{ "Event": { "published": true, "date": "2024-09-22", "threat_level_id": 2, "info": "URLhaus IOCs for 2024-09-22", "timestamp": 1727049791, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "c4b221d1-04f2-4dc3-a99b-df3a8ebaab45", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1726963446, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726963446, "uuid": "d1596bff-f6a0-4de3-ae7f-a74f2d7564a3", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726963446, "uuid": "ac565122-73b3-4d16-84e4-49562652731c", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726963446, "uuid": "4ffbdba5-bd8e-4bb4-b34c-409ee1ff51b3", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726963446, "uuid": "6dbc9d13-635c-462b-8546-afe1cf35a5b5", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726963446, "uuid": "340dad11-38dd-4544-a9af-7d3850cf0f5e", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1726963447, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726963447, "uuid": "2f36db5d-f581-4202-835e-95d891c7bfd2", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726963447, "uuid": "44487caa-182f-4dc7-a254-c9c2a8934536", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726963447, "uuid": "3a49fbf0-7b08-4411-8302-c14feecde2c8", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726963447, "uuid": "63d09176-480c-41c6-99c5-ea42266fe907", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726963447, "uuid": "9bd4bfce-d6b1-4503-ac5c-b949aa757207", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9fa34370-7876-11ef-afe5-82aee05be84a", "comment": "Malware payload (Smoke Loader)", "timestamp": 1726963635, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726963635, "uuid": "9dbaa7a9-057a-4599-8fb1-07a4f4486789", "comment": "Malware payload (Smoke Loader)", "value": "f5780dc3b75ce0e5298cb54852114556", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726963635, "uuid": "bb980af8-f9f4-4699-81ba-fc7f4891cd76", "comment": "Malware payload (Smoke Loader)", "value": "e18fa9ac88659475cc29f2af1d90fc10b2ef5a80c783468c3197e35c1941c596", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726963635, "uuid": "01c17e44-52f0-466e-8575-fa684abdb554", "value": "T10DA49E6342B1FC54F9324E728E2EE6E9361FF9608D15772B1218AA2F65703F1C163B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726963635, "uuid": "db88ef06-533b-4bfd-9ca3-775288735ec8", "value": "2f3fb52e2448b38ca202de4ef9ca1d86", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726963635, "uuid": "f80fa276-bec8-4a43-80a8-5271e2d71d9c", "value": "6144:ABN7SahoQVmTjSjsQYw+H/Jap4MZr9QD4c0/57gaQblLpNV5FXCnFk:AH+ahZKuFJ+BOaD4xBQZNHSC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726963635, "uuid": "1cf06228-418f-4cd4-bee0-f592ca86e92d", "value": 456704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726963635, "uuid": "9c41d430-a0b5-43c9-b5d3-f2c2139f2d52", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "109a986e-617b-11ef-ac1d-82aee05be84a", "comment": "Malware payload", "timestamp": 1726963911, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726963911, "uuid": "bfc04dfd-e438-4c26-84a6-d4277b5c1483", "comment": "Malware payload", "value": "a10a5cb7aba9d9c3c051af6581490377", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726963911, "uuid": "3f7671a9-f025-4fa1-af41-e53604b190bc", "comment": "Malware payload", "value": "f6e9515696f5f42c2789447a08cce6856aefc040e2efc4927f67522a14fde5d6", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726963911, "uuid": "444cc576-657c-4274-896c-8033c10033ad", "value": "T18D24D70AAF610FBBDC6FDD3702E90B0635CC655722A42B7A3574D528F54A94F0AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726963911, "uuid": "7e8666ec-97cc-4435-afbb-d0120789d68d", "value": "1536:4mB/gusIOWiqqmt0p1fi0CAcYOqPN7hKfrNKC5n/PgPHfcdZ84AtaJf3e8+/FHxz:XRDhfCp1TSb/PgsdSYQ/FPuG6rbNZ7Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726963911, "uuid": "c116e3de-bbbc-4457-ae53-c6c0c0d0f47b", "value": 212064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726963911, "uuid": "03abb6c8-7f6d-44dd-9458-82e8e6d5a340", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1726968186, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726968186, "uuid": "604914c5-7614-46c2-94c8-9755937ea7ec", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726968186, "uuid": "2f1ce2b0-0861-4ebc-a323-7afe653c298c", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726968186, "uuid": "d4fd6145-7d40-4f1a-91e1-3c541772b969", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726968186, "uuid": "afc723a9-a8c8-4f14-a455-b15c6e70aa70", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726968186, "uuid": "6966809d-ea85-4c87-936c-a30e3cd3a832", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1726968610, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726968610, "uuid": "f0068832-51d3-418e-acc0-a0748ae83a02", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726968610, "uuid": "e6ee3c81-ea07-4f0b-b0bd-f26efba5a8d9", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726968610, "uuid": "d83ac6e7-9e1f-4754-8070-801c987f4f44", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726968610, "uuid": "8984bf9a-719c-4139-a73c-9d0e12235f29", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726968610, "uuid": "16d28e0b-0bc6-4fcb-a54b-4fa50c6ca91e", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d72c4e7a-7886-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726970600, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726970600, "uuid": "32a10f54-6867-468f-94ca-bf793bf8e68c", "comment": "Malware payload", "value": "a909e279cb4b1c47f57683f821077794", "object_relation": "md5", "Tag": [ { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726970600, "uuid": "e8205102-e9c5-4fcf-8744-5c06d5dd24c5", "comment": "Malware payload", "value": "bd90bea09b603b65d008571e1df5dfbe65ba3a587083e3d059a7d061010751fe", "object_relation": "sha256", "Tag": [ { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726970600, "uuid": "e2e7031a-699c-4519-94f2-443a96ce4120", "value": "T1E411E1CB9C05828A7673AF701B901405FE86043F665E001FB1ED81492F60F2682EEB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726970600, "uuid": "7da0ded0-164c-48e3-9df9-bd2c98734346", "value": "24:xvpA22mLqSWTAb7rDe1I8loE8oLsaoIPic5UQFkrE6KixT1:p+22wFWTwa1I8lknapPi8UQFkg6TV1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726970600, "uuid": "11fd59a9-c2be-4bdb-b21f-dda956667ef1", "value": 1038, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726970600, "uuid": "53dbed9b-fc46-4e51-b105-c0a962131215", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac5090ce-7887-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726970957, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726970957, "uuid": "248e4fbe-4ab9-4c14-a7cb-b52ec773e88b", "comment": "Malware payload", "value": "288ea127c73d770fad669e2b102e64f4", "object_relation": "md5", "Tag": [ { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726970957, "uuid": "9741684a-1b3e-44d3-92c2-8a2adb84ee57", "comment": "Malware payload", "value": "62ba3f8f9671f5d9a6bdc4284a599a27d7fb353c880f1bdd43655c62fe918eb4", "object_relation": "sha256", "Tag": [ { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726970957, "uuid": "a733baf8-8d10-4c22-a865-68894ea18973", "value": "T1071412A390F5C6A95DB93632C6F94D651F8538E8FB4B5063F9A4D24D872203BCF2B0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726970957, "uuid": "4effb190-b9a4-46b2-b468-9903717ecb7f", "value": "3072:OFb0si13PSwVm1DJpD0Sd7BFgmCw759y0R3xCfeGt9W6VYJuYQRv+4rx9XfeC08p:OFY3P9VgASdt9n7jy0wbt9WkrWW3Pe5A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726970957, "uuid": "9d68d9f9-9cac-4130-9b98-3804ea231622", "value": 191753, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726970957, "uuid": "b5310c56-f66e-4f5d-ba1a-4986b4087abb", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11389cfe-7889-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726971556, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726971556, "uuid": "23d5c51e-f0ec-425d-8258-43e25b5bac0b", "comment": "Malware payload", "value": "d4611383ea12aa8484ceabeb031edbff", "object_relation": "md5", "Tag": [ { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726971556, "uuid": "5938b9cc-d3cd-4826-9a2d-e770fb93a7f1", "comment": "Malware payload", "value": "84294bcc8ce2cc13ef7322cb8c0d6312f3bf1a5a5548a72dd9ba7d153283e861", "object_relation": "sha256", "Tag": [ { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726971556, "uuid": "cae85527-969d-434d-992e-dc6e7f283674", "value": "T1FCC43307152E70DE9DBDBC1444A88B96F02B59345B15CBBADA336A8BA8F45648FCC0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726971556, "uuid": "da797d51-2c29-4a56-9c3f-fe7bddcde759", "value": "12288:6J3LGjgSnUXf6mvdQOqP3c08Ni4j6z+QWqAsaSy0UUMa5OBg49bkhe0O97t:6VV73vfqQixqQWqAs1ylrZBj9ae19J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726971556, "uuid": "01603f8c-9741-4447-87d2-2c4aa145a5b5", "value": 579680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726971556, "uuid": "e4e37f35-f02f-47e1-b719-9eb7e96ebdf2", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3f305967-7888-11ef-afe5-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1726972560, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726972560, "uuid": "2fddd2ce-497c-4d04-a48e-72f6467fdf7e", "comment": "Malware payload (Amadey)", "value": "a4c9507df39b435f350c40ac42262bbb", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726972560, "uuid": "4a8e1c09-4910-4cdf-8ea5-0a439211820b", "comment": "Malware payload (Amadey)", "value": "7dad1180ce40e320ce5316b4e0922db61edb63edd51fd6f3d178e111ed4a6dbf", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726972560, "uuid": "5cc07fb4-b4c9-48dd-b9d8-57b529dbf557", "value": "T1609533750F838A3FEE082E352239D6D4B351C9C9018E2A9AC50F7DBA74774F524668", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726972560, "uuid": "63415e1e-e073-4c6e-9f3e-3af84abaaeb7", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726972560, "uuid": "8d3c4e7e-4a14-4b62-9c71-e3dfd61be582", "value": "49152:tVhe0uvoynbUYrd0GF9XI7I+hUiWUvDE/K:HM0mfxrehVFEy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726972560, "uuid": "c3cf3432-97df-4981-8888-cffa1e5812e8", "value": 1904128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726972560, "uuid": "559138c5-0622-4ba4-a471-e8065832b99f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c85c1db-788d-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726973481, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726973481, "uuid": "35e10ab1-4078-4f2f-ba1f-8e39ea91012e", "comment": "Malware payload", "value": "63dca4c42a093d0029334b98cf011be8", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726973481, "uuid": "147a7ce2-d6a9-40bd-846a-82e03397d3cb", "comment": "Malware payload", "value": "21543fe98bbe41c7045b6b5bda64a3b95b05bf15e76ea4f4bb4346462f4f74b8", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726973481, "uuid": "99d5fe08-0756-4386-a8ac-9849123a50b0", "value": "T17F24EF85AB275E0A3D65E529F5D58FF34E7CCD8CE47C49C0E5804E7ABEC8821E2706", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726973481, "uuid": "50a37751-8d32-4599-8634-8f21320f586a", "value": "6144:YLmJpkbZGAgyz575qGrBPsuYC0d3Cp8v3G:J6gyz7Z5suYNCg3G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726973481, "uuid": "853783c6-a94f-4c22-bd3d-1377211ffba6", "value": 211025, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726973481, "uuid": "2026664f-3609-43ac-ba40-76ef42c4506a", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c3ec3b8-788c-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726973553, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726973553, "uuid": "ce9c1869-5cec-49f0-b790-52309fddb43b", "comment": "Malware