018d-078f-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "81.47.8.11", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742690951, "uuid": "a278b758-0780-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.146.69.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765227, "uuid": "92b2543d-082d-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.224.137.197", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765227, "uuid": "92b30367-082d-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.224.144.7", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697312, "uuid": "720776ec-078f-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.224.166.68", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742772132, "uuid": "a6574617-083d-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.224.169.99", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697552, "uuid": "014ee898-0790-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "86.41.214.182", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742729583, "uuid": "954082f0-07da-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "86.42.150.144", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697552, "uuid": "014f8f7b-0790-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "88.18.196.217", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765227, "uuid": "92b306c0-082d-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "88.31.18.47", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765227, "uuid": "92b3dbfd-082d-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "88.5.216.152", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742759524, "uuid": "4b2840bc-0820-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "89.144.32.113", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697552, "uuid": "01503f61-0790-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "89.231.18.9", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742765227, "uuid": "92b119fb-082d-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.80.144.107", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742772132, "uuid": "a6575c48-083d-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.80.151.66", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697552, "uuid": "014fe3cc-0790-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "92.18.229.76", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697312, "uuid": "72075494-078f-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "92.40.119.59", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697552, "uuid": "0151236e-0790-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "93.184.123.45", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697312, "uuid": "72078e7d-078f-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.44.132.155", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697552, "uuid": "014fbf61-0790-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "95.143.49.217", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727247, "uuid": "24d81dd2-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "acc.vujhelp.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720643, "uuid": "c47ba6ed-07c5-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "boomingdeals.shop" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720643, "uuid": "c4707e07-07c5-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "bossmart.shop" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727245, "uuid": "238cd744-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "bvft221.ddns.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727245, "uuid": "238af6cf-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "bwg-kundendaten.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742726531, "uuid": "7a173ff7-07d3-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "check.alosym.icu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742746151, "uuid": "285e3e7f-0801-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "check.azaler.icu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742725326, "uuid": "ac0cadda-07d0-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "check.equcym.icu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742750468, "uuid": "355dc109-080b-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "check.fepub.icu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742749865, "uuid": "ce61d1d8-0809-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "check.fidec.icu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742723467, "uuid": "577efac2-07cc-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "check.ohuxah.icu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742721604, "uuid": "011e26c8-07c8-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "check.ugarob.icu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742728085, "uuid": "1888c463-07d7-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "check.ugodat.icu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742730548, "uuid": "d4986418-07dc-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "check.uzuqed.icu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727245, "uuid": "2394c61d-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "cs3699log.dlmhelp.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720645, "uuid": "c5f333a0-07c5-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "default-web-security.fly.storage.tigris.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727243, "uuid": "225a3c5a-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "fmt2as.ddns.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727243, "uuid": "2290d7b5-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "gmthelp.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720643, "uuid": "c477f95a-07c5-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "h1.yyoiy.shop" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720643, "uuid": "c476ed1a-07c5-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "h2.yyoiy.shop" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720645, "uuid": "c5c2b34d-07c5-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "h3.yyoiy.shop" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742712725, "uuid": "54bc71f8-07b3-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "healthy-deemed-essays-opens.trycloudflare.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720643, "uuid": "c47c96c1-07c5-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "hxptlqrz.store" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720643, "uuid": "c47cf0ae-07c5-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "i.yeaio.shop" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727245, "uuid": "238654db-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "iu-pks.screensconnectpro.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727245, "uuid": "239190aa-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "kasin22.zapto.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742745787, "uuid": "4f770652-0800-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "kick.com.de" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720643, "uuid": "c4719a90-07c5-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "kiserman.shop" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727243, "uuid": "2278504f-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "m.fphelp.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727245, "uuid": "23a60515-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "m.lrjhelp.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727245, "uuid": "239588b7-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "m.opnhelp.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727243, "uuid": "22787760-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "m.wpahelp.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727245, "uuid": "238e8712-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "mzwuzd.screenvconnects.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727243, "uuid": "225ead71-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "natbhelp.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727245, "uuid": "23960d3d-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "nospws.innoxiously.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742766486, "uuid": "814429ef-0830-11f0-8aea-82aee05be84a", "comment": "Malware payload delivery host", "value": "olympics-inform-batteries-afterwards.trycloudflare.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742745787, "uuid": "4f786008-0800-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "onlyfans.gift" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727245, "uuid": "238f6857-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "onyxwatchdog.de" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742711284, "uuid": "fa00e9f9-07af-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "parallels.ltd" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720645, "uuid": "c5d50791-07c5-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-8cc19ee7f6db401b873bdd6baa90c5c2.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727243, "uuid": "229041f9-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "qprt6-uy.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727245, "uuid": "23936ce4-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "sisngl21a.ddns.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720643, "uuid": "c488dfc8-07c5-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "smarthomecookingtools.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727245, "uuid": "23a046be-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "spockosw.innoxiously.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720645, "uuid": "c59f27c1-07c5-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "twitch.cheap" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742724849, "uuid": "8f388506-07cf-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "u1.issuingdingbat.shop" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742720643, "uuid": "c471177e-07c5-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "uplstack-protect.netlify.app" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727243, "uuid": "22640bf4-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "vjhelp.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742697495, "uuid": "df7828d2-078f-11f0-9a93-82aee05be84a", "comment": "Malware payload delivery host", "value": "voozaak.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727245, "uuid": "239a851f-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "web.lrjhelp.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727243, "uuid": "225f9335-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.mr26pan.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727245, "uuid": "2399e91c-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.okhelp.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742723770, "uuid": "0c231536-07cd-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.periqi.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727245, "uuid": "2397b164-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.prmahelp.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727245, "uuid": "23a67fc0-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.pthkpan.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742723770, "uuid": "0c344f2a-07cd-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.wesco-distributors.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742723770, "uuid": "0c259303-07cd-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.zoommeetplace.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727245, "uuid": "23cd6e7f-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "wzuhelp.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742727243, "uuid": "225f5620-07d5-11f0-8bf2-82aee05be84a", "comment": "Malware payload delivery host", "value": "zantmi.innoxiously.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1742723770, "uuid": "0c2776eb-07cd-11f0-819a-82aee05be84a", "comment": "Malware payload delivery host", "value": "zoom-meet-live.carriebrigham-c.com" } ] } }