payload", "value": "90310850c08a4dac2fb45cc6775c4a46", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726973553, "uuid": "cad71ff2-0bcf-4a46-b1eb-fe1c21316cc3", "comment": "Malware payload", "value": "cd53ddb2c86ca9e2346aec8bd35f672882667690072b0dfe025270d2f58b85d1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726973553, "uuid": "2c949d81-f077-4e49-a2ac-e69c904ccc26", "value": "T1C9159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726973553, "uuid": "c89723c8-a4eb-4bcf-98b5-7cfd54da488b", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726973553, "uuid": "c1207c42-82db-4f1b-bc57-e102edb705f2", "value": "12288:0qDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgaWTA:0qDEvCTbMWu7rQYlBQcBiT6rprG8auA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726973553, "uuid": "975f12a6-d7a5-492c-818c-dd92f0be42eb", "value": 921600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726973553, "uuid": "4eb25fa5-7985-427f-aafd-aca6f9a03a68", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c43b2cb2-788c-11ef-afe5-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1726973594, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726973594, "uuid": "c2e8d8c2-2fd4-43ea-a3ec-8f27ef841891", "comment": "Malware payload (Amadey)", "value": "64a326e2e14c182ad069076d4efd6848", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726973594, "uuid": "d880e67d-539b-4b2f-a25c-39cc2b3e63af", "comment": "Malware payload (Amadey)", "value": "7554fab3381263ee14feeff91baff6c8fe981f8dd367800e7f4b930c908385e1", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726973594, "uuid": "239206aa-de5a-46b1-a197-7337cb54aa36", "value": "T132853319CD8304A1E6F80A3056EEC12BEF6402776F1304B63B036774E9AA55E3759B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726973594, "uuid": "2a2b2cd5-8773-44dc-908d-80901046f81b", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726973594, "uuid": "167194a2-2d86-4a24-9a0f-9cbee8ccd844", "value": "24576:8oIJ2hiLk4IIriDJznPCQ2T1t0nmH1CZxe5qd8q44Ae8B++6t4DIafxAhQFIoBKS:vIJ2hiLf+NDKpT1t0wDZzeUb6teFY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726973594, "uuid": "28c714b2-c486-4aad-8738-c4de9038dcb8", "value": 1855488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726973594, "uuid": "8adcbd2c-ff2b-4356-a377-12e692dbd78c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5962b9b9-7892-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726975543, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726975543, "uuid": "1e7f8d1b-e853-4962-8de9-ba5d3fe9b8d2", "comment": "Malware payload", "value": "ef8b996e4d7e84c179f8268f3d686195", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "upx", "colour": "#a31d32", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726975543, "uuid": "d1927d07-9a63-4b6f-a96c-6a9f1094a4fb", "comment": "Malware payload", "value": "d582110cd8a31d867e1a1eada4fb726acbbf960bed0aafeec854e455bc53403f", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "upx", "colour": "#a31d32", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726975543, "uuid": "df74c487-ff74-446e-ba85-60f302e5962d", "value": "T1BEE37C21B25ED073D87718F21726B17DB3EA4D2C1AA56843EAD90F48BCA48232F459", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726975543, "uuid": "e778dc5b-06ff-452f-93b4-0f3dc9090c74", "value": "914685b69f2ac2ff61b6b0f1883a054d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726975543, "uuid": "f1b4eccc-b9f7-43de-8e4b-73b047ffa174", "value": "3072:gqJogYkcSNm9V7DXW5I4KNGHsOqhNDvtdT:gq2kc4m9tDXW5fdqh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726975543, "uuid": "5728e9ea-60cf-465c-99b9-7bc4e212d50a", "value": 149504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726975543, "uuid": "a404c387-651a-4298-8e3d-751711adec59", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7bf54c96-789b-11ef-afe5-82aee05be84a", "comment": "Malware payload (Tofsee)", "timestamp": 1726979466, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726979466, "uuid": "7fa9cb49-0ac0-46c2-812a-a8dd011caffd", "comment": "Malware payload (Tofsee)", "value": "3206661d23a513d94539484c6dc8809b", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "Tofsee", "colour": "#baa077", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726979466, "uuid": "c77c8909-e84e-4649-9e10-b898ea859ef5", "comment": "Malware payload (Tofsee)", "value": "089617b1201e7f7f1dd85e44c2185384ced391c3adac5789f79bfdce53fbb255", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "Tofsee", "colour": "#baa077", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726979466, "uuid": "a973abc8-aacd-46c3-aa14-2ad1f7c270bc", "value": "T146A48E3342B17C54F9228E729E1EF6E9765FF9208D55772B1218AA2F25713F2C163B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726979466, "uuid": "afe8e6aa-1fbe-4769-89e1-26e35df9b513", "value": "2f3fb52e2448b38ca202de4ef9ca1d86", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726979466, "uuid": "6ea79c05-6d69-40ba-a509-8fcdf709c380", "value": "6144:ZxBl8kaz4xUGCmujeawHvWhW43/9khGPuV01GbEqqk9tzFl2B5FXCnFk:vT9azCcKaIvol3/OwyEqHvvSSC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726979466, "uuid": "d66624ff-0527-4b8e-becb-6448c932b581", "value": 457728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726979466, "uuid": "8e8bc776-16c4-451f-9e52-36ec1aac4a4d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9c01a84-789e-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1726980966, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726980966, "uuid": "08a4f7ad-b299-43dd-9646-fe61e2d34b45", "comment": "Malware payload (Mirai)", "value": "a4ae2b7d81e8e847da0cdf945e8f85ee", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "Tsunami", "colour": "#cb6771", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726980966, "uuid": "d73bbbd3-d5c4-4c6d-90e6-e9237d75793f", "comment": "Malware payload (Mirai)", "value": "f5e57326e2c926983ee7a01efe8e951307b8d4da9065bfc8014a7e74c83ac352", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "Tsunami", "colour": "#cb6771", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726980966, "uuid": "5cd47bcb-18be-40eb-9314-e4f959cb4309", "value": "T1D6415FCA0ACB40313872DE97B5A84E5C72C0A0E75FD4ED1490D97CF9E0ADECB51D1A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726980966, "uuid": "91a1b763-b405-4490-8c57-e5f1ea356ee3", "value": "48:vRIxK2kf6NTxkK5cW5LYT3kaJkXoVBPSFKM0:vaxK2u6txHeELYT39WIB6gj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726980966, "uuid": "d2718d73-c17f-4fdc-a046-70410c7cf328", "value": 2269, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726980966, "uuid": "91443b41-f6bb-4eee-9067-c72e0c4256f3", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9c367ec-789e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726980966, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726980966, "uuid": "5e29c06f-ae67-42f1-925d-1a5a6eab234d", "comment": "Malware payload", "value": "b78fd986cf1b2a4e85776845b335455c", "object_relation": "md5", "Tag": [ { "name": "downloader", "colour": "#9d9bda", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726980966, "uuid": "f11756e0-1e75-4dcb-b52d-7c4f288a4a19", "comment": "Malware payload", "value": "e29cb8599ae4a0d65e9fc3dcbff4d8145206f815ef9bd5995a7634ab85929ee0", "object_relation": "sha256", "Tag": [ { "name": "downloader", "colour": "#9d9bda", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726980966, "uuid": "b3ad9153-217b-48f2-9710-9feafda604c1", "value": "T1FAC08C105824D9AC852019CAD1BAC90BD2B201052402BCC4ABDE0C2CAD0A81CFAEE2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726980966, "uuid": "9354bc26-5837-405a-9824-3bcc0b1bc2c8", "value": "3:CwcKKrWzZGCkfVv+moVVJU9gZKWTBMACKF3AuUSACPoOYkjDUSACn:CDKhwfV7oTJWgZKUj1AuU2JUG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726980966, "uuid": "1ce35d95-1859-4757-977b-93b025be9f3a", "value": 158, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726980966, "uuid": "c1b9f0a2-e64e-43ca-8688-3a07a977dab0", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fab26fe7-789e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726980967, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726980967, "uuid": "36402336-7edd-4d1d-b83f-615b72f25198", "comment": "Malware payload", "value": "d2b9d12a630cf96b6d4da31de2af0e35", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726980967, "uuid": "1f612bdd-305e-4c30-8996-4f2bff9d8dfc", "comment": "Malware payload", "value": "1d83bdba4198a28193b93de0f88fa79bb7ff17249b54654c07cb11a27e708644", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726980967, "uuid": "f32cd2f4-02be-4645-9704-b2b75d25436a", "value": "T16A8412957B558163C30E3774CDE08F4A8C546BE15E7C29CEBE385BAC19B02DE28A1E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726980967, "uuid": "fbe30d7b-0e34-4762-9ea9-d05baeb02bb5", "value": "19d4e66d725c89ba6712b82bebc8196d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726980967, "uuid": "13ea74b8-21bf-43d8-9028-166455a390ee", "value": "6144:AqCZTnLLdb+8pBPokBwJMxlbFpRM2cbM9fgb2KmoFNiODlOTwrOnPdplzVLlWQxf:Ab5DbPowllDRf9Ib2JONfUcri1RcQP2S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726980967, "uuid": "b4142275-bd81-47da-a4af-b8da71f2d0c9", "value": 392704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726980967, "uuid": "d3f73842-b0db-4aca-a6f9-ef12fe81673f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90e9a1c0-3a14-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1726981025, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981025, "uuid": "7cfb5051-c797-4c29-a379-486771ff8b9d", "comment": "Malware payload", "value": "d9a9e44959774727266d2469195dd645", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981025, "uuid": "d709ca44-ff3b-4949-a85d-4e869423c9dc", "comment": "Malware payload", "value": "9cca1ac92b4cb19d4d1753f5e1b95f219d874a8f521821c7f48c10e73fbf9f2a", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981025, "uuid": "aac807c8-edaa-4e13-a6f1-4cdb663aabe5", "value": "T1B9D31222D3130C4FC02579FA7A2BE62A39872E6A24CE449C45F5D66A2FB7084ED717", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981025, "uuid": "c046b43e-391c-48a9-9fb9-2d9a916327c8", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfKYm:fYFJvwe1gKCYVl2sCN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726981025, "uuid": "6440d370-6035-4225-8561-9a2c11e6884a", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981025, "uuid": "46d4b9b3-ced6-4925-91da-f8f11f7f4f19", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d6657f6-789f-11ef-afe5-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1726981026, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981026, "uuid": "de971284-9bd1-42e2-ae78-19e80015a51a", "comment": "Malware payload (AsyncRAT)", "value": "5974d0c93e23ad07e6a0306d208fc133", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981026, "uuid": "811905af-3339-4f6e-996c-cb0132d1a65a", "comment": "Malware payload (AsyncRAT)", "value": "43048329e6cd6df3e144e8592c1194cf0da5e9113653ea155e664cbcc08b4b27", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981026, "uuid": "7ca65fc7-b162-4771-b8d5-de334b9789eb", "value": "T1AC832BF616171E8F46270F10E90C1314EDACE8AB73E5D1B8BF494EA68E994548CA1D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981026, "uuid": "54e5e026-dbec-4834-a188-867a8ff4e09c", "value": "1536:Yn6pjPDbYkq9jruT1Mh7qUWZF+wn+nQe+vW4FHN8+3poi/Sc/Yq0m:Yn6dDC9jrQ1M0UM+w+q5FHN8WZ/ScMm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726981026, "uuid": "608ed608-7c1a-4462-a2f2-9ae1aa4f8b8c", "value": 86016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981026, "uuid": "80637aeb-f480-47b2-a47b-8db8ce029ff3", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d910a17-789f-11ef-afe5-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1726981026, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981026, "uuid": "de342bb1-00c7-40b5-95c7-1ec74d7e30ac", "comment": "Malware payload (RemcosRAT)", "value": "cd9f7dcd28a1accfe3e153da8fa4c61d", "object_relation": "md5", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981026, "uuid": "2bd71aa9-1151-4982-8ca4-f7bdb1d8f86f", "comment": "Malware payload (RemcosRAT)", "value": "ba297ca42bf569929d6fafd20a8ed9212b3012291d38a6ec2be3376d5488c4a5", "object_relation": "sha256", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981026, "uuid": "51183f83-c7d1-4256-8fd8-a054d83c5b1b", "value": "T113E4B0B95295AC8F0F1C0A66F4180B4A5C6D44D7E6B8C2F87E82B4F896950E44FFCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981026, "uuid": "c5787265-fac6-40d0-b5ec-97e72f364cdd", "value": "12288:zgkOTDFNXjOsggjpM3IzJquTTYuDu6pELjN/nwVNN1:zg/VNlVjpRJ7TTYuDfcjN/wDX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726981026, "uuid": "af1007fb-e1a6-4d14-a8b0-9e4012f2bf1c", "value": 659456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981026, "uuid": "cd4ad7e5-0291-4348-8d33-11e3acb7271d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1dbc6a9a-789f-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726981026, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981026, "uuid": "3ac1a3fc-116c-4903-a409-e57bff91acc3", "comment": "Malware payload", "value": "06a0c92c691e980875b3345ce72fe78b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981026, "uuid": "b9ac6f84-594d-4d01-8b84-1e44a083d305", "comment": "Malware payload", "value": "136e03127b12cc2b5242530339b24ad7c082741c152783d996b3fa63bc21f6de", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981026, "uuid": "93742da4-215b-41bb-b540-f07318534867", "value": "T181B4F142BD8155B2D6210C325669AB21793CBE201F24CFDFB3E46A5DDA351C0EB31B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981026, "uuid": "faef44a0-73c2-41b9-a2c6-33ecee79dacd", "value": "fcf1390e9ce472c7270447fc5c61a0c1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981026, "uuid": "53651ff7-ce98-432e-a7bc-41fb6aaa3de2", "value": "12288:JzxzTDWikLSb4NS7QX+tjUXZkzF4Lyqe185h9pp3bQ/FO:zDWHSb4NkJ4S6hE/s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726981026, "uuid": "70aba651-fc15-4475-8b4b-4bdd87da7d3c", "value": 535244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981026, "uuid": "33bd305e-773e-493d-9ff8-dec320b56882", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ddbd1f3-789f-11ef-afe5-82aee05be84a", "comment": "Malware payload (QuasarRAT)", "timestamp": 1726981026, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981026, "uuid": "2420b024-5bdc-42c1-9d98-6b0e0c05fdd4", "comment": "Malware payload (QuasarRAT)", "value": "6873a78f2c052c6a165209a26a0dab43", "object_relation": "md5", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981026, "uuid": "ec67dcb7-7a57-4dc2-a307-d93c8a99428b", "comment": "Malware payload (QuasarRAT)", "value": "d1213cfcb6ee6791dcf785b67585548f1168d642e005e30d1682ea53c718e57d", "object_relation": "sha256", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981026, "uuid": "5b27c855-e1e6-4264-8e08-7caa4df765b3", "value": "T1F4A45CBA1203FDDE5B7B0D44F4082645ECACB8E773D485A8BF440AD64AEA5589C78C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981026, "uuid": "d44c93f7-f860-4430-87fd-e9c444e405fc", "value": "12288:P6hXVEl76f8Ce+0eIkhTpoWUm/OA93p3/AKK:P6h3Q+0LCloWU7kp3/AKK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726981026, "uuid": "41ede65e-cebe-429b-956c-151845411b5c", "value": 475136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981026, "uuid": "c38a85f3-0ba9-40a3-90ec-96c6769e1553", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e0cbbc7-789f-11ef-afe5-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1726981027, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981027, "uuid": "c47e44f5-6c83-4406-8d66-f38d02b290bd", "comment": "Malware payload (AsyncRAT)", "value": "135c0b9a0d27900fa1541191636fe0cc", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981027, "uuid": "41f26d75-82b8-4ced-99fe-9cacf6743bb6", "comment": "Malware payload (AsyncRAT)", "value": "afb0b5261027cf8cb56ba2e74288f35f8a8f03f714e141da3004c24e1b6d3c16", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981027, "uuid": "29f168cb-9e62-4195-a2f1-480608bb1da0", "value": "T1A7533BF652131E8F4A270E18E80C1351ECED99A7B3D9D1EC7F4D8EB549995588CB0C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981027, "uuid": "6fc1ec8e-9d98-4b84-b9ed-bc7f26ff27d5", "value": "1536:JTjWGAaOVpWmvAbo8UywY6JCH35MM19WTXPZQKlD:/AEw8UW35/19W9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726981027, "uuid": "01122168-6dd3-487f-946c-8fab40a3faf8", "value": 64856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981027, "uuid": "59ddf93d-92d6-4a74-87f8-fd31af3fc10c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e2821d8-789f-11ef-afe5-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1726981027, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981027, "uuid": "fec17470-7742-485c-a86b-abbf0fddc18b", "comment": "Malware payload (RemcosRAT)", "value": "bece0135d1b8ab542db2b7f96809c819", "object_relation": "md5", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981027, "uuid": "25e0aac3-26bc-41e6-8b7c-043d6447edb7", "comment": "Malware payload (RemcosRAT)", "value": "96c864a187aff64295ab0b70d4e0148fc884b8fdef49a9c604553959f0c4197e", "object_relation": "sha256", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981027, "uuid": "1e739ccc-a78f-4ef2-a60f-1687e5f394d5", "value": "T195E4B0B95295AC8F0F1C0A66F4180B4A5C6D44D7E6B8C2F47E82B4F896950E44FFCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981027, "uuid": "abdb4131-bb7d-489a-a1e2-3315b3743ab6", "value": "12288:1kOKhFNXjOsggjpM3IzJquTTYuDu6pELjN/nwVNNn:1/0NlVjpRJ7TTYuDfcjN/wDd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726981027, "uuid": "636043de-d623-4d7b-98e8-225f5ada269c", "value": 659456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981027, "uuid": "085d4084-3cbc-4b8f-b84f-73d0cecfbd78", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e43435b-789f-11ef-afe5-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1726981027, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981027, "uuid": "86150827-88f2-4aaa-9944-c1d46c39d45c", "comment": "Malware payload (RemcosRAT)", "value": "4bb5357623c51ea31a7e3b42ea656dcc", "object_relation": "md5", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981027, "uuid": "19c65299-89a4-466b-bc0d-38be3f6edbe4", "comment": "Malware payload (RemcosRAT)", "value": "eaba256966e5d64020ad74d345ce2969fae5805b304862945360330900888386", "object_relation": "sha256", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981027, "uuid": "dbfcc028-fc64-4772-a162-a754fe59c6d7", "value": "T178E4B0B95295AC8F0F1C0A66F4180B4A5C6D44D7E6B8C2F87E82B4F896950E44FFCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981027, "uuid": "3402adfa-44fe-4023-a707-f711019715a4", "value": "12288:hkOKhFNXjOsggjpM3IzJquTTYuDu6pELjN/nwVNNS:h/0NlVjpRJ7TTYuDfcjN/wDM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726981027, "uuid": "1e668f0e-9821-46d6-a531-7650dff318d5", "value": 659456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981027, "uuid": "9ee211fb-39d9-4409-83b6-bb95801d8e5e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a4b57831-78a0-11ef-afe5-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1726981682, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981682, "uuid": "bf317f44-750d-476a-93d0-fb059e9b0479", "comment": "Malware payload (Stealc)", "value": "f52040e18f1ebf5f6e0a2529fb629024", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981682, "uuid": "09118db2-383d-4c91-b729-887c0e3ea590", "comment": "Malware payload (Stealc)", "value": "0c8610300f4937ed332d5901d527628c291300141829df0bfd0973dc29e8a915", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981682, "uuid": "70742d49-cf7a-4182-a6be-6a76285d4269", "value": "T1BFA49F6393B17C54F9224F729E1EE6E9361FF9208D19772B121AAA1F25703F1D163B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981682, "uuid": "985de898-477e-40ee-ab50-ae0acb43ddcd", "value": "2f3fb52e2448b38ca202de4ef9ca1d86", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981682, "uuid": "01011352-0df5-4e1d-8aa8-566f8f538b9d", "value": "12288:kV2aeMYs2P/TbfKmKo0a4smeFvUr5M6OSC:kVKMYDPbFKpac8D6OSC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726981682, "uuid": "b1e59ab0-5dd1-4504-88e3-57b815cdeeb4", "value": 456704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981682, "uuid": "2916f2a2-4f11-4c71-8e11-b8b3b313b4ab", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eab1843d-78a0-11ef-afe5-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1726981799, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981799, "uuid": "13f990cd-0643-4bf9-a6c1-889a575dad6e", "comment": "Malware payload (Amadey)", "value": "fd07283a91157618934fee802604fea0", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981799, "uuid": "6893e9ff-f421-413d-a09f-9a95dc47352f", "comment": "Malware payload (Amadey)", "value": "97d8afaa50d9d0feb69d11ecdf7fc95a8762ba97458ece1216bb9d85ba6bf946", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981799, "uuid": "b151e359-02d0-44e3-a6df-f43ab3e7ea9d", "value": "T10E9533206CD74AFACEF7D036737217CAE7A9981EC54353A519F0CBE8B012AAC72195", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981799, "uuid": "28a8f905-918d-483b-b872-ab48a6ba7963", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981799, "uuid": "f8214fcf-de28-4493-ab07-f936efd94f4c", "value": "49152:LBZ+Qt+RQJm0btnwomxdkSpp6tcx3NuwokmnQ4EM:qQtaqmIZwowRpR3N1QQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726981799, "uuid": "66489edd-daaf-4920-b3ec-6ef8cece9e83", "value": 1920512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981799, "uuid": "513c59fc-5ca2-48cd-b994-d1748955102f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ea57dae3-78a0-11ef-afe5-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1726982030, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726982030, "uuid": "24fdc302-14c6-4836-9666-82a180d7fac0", "comment": "Malware payload (Amadey)", "value": "697b27aac08e83e9e231721e7a03ae86", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726982030, "uuid": "e3fc5804-dfb3-47e8-9765-72c00e2ec0bb", "comment": "Malware payload (Amadey)", "value": "83a230c3297cef0bba8647992409cba4c228e0221def6c651c9bea434a96ef26", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726982030, "uuid": "7456b2ad-fe5b-4162-964b-05cea2ef6027", "value": "T15B9533AA9DEBECB2C3619D35F89A1931ECBD0FDD3D741610FE29003A6185BE502D09", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726982030, "uuid": "77c45aa6-4dd4-4a12-824b-ac4e764d91cf", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726982030, "uuid": "7bf4aa46-e46d-43ed-ac1e-5c0b9a014e23", "value": "24576:z/oeSusCIZC608wd2Au63yl1fSVZSzZQGPCM7A8/F+GyF53QMrZS1xCYevAUl:zAeXsvI8DAuYy/2SzuGPCM7ArkSqav5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726982030, "uuid": "3e359a07-be86-4a31-8827-1302bc0895a3", "value": 1916416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726982030, "uuid": "649ecfd7-ae87-47dc-91c9-94418547cc4a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3bda002c-78a4-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726983224, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726983224, "uuid": "d948b891-5ef9-4700-a0cd-56ad8ee47057", "comment": "Malware payload", "value": "672f87a2dad6dd43295940f343d6a73b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726983224, "uuid": "96af902d-2ef7-4a90-a629-5550f9863ac2", "comment": "Malware payload", "value": "45d50abea750d4c9c5fec155765717171b331a51a2165f31a8f71903fd95eded", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726983224, "uuid": "4aae0fe5-e516-45ac-a3a4-6f013ea79ad7", "value": "T18CF3F956F8819F11D5D151BAFE4E128E33135BB8D3DE72029D246B347B8A86F0E3B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726983224, "uuid": "7e92e552-117c-4228-b207-c33b7e1250aa", "value": "3072:IZzOuwo3nyh/XqFPe4KaXkmzRcao6vTnlIy7Ekp3D5h5Hez:IfwoCh/KeOX1zaafLlI2EGD5hgz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726983224, "uuid": "24be43a3-b8b7-4987-b7c7-98969f0165f7", "value": 167388, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726983224, "uuid": "ddbc6481-3424-4848-a141-f54e093e7f7c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726983224, "uuid": "084ebe67-a6f5-4c2d-b0f3-8d1941ee109b", "value": "t16bf02769ffe41e6d2bc88760d88aa90386967a982a126c175c3c2b8b9857d66f4204", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab6e12f4-78a4-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726983411, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726983411, "uuid": "04650510-5f9f-46fc-ab90-419a5a216d11", "comment": "Malware payload", "value": "eb914ae8b011208decc87d44cc1dd9e9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726983411, "uuid": "2377acaa-4e59-459c-88a0-cd9f4cfa8761", "comment": "Malware payload", "value": "f7b0f0be1fdff3599a5a34535985270581e6795a0f1c030a069699de3771d585", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726983411, "uuid": "bea299ed-5a00-4d8f-91a8-9c6fc834e805", "value": "T13924B61E2E328F7DF768873587F78A20976832D623E0D645E2ACD5151F2025E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726983411, "uuid": "e7fbbe22-3d57-45d8-9714-0f239a6251fb", "value": "3072:iCN83VYgUsaY1o+fcilQVvfttM8eJ501YBWElxdHQ4f:iCNAHUsaEIPMIKBd64f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726983411, "uuid": "82c5815e-3e04-4646-ad6b-217424021caa", "value": 210952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726983411, "uuid": "1e7b4dff-f666-4913-8579-5b835f43cc94", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726983411, "uuid": "169ef26f-b148-4ccf-bad4-af8484ccc6dd", "value": "t1b141b318097907f4a6256c9d489cff2ad7a730db7e162c278e51e86ee76af835d10c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d583c107-78a4-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726983482, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726983482, "uuid": "c3066874-858c-4a14-a7c9-1769bca0e2df", "comment": "Malware payload", "value": "b59669f1870da5a17f2bc583e8800833", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726983482, "uuid": "8e7e6fd1-64aa-4871-80c9-d9f2f641d1ef", "comment": "Malware payload", "value": "56a05334e18553c6ac2a6a6c091da1a4f7f0a7cc22f152fe3f3546db100fb47a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726983482, "uuid": "d1d07f25-753d-4ff0-bf8c-26c031d86ec9", "value": "T18E159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726983482, "uuid": "31ca6033-dc32-4c14-8c9a-e4f576dac71f", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726983482, "uuid": "b747bc5b-3479-4c8f-a7cc-4742b2c36d13", "value": "12288:yqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga8Tq:yqDEvCTbMWu7rQYlBQcBiT6rprG8aMq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726983482, "uuid": "2be70ac4-7eb0-4db6-a8dc-3ca560c7aa36", "value": 921600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726983482, "uuid": "312bcfca-1c35-4aba-85b0-00894523114b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a6cbfcd-78a5-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726983705, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726983705, "uuid": "4933a1c8-6ca2-4d8a-98f0-5e41215e6a17", "comment": "Malware payload", "value": "b7c907c0cbb7ef7e06b727f90d48df2c", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726983705, "uuid": "8a416184-41be-49f1-a26a-7a345952e3bb", "comment": "Malware payload", "value": "0faf2c86c9caee033e1bbbde5a29bea2a010d312fba79af20fa2bac4161f90f9", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726983705, "uuid": "b56401c7-f770-434c-8f46-f06e65c55050", "value": "T1E6F3F845FC509F22C6C212BBFB8E428D371657E8D3EA7203D9256F24379B85A0E772", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726983705, "uuid": "0ae60836-8502-49b2-939c-7d284dc88bcc", "value": "3072:eTjKSSg/fWlFvmKZk4tMtzBQ0Fw9zR6bALHD:4jrfyLZk4tM9BQ0FwH0A/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726983705, "uuid": "c0720b02-e19b-4c2f-bf0e-a38627c077df", "value": 158464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726983705, "uuid": "e4ad449d-531c-4e30-bbe9-05074d24695b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726983705, "uuid": "5b0ed0f8-72d8-490f-abdd-5a3e541ab35e", "value": "t184f05c02de5d159c0bd5438391ff823e5bdd34fde7569d03e2bdae56c052d9470194", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "75179df6-78a5-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726983750, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726983750, "uuid": "d3b4a9e2-684e-4dc5-aaa2-e395ca690f1e", "comment": "Malware payload", "value": "e5825138028274493803f10d24bd54d7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726983750, "uuid": "da1c0871-c42e-40cd-afa7-47c3b40caa0f", "comment": "Malware payload", "value": "c3f997ae75b4a9f8d5733693c59f7404f642714208424bfbe2d5d71b71080097", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726983750, "uuid": "e52fb356-4a0b-4a2a-abfe-489be5b13bce", "value": "T1F8E3E745F8909F26C5D221BBFB8E428D772A57E8D3EE7203D9255F20378B45A0E772", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726983750, "uuid": "73edb641-1050-4f02-9299-c7a081003dd5", "value": "3072:+Zj2WhmCvc/43S4vRRyqpAfFFmF0hUHD:ejsMS4vDyqpAeF0hE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726983750, "uuid": "24faaa78-f575-40bc-a29e-4ed9f5087acc", "value": 154368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726983750, "uuid": "9f18c949-c7db-4d35-bd4d-2e0d9d9e658f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726983750, "uuid": "642969c9-7d7c-42ff-bb2a-1375ceb500c7", "value": "t19cf05c47ee3401ec32e592c691bd182b08cc34f9a7902843ebbcfd5781624c4b01a8", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a48a4d4e-78a8-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726985118, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726985118, "uuid": "8ac9e3b7-d1f2-4f97-a8ea-6a13e71edd33", "comment": "Malware payload", "value": "5acf3163039244291e31c7868dde7f04", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726985118, "uuid": "f8d0ce5a-0603-405c-8a95-13119dc022ab", "comment": "Malware payload", "value": "c19402626fbb5f11bc87815c2aa56a27b3e3160a337de27c40b2aee2121f1979", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726985118, "uuid": "6de091fb-760a-4297-8476-436ac0c3befc", "value": "T1F4042B46E6818B13C0D31B7AFADF42453323DBA4D7E723059918ABF43F8669D4E636", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726985118, "uuid": "21d83fcf-12b5-4b88-8be7-3eff5e4151c6", "value": "3072:R2oMwjsPTJ6HuvIoHlja21cQlmPFXFxxdgu1QcHtIyS7z7M/9RfvzshL:qwjYJ6mJFja21cQlmpFBgMQCIySTM/9o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726985118, "uuid": "8872607b-48bb-4aba-bb86-0881635c2be9", "value": 176280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726985118, "uuid": "daea2fae-4b5e-4493-9411-5612dd50eab1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726985118, "uuid": "2d6677dc-2516-4506-b5b0-201a35890e22", "value": "t1c13167149922d41b68b28ab4defc97f154255333ab907e319f3ec8cc1525041f61bd", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68745d0d-78a9-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726985446, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726985446, "uuid": "51cbe0ee-1a07-43d1-b347-883aff2b3058", "comment": "Malware payload", "value": "0a9e7da8a56a692b0f739f4d1818128f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726985446, "uuid": "5d70df05-b9be-4ab7-a61b-4cc713c436fe", "comment": "Malware payload", "value": "a442768d4d14184e5b7b978f0846aa12029c3aae510628f9dbb44f11c537d8f2", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726985446, "uuid": "2ddef49f-8017-44ab-8221-03f0b410cad6", "value": "T1DA85330851362CB2C9A1837520EEB7A7BF2EDB594CF9012A5DCC013676BF57A32DAC", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726985446, "uuid": "93451b57-6f0f-4569-ae7c-c32c0fe86518", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726985446, "uuid": "c5bd3ada-4b7d-4af0-a84d-78e65c7d036b", "value": "49152:eeOtQbiaH+PJDXJHrtmqtFwWtqNHNmIgcNhzyW:eeeQbRH+PJrJHEqtF1tqeILy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726985446, "uuid": "ba7e59cc-4169-455f-a7cd-6159d3fb7b42", "value": 1761280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726985446, "uuid": "7fb6983e-1663-48f0-a0d6-2aca02a5f057", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a233f91e-78a9-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726985543, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726985543, "uuid": "fce8dec1-302a-4c85-ab51-0c4712b8180d", "comment": "Malware payload", "value": "2ff358ff8857ffa90f2e2b9d3be933ec", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726985543, "uuid": "164ab22f-bdb2-481a-9b4e-3d182bece7f6", "comment": "Malware payload", "value": "78eeeca3ead181d5bed1a1b8e79662bda8389ca791e73b38e7c188ef01c7d4f9", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726985543, "uuid": "8be1a4f1-190e-4455-906b-e7113d40b6b0", "value": "T16CB5CFCED1AE44D29C053FC998141ACB4B2847728A740068367B7D8A9F775FEC05EE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726985543, "uuid": "8678f57b-0067-4678-8bfd-a3322444cffe", "value": "24576:YnPlmIZJtyib09mF4VZYLHKJgimHt5kkM5PbRh:D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726985543, "uuid": "db43ba86-a4de-4ce6-89b6-866215c12306", "value": 2350125, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726985543, "uuid": "bfe7d2cb-6467-468d-bb3d-656d58144e22", "value": "application/json", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1726986307, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726986307, "uuid": "e2a5dacd-3c08-4e3f-a737-2a7744529aa3", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726986307, "uuid": "2e551c6a-cc2d-4ee9-8d7e-9e2554eea404", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726986307, "uuid": "07f16626-11bd-41b3-a22a-e509946d408a", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726986307, "uuid": "b76850be-3816-480a-8726-6ebb745466cd", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726986307, "uuid": "230d2185-6c05-4ceb-b30b-288b9d52cc3d", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8da90fad-78ac-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726986797, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726986797, "uuid": "cf12302d-7ebd-4bd1-90e7-fe37a8664400", "comment": "Malware payload", "value": "e231dc7f0bf1cc68b9fb0984439bd6dc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726986797, "uuid": "561bb22f-2d25-459d-8760-f4300d1f530c", "comment": "Malware payload", "value": "6033c8d54adb24046dd6b7f9671b40bc48cc1eee23b6de5b08e1252c9a738cdd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726986797, "uuid": "361b1fab-0718-42f9-a912-b29190e31e56", "value": "T11A24B51AAF610FFBDCABDD3742AA0B4524CC545722A43B753674D428F54B90B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726986797, "uuid": "b1521eb1-69c0-46ef-818e-f125d6b6cef8", "value": "3072:ALku4dAJ8w6vnKXmfSt6VXPmpsG4oiPnCEBaHg7E:ALkuwU8w61SUVXF9/fH7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726986797, "uuid": "2ad16bd9-2f7c-4bfc-bb2d-a349fc289288", "value": 210952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726986797, "uuid": "d9c4f5ce-59e5-404d-a1b3-4e3fce939b1c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e65badd7-78ac-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726986946, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726986946, "uuid": "7c9dad8a-1f64-4326-8a1f-b90aeab1beb4", "comment": "Malware payload", "value": "2fe9dac66697b277b270d8cb4ff3b75a", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726986946, "uuid": "2dfab2f0-0fdc-4283-9f8b-2d1c7a3e5a89", "comment": "Malware payload", "value": "889a8da6416f0583731233492492f8b6c50bbb72b82c22ada4e23a869661890f", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726986946, "uuid": "20717f1a-e2e1-4990-8570-bc2bf8ef766a", "value": "T153953333EA2904BAD2987A3DEE5FFF42BB7CE144E04ED35665454276002BB0AF6734", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726986946, "uuid": "21a8a664-fea1-406d-9786-13acb1b9f3df", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726986946, "uuid": "fc54cc09-b925-4b94-9c64-d0e9acf25681", "value": "49152:+8bMd4iOnnFkMS7nH621YLSMJPPOWW2vLkHlMt4Nv:bMdvOF90a2uSEnTI84Nv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726986946, "uuid": "6f842179-6f49-4770-bf68-514cf9894440", "value": 1917440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726986946, "uuid": "71f9ce6d-43ed-4a96-aa01-48633df0d374", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72681647-78ad-11ef-afe5-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1726987181, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726987181, "uuid": "25749291-31e6-4486-bab2-35463b525bdb", "comment": "Malware payload (Socks5Systemz)", "value": "042deac3fe6596e378a27d4e379c0c49", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726987181, "uuid": "da3b8aa0-387e-448e-a88e-4895a69e8f8c", "comment": "Malware payload (Socks5Systemz)", "value": "4cddd058e2dbf5f652b99663d19435c17f7536e495fc7c48f5dbe347a9bc932f", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726987181, "uuid": "4bb56175-e283-4153-9918-25cfcb871f83", "value": "T16106331AEB904879D0E197394E6CD99C8F3856CDBCB4F2E4A3547B2C5B92614C6ACF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726987181, "uuid": "38ef1f42-4738-4f70-a43b-bf0f272ebb11", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726987181, "uuid": "ed2413e1-c328-4b01-87ef-b7bdeb32da9b", "value": "98304:MJNB20xVQnm602IxVjmFqLfDoeO0WMTc8k1FZhYtaS:AB7XQnm6022mwg31G8S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726987181, "uuid": "5c0ace7c-a7f1-4ba5-a093-be34569b4a2c", "value": 3850817, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726987181, "uuid": "5ea2f65d-d30f-4a4b-a478-5c82c8e85742", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8fa2a75a-78af-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726988089, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988089, "uuid": "94d34158-a899-4c59-b1c7-020044adc8c5", "comment": "Malware payload", "value": "ea054b9b9e739f02824e3f30feed2a99", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988089, "uuid": "5e3068ff-ca76-4804-95e4-c47784260b8b", "comment": "Malware payload", "value": "de11d47fbcd611e0bb36a0362825fa66b582bf2a01eaa3267bc976d09e8415e6", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988089, "uuid": "4c3b0137-73a2-4788-9792-687c9f1229b2", "value": "T12F33F2E4D363EB12E26255BF08064DDE0F0E1BF8517A2511933DD69C109A8158BFDA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988089, "uuid": "b1322e16-18ce-4aec-8ab6-40af5de7c453", "value": "768:dPyuZr6HxkmEt3VY92uqUZlKOzzOTMoUH27J+n5gU9q3UELVVhRLRP5/JqpecU:Pq43VTU6OGg6+n5g9LVVhRNRgpecU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726988089, "uuid": "40b5a2fc-09ee-4b6d-a70b-c271e0dae13f", "value": 53672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988089, "uuid": "a8fbf240-bd81-4f7b-a530-7b61d6a754ee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988089, "uuid": "998baea7-1a89-403c-bb0e-1118bffdba73", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19f035c3-78b0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726988321, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988321, "uuid": "c5955b55-b480-464d-81ea-1f18a07edb97", "comment": "Malware payload", "value": "e507ba17f227a2e5be8abdbb16dd21d1", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SpyNote", "colour": "#ac1889", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988321, "uuid": "381f227a-f3a8-4837-b10d-bb4eb17a22f2", "comment": "Malware payload", "value": "a6315b8461d25a63d29477d9289e5c4b0510f2fa189e26e312d99245e8418fec", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SpyNote", "colour": "#ac1889", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988321, "uuid": "95f7223c-c912-4f5e-8438-b1457d1945e4", "value": "T1FE66014BFB89CB87D5BDC3F95A23196A2A131F04CA5296EBC518BB2D3D730D14DC46", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988321, "uuid": "df8f63c8-32d2-44e8-b4a7-22f7c81a24b8", "value": "98304:t7sZ94zBqTNmzkJZ17uhczaSBL4hGNfCZfejYodaj/V7YWUW0tjfuW6bihbI6OCC:5eAzkefuL4hecfe+1UdjfuWvByCg9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726988321, "uuid": "e6e0afa1-8fa9-4344-b8ee-4ab574778e2e", "value": 6908401, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988321, "uuid": "01bc316a-89c0-435e-9afb-510fb6bb27c5", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23eb9fab-78b0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726988338, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988338, "uuid": "5b6f0dbe-b501-4240-92ce-46dd3090ebc8", "comment": "Malware payload", "value": "6b19786b0d16eed17b0eba0bce14c887", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988338, "uuid": "3dac3717-56c1-498b-b886-d3d36bff3a68", "comment": "Malware payload", "value": "92bc7fe14178c61de6a0af6e9861557a5da99aba5a1e99d9c3feb6e4ccdbc839", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988338, "uuid": "2ec27867-bc38-4730-9caf-a16b8a369b76", "value": "T150F35B06B4C180FDC4F5E1B48F9AA176D972F42D2224B65F37D4BB221E4EE216F1E6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988338, "uuid": "5fc0b601-645a-44bd-8352-c5c25f26df8f", "value": "3072:XTz6Imk9lwDTreZIjGnaivUkELMptBAqfgMe6blnkyC2U9N:qIqDexZ0La9NeCkx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726988338, "uuid": "0e19219d-2cc9-477e-8fb7-f872dacab60f", "value": 164040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988338, "uuid": "264f93ed-4239-4628-9d9a-20f7fbb9a800", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988338, "uuid": "9c86ba8d-eb32-44b7-a099-d41b05d181e0", "value": "t1df51ad303e923a9861e3e66ab34ed96aec3209122dd270f09f673ce2de577940d730", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "71cfab1a-78b0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726988469, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988469, "uuid": "3462d4e5-81a9-4e69-aed4-c295c778ec20", "comment": "Malware payload", "value": "4e79310f9a8d5d71a4577b31c50b327a", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988469, "uuid": "b5b72b0f-6948-4b92-b00f-69da7a677b1d", "comment": "Malware payload", "value": "7605711ea67a11ce584cb708a7b457ef6438b772984f779acb6cffc674e9e15f", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988469, "uuid": "14701c10-3cce-4ce9-bd9f-8ffaa2f8d6c3", "value": "T158113CCF3168A191188CAE48F06A849B76C98FD130700F6D694F4DF2A1E4A287375F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988469, "uuid": "12cdc6b5-d489-43cd-9b37-c475b59847a2", "value": "12:8cjUcULqUciNIl5zAUcP0LKjUcuOsUciCUcc/UcVSEUcotaKAUc6jUcWiAUcSfAd:JgL7dNI75lKgVipDb8oEZtBl87aVHA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726988469, "uuid": "28b734fd-b3d4-4a88-84a5-e8a8d75e025c", "value": 876, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988469, "uuid": "99e09900-87b0-4703-af6d-c37730d4d762", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6df6266-78b0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726988584, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988584, "uuid": "387762f0-29a4-4298-89a7-d37710b04e3c", "comment": "Malware payload", "value": "518a9f3740c1f3347f002b6884fbb894", "object_relation": "md5", "Tag": [ { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988584, "uuid": "5f10ae51-9500-4704-8a87-071966e5b6e0", "comment": "Malware payload", "value": "4ebc94abebf655ccdb70a75cd01d1524b4b946c193824d386a20146f20dd083e", "object_relation": "sha256", "Tag": [ { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988584, "uuid": "4db265a8-546c-46de-ba30-206c045cb2dc", "value": "T1415173C9B79130323CA65AEAB7BD0494719090E69CFD9ADD5EE838E8C28CF1C35486", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988584, "uuid": "e7a667a3-b991-4380-974d-c66bf61a98cd", "value": "48:vlWnWtZlWGWYalW1WTjlWaWkSlWQWCwlW0WOMlWiWWF3lWPW1dlW8W28lWZWfBlB:vlGYZl97alcWjlljSl3dwlP1Mlwi3lC5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726988584, "uuid": "f57ada08-9fa0-43a9-9a4c-703e6be0e638", "value": 2655, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988584, "uuid": "75187c5b-a2de-4f1a-b258-684f26577b4e", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be948ff7-78b0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726988597, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988597, "uuid": "37939544-54db-4357-be89-fa6981f28682", "comment": "Malware payload", "value": "7961c6dae896bbbc5df2ca417bf30595", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988597, "uuid": "07742fe0-2982-4e1c-b775-5a6661a49f83", "comment": "Malware payload", "value": "14d75533f74c1a726a559cc8a332d41d98d98ee87e7a87d15c3f5aa94debbd14", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988597, "uuid": "45398bfa-c92c-4cad-8343-90b58f621ea3", "value": "T17B334BCA66022E2DD5D65CFD80734F0ADD552211A4A3172BB3ABFEC339332A4FE459", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988597, "uuid": "a651323c-d43f-4a85-8d53-cdbb2d13846d", "value": "1536:78+/b91trZyUr99C7ZQ2Fv7cuMKg1pzAD3+:7599Kn6uMTpEDu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726988597, "uuid": "2908ee5a-374a-4cd0-a50f-86aeeea64978", "value": 53620, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988597, "uuid": "6dbe22ff-c925-442a-8c38-12c83ecb9c4b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988597, "uuid": "85bf3b10-5d6d-4074-be2c-a0458c9c2736", "value": "t11ee07200ec75871c88dbaa749d8d07b4ca012216606b0b10cf10daf4c83f448f30ce", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db52f1e6-78b0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726988646, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988646, "uuid": "00436a31-bf92-42d5-868e-c9e7dd90ffda", "comment": "Malware payload", "value": "cbdc0905636dbd8d2fb5d720d4d357a8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988646, "uuid": "7288e72d-e8b2-405f-8637-862672f977b7", "comment": "Malware payload", "value": "0b3a4387379461ff6d38d234a7b9dfe3ea52b20fcf2d609ed51f7e33c7216fca", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988646, "uuid": "7b352233-bb12-4ba0-919f-0518c74bcfb1", "value": "T19B233B42722C0A4BD5A21EB0393F0BE093FFE99020F4B588665F9B468635F775586F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988646, "uuid": "d9df7d35-ce35-4b5b-a90d-cc448780e6b7", "value": "768:vzWbJ8V0Wc1qbkC+yuvRsGQBCnfw0XpaB7UXrFVdUPvEXQZSz:vzNiWc1qbkAgbuC9sMXcC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726988646, "uuid": "74b96126-2703-4b0b-976f-2eadede8d56f", "value": 47124, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988646, "uuid": "76cf96d3-2743-4fed-961e-a3ab5bf2c3f3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db548c57-78b0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726988646, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988646, "uuid": "f7c26daa-10eb-4429-a4a5-b908c36821bc", "comment": "Malware payload", "value": "8beab052fa856f7a1c8c532e1059b3f6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988646, "uuid": "f03af340-1579-4ac7-a1f6-359bd77513cc", "comment": "Malware payload", "value": "21e6c06fe5ac257c77f4574e0e2c1051ea542140d2a1230adf17bd4d2402d96d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988646, "uuid": "12db9760-1599-4c54-841b-be4cd94b1207", "value": "T169233B42722C0A47E5920EF4393F0BE083BFE95024E8F589661F9B498A75F775186F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988646, "uuid": "59835a66-8da6-43d7-af7a-d684b8876625", "value": "768:tPQcPXDXg7bQvnDqdkSGjYoIFlflVomkRswx8t1ffRCc6aRuVRDbmToERmyXTzyB:ttPXDXg7bQvWdHGjTUlfliF3GZLTuPWk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726988646, "uuid": "069359bb-7920-4f98-9386-58001f9da4b4", "value": 47212, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988646, "uuid": "d15af9d1-5261-486a-8b20-d707814a97af", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db55607a-78b0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726988646, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988646, "uuid": "de66f306-b602-4b8e-bcd7-50c6d31476a3", "comment": "Malware payload", "value": "8e50be435e3bf1c00bff4e0e592672bc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988646, "uuid": "d4f7c048-7b74-4055-9d32-4dfc534b7066", "comment": "Malware payload", "value": "596cae55567c119e4e085cd84468fe79c5a84448e457c2ed7597d06281468465", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988646, "uuid": "9e025e5f-b37f-4890-a211-a7c32195ebe4", "value": "T175137EA2C46DAFD4C1488674B9384F781B53E44087536FF69AD985A68087EECF60C3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988646, "uuid": "6a111e99-dffd-4754-acc9-c9dd90406a94", "value": "768:pnaWpSwtvGPd/QQN8ePPzzNVjgraelid7/qWbCckou9vC/:la0Swt+K46raEit/qWbTmvC/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726988646, "uuid": "bb83cbf6-06f4-46b1-bca9-c1854e33d1e7", "value": 44336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988646, "uuid": "995d4831-74bf-4b09-b1a6-c8e085fd01e2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db5a1999-78b0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726988646, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988646, "uuid": "a224cdcc-ead2-4510-8149-28b5127c8f9c", "comment": "Malware payload", "value": "4d743ee96fffa661ceeaf73c89ce5e62", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988646, "uuid": "cf5ff1b2-efff-4487-8494-e8eedfc0fe6c", "comment": "Malware payload", "value": "377ae8d607c4980b4ddd08b0b0b7d1e6ac9fcf1e08a5bb0f6ac3dc66c0713487", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988646, "uuid": "b1afea3b-0b97-4f3e-8f11-e12afb2de2ad", "value": "T177233BDAB801AD7CF94FEBBE80164A0AB62133505193072767B7FCD36C321A49E66D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988646, "uuid": "ef9179b3-b86e-450a-a992-778d6a06e7e9", "value": "768:Obez1MYbJspJqE+Ink8gEurGEO+bdbujWen3poWRJTao02bc8Jq:yQaYOpJOVJEurGgbdCjpZoWRJuo02A8w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726988646, "uuid": "16e7d110-a812-4434-9dd3-b406d90a25d1", "value": 49788, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988646, "uuid": "a627a31e-dcd7-4ea0-9341-3e9ada74f83c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db5ac424-78b0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726988646, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988646, "uuid": "0671908f-9220-454f-a093-23902a50519c", "comment": "Malware payload", "value": "f42dee47838dc35cab01051d24f1d889", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988646, "uuid": "3a236ce6-85d6-490b-859d-1d71bdb4ac7b", "comment": "Malware payload", "value": "9af934216a077d5edefa1a546dca4e9896336141acc7cd9adba400f23fd33ae9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988646, "uuid": "20265cfa-c843-4b43-a0c5-97dff1ffc718", "value": "T125638409BF654FB7EC6FCC3749A91B45258C641A21A93B397E34D828F24B24F09E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988646, "uuid": "097fb861-c6b0-4278-8296-a7a62bb144a2", "value": "768:q+xGiJEEYlDIR99LX0LEQJtw65C5f2eaeyWecf0oN3pkavdU5tXirnM+ufp:q+xGiJxYlkOJJp5CgvjWrfQ7Au", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726988646, "uuid": "10b4a8f4-1ae5-468e-b9bf-b58776fb117e", "value": 67484, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988646, "uuid": "54a057d2-c1d9-4d3f-8427-d2a082ca3dcf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db6ea7aa-78b0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726988646, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988646, "uuid": "e7920a16-1d9f-4df4-94fa-b3e08860e8d0", "comment": "Malware payload", "value": "ca5d30c870d743aadb6e7009e9775c6c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988646, "uuid": "da96bbe9-f182-4cf2-99b1-fd7516dc7226", "comment": "Malware payload", "value": "a6553dc4816cf22fc4b7354a671fa11ab1538c29c5c8fcc8bbb67b5df452e070", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988646, "uuid": "6ac94585-5dbb-4f27-a5d4-1bc76487fb2d", "value": "T1A6B3AE9FF7474590C86247F00BC74BDE3E233202AE6BC8E76D1A2A3959751DF8A067", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988646, "uuid": "a33a2e96-5589-4f95-9992-fe4fbf6a4816", "value": "1536:Io+aMxiW0b/CdIsj8BiZ7Z+KXwW4gk/LWF:F+hEbeHj8QZd+owW4gkq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726988646, "uuid": "67236632-414d-4d6b-8dfe-23b4a7d45b65", "value": 107624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988646, "uuid": "18483d52-57a2-45c0-8ba3-10daf6ca74c0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc16e10d-78b0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726988647, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988647, "uuid": "f6b236cc-a12d-4181-baef-725e9a9f54d8", "comment": "Malware payload", "value": "1f399fb1a6689ed688eb678fa4f5abcf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988647, "uuid": "dc4dfdbd-e91f-4ce6-a0b7-414f05f464fb", "comment": "Malware payload", "value": "88f122e1da0487a591749311d546474297f906ce0ca8ae5f24bc6428188d28bc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988647, "uuid": "e9567ec9-60dc-46b6-b176-806700ffd36b", "value": "T17B634A4178828A23C1D157BAF6AF419C37217768C7DF33029D297FB42F86A5E1E6B2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988647, "uuid": "175e08bf-0890-40f1-8f7b-abc01db40f03", "value": "1536:YcZr67518s7yzr8IfU52vpyGTApdP/BFUpE7:Yc16NizrrU5g0GTodrUq7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726988647, "uuid": "2e26c1d6-05f9-4969-9c1d-4fc129724928", "value": 70379, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988647, "uuid": "509328c4-f596-47fc-ba77-e1a688c7d125", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988647, "uuid": "2ee47de3-ec5d-4f02-a3f5-8a708633fed0", "value": "t1de11bdf04b26a6245a59cbec49dd736a162c8206564bef33ee3084bc64094ace225d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc3053ee-78b0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726988647, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988647, "uuid": "1a07692d-3c28-42e2-9f8e-11bb20b9a393", "comment": "Malware payload", "value": "113bad583f4f81aa65d58a6d7bb4cfc1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988647, "uuid": "ce65ceaf-7d91-46b5-932b-ba77d9a84a06", "comment": "Malware payload", "value": "51a0dc606891312df8a8ccc5c7791e3ce4ca5cb6a39aff65392416403535e153", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988647, "uuid": "345e5056-29f4-4b34-aaf0-1057d10dca90", "value": "T1CB63294178828E27C1D127BAFAAF419C37217768D7DB33039D157EB42F86A5E0E2A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988647, "uuid": "bfc7f710-08b7-4240-bf27-38cde42ead15", "value": "1536:hsc2K5/1F8sx/q9NIf557api2T9nQ3AuhpE7:hsdKl3q9855+E2TIhq7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726988647, "uuid": "7ec8714a-9925-4d0c-bbcb-c3d1c6caa506", "value": 70443, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988647, "uuid": "542703be-5d82-4f98-b509-ce46376037c1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988647, "uuid": "b545d561-340d-440c-a52a-30e11e4fcd5b", "value": "t1de11bdf04b26a6245a59cbec49dd736a162c8206564bef33ee3084bc64094ace225d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc575178-78b0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726988647, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988647, "uuid": "100d1893-ace1-465a-b97a-9e9f5fceca48", "comment": "Malware payload", "value": "b62ea189c96f36663a3fb03bb0831ca9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988647, "uuid": "211554af-82d4-4e04-b630-0741d3c6d76e", "comment": "Malware payload", "value": "5ef30ebf757f5a7a900c195d37d27340e6b4f2a952f42325b89af231878265dd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988647, "uuid": "a2833ac4-dfcf-45b0-976c-4c7ceb8b7275", "value": "T1F783090268928903C4D117BABAAF41983322BB64D3DF7311DA146FB41F8769F0E7A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988647, "uuid": "b3187444-fa79-41ff-989c-2043afe2a9a2", "value": "1536:vVngnqKeLujJELiapVYqbrKGaEVbFLJIZirlsEKWhojKsosPywYt:0cLIeiKVYU3aelsEKWhojKfsqXt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726988647, "uuid": "f2b73997-6c03-4d1a-8560-543ec0d3e2fc", "value": 83762, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988647, "uuid": "15b7ccbf-e66c-4657-bcb1-834a3acc4d72", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988647, "uuid": "edf8bcec-197a-4854-ab36-7a01673946fa", "value": "t11121e4b1472a56246665cfec9ddd73aa022c83156386df33ef21c4ec640909de535c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dca6e30c-78b0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726988648, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988648, "uuid": "6c71f01c-61a1-4c5d-82e4-b8d10079cd95", "comment": "Malware payload", "value": "117ab1a9814af9ec5098bd22845ce093", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988648, "uuid": "cbea9c54-a5cc-4ca4-82bd-170a45488e79", "comment": "Malware payload", "value": "8881c98417680772fbfe9db4f5787fc86b5a8287a5dba021e22532ed1a9dcea8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988648, "uuid": "d9aed5a3-0f21-45c4-bb10-0bf8d88fb270", "value": "T15BC33B56EA818F03C4D61776BAAF42493323E754D3DB730689186FB43F867AE0E635", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988648, "uuid": "1729b46a-7ff4-4994-b435-3183ffaa1435", "value": "3072:VooDA4XMCDDVl2ZcFhxD0rCxF+oV+M/9Wsli/:uoDA4XM62ZcFhxQrE+okM/9hli/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726988648, "uuid": "31988494-f201-4dd4-a751-9b3adfbce32e", "value": 121471, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988648, "uuid": "321aaf3e-a25e-46a6-b08f-a40b015996c5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988648, "uuid": "1fde26cb-076d-42a0-ae1e-ce8f8122be95", "value": "t1c121e4b1471a56246665cfec8ddd73aa022c83155386df33df21c4ec640909de535c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dcc6d8c3-78b0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726988648, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988648, "uuid": "50cc0060-219d-46a1-abe9-729285e4d752", "comment": "Malware payload", "value": "d6c8c72a2b20a03cd72a6fdb65520653", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988648, "uuid": "bb8fd557-87cc-406a-8e9c-70e4ac2c587f", "comment": "Malware payload", "value": "3f8a677d715b4cb8d53ae6b70b4988291f4dd38752c4b7bdb1d06b5ee5f18dca", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988648, "uuid": "8cc0cc84-54e9-4399-afa1-e65103565c9c", "value": "T167330807798180FCC059C178577AB63EC82375BE023DB6AA37C4FA276D46E319E6E5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988648, "uuid": "9e9596e9-3c1f-4717-8951-0009c569ea4d", "value": "768:3lT0Rns58TBH9dhjP9nmNpTvvibMraAyKeregWu08aQQUiEw7GQBi:x2ns58TdPhjP9mrT3+De50aQnw6v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726988648, "uuid": "e2b62f92-c270-4754-9077-4202eb855dd1", "value": 50176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988648, "uuid": "6b01926d-1895-40c2-bbe1-dbb057290cc9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988648, "uuid": "a6114c9a-59a4-49b8-b0c4-6dc55e35e375", "value": "t10b01d2b57c190ca0a2f3fe7773e7c1660cb82a3491c436d3c5b95ca89b5131508764", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dcd55759-78b0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726988648, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988648, "uuid": "93b5553a-fbf3-4cae-9d45-6ed3f2381bc4", "comment": "Malware payload", "value": "4db0ceda6ace8a46cf4a4ebdc0e3c0a5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988648, "uuid": "cf4cb846-e9e0-4af5-b477-16c4d60962d3", "comment": "Malware payload", "value": "32b97d9bae2b89032b0eb7bd71f0e1dbacd2ae7746232515da6edc71cd88ad5e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988648, "uuid": "64e396da-ed47-4b84-8954-eb235efe2f58", "value": "T121237CC0A543D9F8EC150AF43173EB329B76F07A2129EED7D794A532D842702E6472", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988648, "uuid": "c5ab0082-ee60-4c2a-83c7-0d827a62f10b", "value": "768:gjo8WnBsux3TUi32+4qbBYSWLg59/nbRNYMbJoSFO+Meb4an:gWBsux3TUiG9qbBYSWS9/7Y8JoSFO+1P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726988648, "uuid": "1bd5c89a-0ee3-411e-a3c3-5b0635791d99", "value": 45656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988648, "uuid": "9d948dd2-4060-4a6c-8213-1a7a9af751b0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988648, "uuid": "1ff5a8dc-e207-4054-ba2f-8ca345a0a8c9", "value": "t150114cbb5e6104f873e8b944db1d23d61979e65304b13ba904b31dd853d25c1d07ec", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dcd56aa1-78b0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726988648, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988648, "uuid": "34119c84-75ee-4186-9686-d4ce64b8c092", "comment": "Malware payload", "value": "704c66a239d8646c3f59ae3a6ddcf4a7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988648, "uuid": "8da20dc4-f92c-4ceb-9ed8-1ee9f97ec8c6", "comment": "Malware payload", "value": "0f3d3543cb0c9e8c9adabddbc4425c960ec98f1a540772dce3a68bbcb3266594", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988648, "uuid": "2f83af15-ef8f-42de-b8a8-411c64956fde", "value": "T107333C49E793D5F0DC4609B0106BFB3AE6369C316234DEABDBD9F923ADB1A0190172", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988648, "uuid": "51a8f8a1-3cc4-4d69-83c3-e8d9df39ae72", "value": "768:xdKT3ZRkp85FPeGfQDL6PsV2EwVblYiw8XNSJzEG+E2mXqyG7f:xKkp8WGfQDLigIz1XNSOeGb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726988648, "uuid": "40ed52b6-495a-46d9-aa84-55a384fa534f", "value": 50392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988648, "uuid": "c116416f-9074-4b7f-ba32-2f3c3914ff56", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988648, "uuid": "98b1e0d0-2c19-40d8-86b6-79f3ecb972f3", "value": "t19011d37f6ef50ae8fbd49504c30f93e00a75e93f6210b6a412b2a91553e0ec15179c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dcda386b-78b0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726988648, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988648, "uuid": "c83a9b73-34c0-4288-a47b-9906146885a1", "comment": "Malware payload", "value": "706af2aa53d47825270f67b661e4dd06", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988648, "uuid": "01cad901-4ac7-4a0c-a38f-e21f7e0600d3", "comment": "Malware payload", "value": "c03405ac6779c86a960e9d4c3b1b802ec8498ea788f4776be7d41d2cb69ba880", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988648, "uuid": "b8c2c2d5-8ca0-4a96-8957-77ddf1cd09b8", "value": "T123232A81F68B85F5D407493050A7F63FCB32E57A8171D6EEDF4DAE32EA6760282072", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988648, "uuid": "5cbabfdc-fa6d-48b4-8a72-8b9ae3f716f0", "value": "768:23WsnDEPbdhkIFX2s701yIw5dl39wxwd7cJ+BjiqIL0xMh:UWsnD4dhkGX71Iw5vywdIJ+BjihL0xe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726988648, "uuid": "2b558891-9d3e-4810-8b70-dcd81498e8b8", "value": 49756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988648, "uuid": "f30dd9ed-087b-4a7f-9cc0-ef36acd44531", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988648, "uuid": "70c19053-fd27-4f31-823c-cb4807219533", "value": "t1c61106b71db60cfdf7d22c24c72967d1190ad67b1e6037f18622d8013aa0ec160a9c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dceb32e9-78b0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726988648, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988648, "uuid": "cce80e34-d1bb-4e52-ade0-afe18db5e496", "comment": "Malware payload", "value": "8dded4d8edf811b1e4eed07546420a5b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988648, "uuid": "1e9e89ed-e282-47c5-912b-55f296a0f359", "comment": "Malware payload", "value": "be93c13adaa1934a83ae8d1901b452802f9f5183b5f6329c70706960a5858e32", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988648, "uuid": "5a76b1bd-64a9-472b-824c-e632986a9eb3", "value": "T17553970A3E21CFBCFBAC863547B74E309658339526E1C584E15CEA015E7070E785FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988648, "uuid": "c054bcf3-4cde-4ddb-b15c-84b6e2a1cb0b", "value": "1536:PjNpjrDujW/+mZBVJtnwySpKBKfKIsq4jQMZA:bNpnD+Cj5wyLmKIsq4kH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726988648, "uuid": "f60517fd-6eb2-470f-bd40-ed0957db2a64", "value": 64012, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988648, "uuid": "2a2c517b-69f2-4b66-97a1-80faee45a302", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988648, "uuid": "099eff17-94be-4580-8f04-ca596dc6fbf5", "value": "t11f016d5c883817f0d3815d9d6becff76e09140df59625e3b8d00e99aeb26a468d00d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff5a39f6-78b0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726988706, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988706, "uuid": "117c38cc-2208-4e59-ba86-efe06ce43925", "comment": "Malware payload", "value": "7f17b155d64aa5614b91f633e14e5c56", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988706, "uuid": "76012c98-1c13-4806-8f9b-13044e0dd00c", "comment": "Malware payload", "value": "53a060d8b4758ed722222b498181b9e5508ba08784b2bc24c029399cc04b51d1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988706, "uuid": "ba0b64b1-aac0-4211-a5e1-3c4f2814884f", "value": "T135336B32B93A2E17C0D4A87A11F34724B2F1275E25A8CB2E7C720E4EFF14A40A1576", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988706, "uuid": "e63a7215-9096-4c88-b28e-19c01f078659", "value": "768:F2oFxxNq9KaLfLM1/e0t1TYJY71xtOZ6OqPYj4DD2yLO+bN2vTD:F2KxxNSVfLM1/VttY61xkRWpPCP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726988706, "uuid": "c374b94f-3f10-4cdb-95d6-a5182119d8b8", "value": 52276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988706, "uuid": "553f0794-4217-4442-bb15-6fd907d557d8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "30864283-78b1-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726988789, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988789, "uuid": "304b4169-3027-4b87-a358-0fae7339cc05", "comment": "Malware payload", "value": "29b482980c3f2ade0e216c81b59999e1", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988789, "uuid": "79a8a253-26df-43b7-8aec-24cd1ad65697", "comment": "Malware payload", "value": "d2167480a60db23966bc0e0921739d47ceec4333eac2e066d04bbc56054ebd17", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988789, "uuid": "8063df74-2458-4c84-92dc-7abe8d35418e", "value": "T143C2D034419E5E51C635C639AB7899847F544ABCA3B310A7BE41A3B8E4C3847FB334", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988789, "uuid": "d55eb71d-d231-4e7d-8baf-b94253cb80c7", "value": "768:HRYtLOjiI0iTehHr6qiLGOXQJYu5RZts3UozGv:Hat9wALKGlYu5RZwzq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726988789, "uuid": "b1895248-0992-4342-ae00-e29c69574421", "value": 26328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988789, "uuid": "401a0344-044d-43b8-a8c4-734f3549675c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988789, "uuid": "0cdb6e99-a402-4994-a58c-298e7b23d574", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a0ca6c6-78b1-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726988885, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988885, "uuid": "6f32f20b-0b18-4b69-aab7-94575893220b", "comment": "Malware payload", "value": "ced7ddb8a881ae26d1f39b9cfe9d8c07", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988885, "uuid": "ddb66555-c574-4052-a1fa-a1a4c9dfb409", "comment": "Malware payload", "value": "7fb2b3aa5b14a1935c0b786d7f570cbc1594a6c24efd45e7af1149f1028c0190", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988885, "uuid": "be0678d5-5934-4457-9831-820eae4fe590", "value": "T1CA43D795BC83892AC5D413BABA7E02CD332573E9D1CE7253C8204B547BCAA1F0D67E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988885, "uuid": "e632ac02-e13a-461d-a46f-71a6a9819411", "value": "1536:AjRQwujotrrlezT54BRL9jnnUbyx1glynn:NwuQo4HxjnU2xKY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726988885, "uuid": "d255b762-b4a5-412d-a675-99e8f2bf6cfc", "value": 55220, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988885, "uuid": "89a07b04-7bf8-4e7c-8d70-f3894ebda1a9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988885, "uuid": "7d5130bf-b500-44e1-817b-ce7c43a51399", "value": "t1bce02600ac659b5888d79a749d9d07b4a9012213546a8b10cf10d6f4d83f458e708e", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a16fe48-78b1-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726988885, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988885, "uuid": "85003344-6989-459d-851e-98f57bfe0e75", "comment": "Malware payload", "value": "a869b4cf15a1ba93b6ba30a556e0d84c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988885, "uuid": "37e3ff9f-dfb0-4988-bf3a-0d2ed086ebe2", "comment": "Malware payload", "value": "7a99de1a7fe4d21d329fcc07ac829c8df0d47b8eb26750c3e5f6f8b60d0c2a53", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988885, "uuid": "6b103f44-6d8b-4fb0-b4f3-19e3695f4813", "value": "T128B33B0272294B57D4A78EB0199F5BF047BAECD025F17609E91EAF944733BB21089F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988885, "uuid": "3fdf504a-ea2e-47da-a0eb-04a02380a64b", "value": "1536:YD3TbOq89I/ndBtXNVp5BSqsvtDJHyjqMd44eg8OrdJogLzb+9VOMWF15DQF7nQe:GDjnX5Tp5By7YcbBOrdJoDBCo+u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726988885, "uuid": "d0c8501a-e74b-4cb5-8b7c-0864c6d3909f", "value": 113463, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988885, "uuid": "2e4c703c-dca6-497d-b9d3-39cf22d5a691", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988885, "uuid": "5cda1c27-e518-4a8f-be57-d7268f673c89", "value": "t19d31eff14b2ba6285a68cbec89cc73a9022c93155247df33ff2584bca01549df929d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a30ffbe-78b1-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726988885, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988885, "uuid": "3cd34c70-04ee-4c79-bab7-e043d19d09f6", "comment": "Malware payload", "value": "61f8a9c848bdc9e581b26596945ed196", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988885, "uuid": "844e15d5-b82a-4c71-b878-d61d53fa6c78", "comment": "Malware payload", "value": "754b23e0c941a7a5ed6b54bcd1779537aa327e3a0f52e0ec6e889cc51279cbda", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988885, "uuid": "43aba5e8-a1c0-4bc7-b457-ecf73a4be6a0", "value": "T163E3C61E7A258F6CF39A863547F78E31466437D22BE2C045E15CEB142E2178E684FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988885, "uuid": "b6ff2b7c-bf0b-439f-abf3-e20081aab9d5", "value": "3072:jw0VJD/eGdUAHj11b68XD4QJkY7JsDIghs481qLOliNLIU3P:jw0VJD/eGdUAHj11b68XD4QJkY7JFghT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726988885, "uuid": "5fd609fe-ac03-4a04-910c-5ed2eaa13ac3", "value": 144299, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988885, "uuid": "92f28b98-4443-4c06-8e49-43059633feab", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988885, "uuid": "fc74dc48-a944-43d3-9163-9ff1f33441c6", "value": "t18831eff14b2b66285a68cbec89cc73a9022c92155247df33ff2584bca01549df929d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a844254-78b1-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726988886, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988886, "uuid": "87be6955-bfe5-478f-9f48-e7b338eaa40f", "comment": "Malware payload", "value": "a11fc5d26e2b664bf6bc80b1bf92a30a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988886, "uuid": "4b70c166-5cb6-4211-a2da-6c7c3aae3ed3", "comment": "Malware payload", "value": "a89e70022a1aece9f3b1fdbd71929c506c1b972332a718ec5aa7ea623406634e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988886, "uuid": "6410e034-d4c0-4adb-8d21-103b9ccf68a2", "value": "T1F9E35C46FA818B13C4D517BABAAF01493332A79493DB730689285FB43FC6B5F0E679", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988886, "uuid": "00b87129-8827-4cd1-ab55-3c10224831a5", "value": "3072:368rdjoSdeudwaNuiVZdm8Tx2XehVVkGXfMYM/9FjzWe:368ZjoyeCZm8Tx2X6VNXfLM/9ZWe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726988886, "uuid": "82a7f8f2-af73-48db-bd2e-6418098907d8", "value": 153779, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988886, "uuid": "fd3c8be7-2d6e-439f-8d4a-148a421d1de2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988886, "uuid": "05feb1ec-bf46-46af-9a44-001add3e39ae", "value": "t1a931ddf14b2b66285a68cbec89dc73a9022c92155247df33ff2584bca01549df929d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a912eca-78b1-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726988886, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988886, "uuid": "a6b5d24c-00ab-432a-bcc3-0b987bc6f48e", "comment": "Malware payload", "value": "8608d37846255d08ca6668772758ec08", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988886, "uuid": "867323a8-4ec4-4551-8e01-07a8ed3ef6c2", "comment": "Malware payload", "value": "a6939650c1f7ded9ca88856a1119da1d7251905f9b578c5ca43fb4c16adbbf88", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988886, "uuid": "470cdd62-2fdc-4611-8c83-8b7176d0e495", "value": "T12BE35C56FA818B13C4D517BABAAF01493332A79493DB730689285FB43FC6B5F0E279", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988886, "uuid": "e3741e48-17cd-48d5-8256-178360add5ca", "value": "3072:368rdjoSdeudwaNuiVZdm8Tx2XehVVkGX1iFxVFjzWe:368ZjoyeCZm8Tx2X6VNX1iFxVZWe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726988886, "uuid": "d735900a-5476-42d8-9337-8151f3e8aca8", "value": 153779, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988886, "uuid": "0665f445-10d6-4a3e-bf9b-48eedcc0f6e7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988886, "uuid": "5b3e64e6-dec2-47d1-8437-51f75fd1869f", "value": "t1a931ddf14b2b66285a68cbec89dc73a9022c92155247df33ff2584bca01549df929d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8dd60973-78b1-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726988945, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988945, "uuid": "13ea363b-4c22-49f8-98bb-d2871ae7c43e", "comment": "Malware payload", "value": "b2cfd0cce1354c26f7b05df31f196729", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988945, "uuid": "9a36d097-b221-4b20-9514-64aee3e99031", "comment": "Malware payload", "value": "1b69804944a59ba7cb44cfa489b2a36bfb4fe77a91dd21cc56c462730f552464", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988945, "uuid": "80b9e7a3-c5f6-4fce-bbf7-c47ff873c13e", "value": "T12A936CCAF441CE7DF84AD67A48164E0CAA3172D11B930F2793A7FE97AD76058394AC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988945, "uuid": "10d60a8e-a72c-44ec-9886-ced5b87ff693", "value": "1536:LQS/yArnJoajZ1tZR7fAY85iaeQeuacWjcW0JcWcBgxPe5+bdyvV+v0l:0SaArnJ7j3tP7IeQeuacWjcW0JcWcBwo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726988945, "uuid": "a9839d33-adb9-4ee6-8bfe-9aa24d82da25", "value": 92716, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988945, "uuid": "f7abe5c6-f550-444e-a8fe-e1463344ef2e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8dde46d5-78b1-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726988945, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988945, "uuid": "348777d3-ca9e-4b6a-9bef-b15cf16f86d5", "comment": "Malware payload", "value": "2dce6687420a89081b25ae8029034455", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988945, "uuid": "5fb1f534-7b0a-4f37-846b-0fe4ef861006", "comment": "Malware payload", "value": "55edaee0a2af43338dd80768dbc62bdee6bd845fb8aa8c741732b50ebea6cc78", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988945, "uuid": "bd611479-0188-4850-a866-a2a944341452", "value": "T1A0C35B3266792B22C1E5A57900F75B36B3F26BC92AA1820F7E710E8C7F156E030577", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988945, "uuid": "c1ef7181-f98b-4e3a-ac74-0c63e6c1f472", "value": "1536:E0bvmZfyZfJZ1fZ7BZ1ZTpwYt8mZRmW7xN6au8DZEeowbHXqmDMgXBD4u4jxqGMF:NdxrZ8KNFu8PowjX/YABujxH3Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726988945, "uuid": "ff549d5b-5f3a-4e9a-a94a-1279cf4fff60", "value": 123216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988945, "uuid": "bcd14c53-d003-4670-b56a-819c38cff7af", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988945, "uuid": "9d250b9e-b0c3-44ea-9eea-7c165de7cbd3", "value": "t19e31fff05b2b66245928cbec88cc77b9022c92115246df33ff2484bca41549df92dd", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8de8c483-78b1-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726988945, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988945, "uuid": "57aa2d07-cbad-435c-8889-a3571e809e0c", "comment": "Malware payload", "value": "56e518c0f3f45e81c80bd6a13f9c2d67", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988945, "uuid": "ad0aee64-6f70-4298-8f05-99d395ef8b4e", "comment": "Malware payload", "value": "27e1a94caa65408e13943ec60de7af5cae467e473253bae0dea00ee70624e98b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988945, "uuid": "3b2eac83-8884-4091-992d-d8653e2c4a4e", "value": "T1C2932A41F8818A16C6D523BBFA6E11CE372567D8A2DB71038E316F6437CA42F0D7BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988945, "uuid": "8ac22725-f3fb-4a50-86d0-8c00282d50d5", "value": "1536:VLYUBU5UqUSxUMUVAqu/cb19iYj7rRdmQdSo1G9owwoS19u/uvZJp0JFFbPg4snJ:VNiaXSSBAEniYP9dm0IZw79lBToFFbPK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726988945, "uuid": "e6746439-8c6e-46a6-8ef6-9e11c78b2089", "value": 91284, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988945, "uuid": "5329dd4f-e01b-4e59-9128-6eadedc27fb0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988945, "uuid": "449c53f4-a88d-4832-9adc-258b503c80da", "value": "t13e319be8ef300a9e6bda9148928db12a0fed316a6e081817c649775fd48b7d2711d8", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8df6492a-78b1-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726988945, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988945, "uuid": "b782f464-b9dd-4ed4-a950-7e146f28017a", "comment": "Malware payload", "value": "cc85b2c4d9d110bfe9d04a9191915532", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988945, "uuid": "430e88aa-257d-474f-96cc-b27f28e51efe", "comment": "Malware payload", "value": "48c9ad55ce3d6bd5c52187f3b2e9430dc73b3ec7c8e1fed34ebebe3d4d0f6509", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988945, "uuid": "312e02bf-2735-4f15-b518-91e3da0465cd", "value": "T108E32A0ABFB11FFBD85BCE3710EA5B01148CE91A23966B367138DD58B74728E16D38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988945, "uuid": "c7a70d4b-796c-42a5-83f5-9a9c53b1c338", "value": "3072:/NgPgHgvgo1TtRtRSR5RtR7fKDzORGJynyxOKPKTksFyQ9LIP:uoAIU5RtRSR5RtRHGlHPKTcsLIP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726988945, "uuid": "717b46d5-bd53-454c-823b-ff5d2987bf5d", "value": 148395, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988945, "uuid": "84296c8e-c527-4a24-8cd6-47b93f982cf8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988945, "uuid": "9e8dc1bc-426c-41d6-9ad9-2c376a99331c", "value": "t18831eff14b2b66285a68cbec89cc73a9022c92155247df33ff2584bca01549df929d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b9e24c6-78b2-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726989344, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726989344, "uuid": "45343518-873f-421b-a6cb-078c67f6e3f0", "comment": "Malware payload", "value": "11e6f930c447e921e16e17ee089f65fe", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726989344, "uuid": "fb5a5c03-4821-43f8-8069-0e158778f7b6", "comment": "Malware payload", "value": "856cd2352e2c8cfd2226518ae55ef4ce2ce1f2a49aeabc1c68d83637faed7a87", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726989344, "uuid": "7298e476-2295-4215-af1a-2a8c29de96b7", "value": "T12ED2E1ADDBA8374CE463577544AFC12F7496ECA3936F82854BCC4912243884D277AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726989344, "uuid": "023ca988-5481-4e97-80c4-b100acb30844", "value": "384:MgGclfUDwDsOAFImUQSAAHCB9TKcSLJY7eoayfsqxRFpDU7/2LivuCNyqO:+cmROmIIAizKpLJY7Pa6tpI7/JID", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726989344, "uuid": "bd9f5dbf-ac4f-4a0f-b195-768960d5ed66", "value": 30000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726989344, "uuid": "c35a1a23-daaf-467a-8dfd-d0b701d158ae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726989344, "uuid": "0991ceb3-ea37-49cb-8011-bfd723ce4d41", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "459f02e0-78b3-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726989683, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726989683, "uuid": "adea44f6-d9cf-4922-a3ee-4390727c214c", "comment": "Malware payload", "value": "8a7f887c2b919fdbbc2bb504a6712d46", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726989683, "uuid": "f19e67b3-8426-4c39-99c0-23b5a763c4cf", "comment": "Malware payload", "value": "0fbbe7ac896ee7d3edfb7abe771b8f0822184b1a808146226f2fa8eca2f872fa", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726989683, "uuid": "2c1f40d9-bc44-4f65-bb28-f150724fa5d0", "value": "T1F6E2F19CA9C438D1C57E1CBD51260FB75918F460A25B5B9E62108DCCBF4EF4B5C848", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726989683, "uuid": "29096c38-9aac-4c4d-be3b-e2c7501aebbb", "value": "384:wn6Ppdqf3I54hJulN7s1kNYTA/fKiFs4V9B6f8Oj0bCwFtNKpugmx4mzNRWGVCzg:u4YuDs1kNJ/fKiFUf8OGCgGK5bWY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726989683, "uuid": "1a3a6dc9-ae54-4983-948a-982eed39450b", "value": 32028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726989683, "uuid": "094c3900-70c1-4235-986c-c86e8babf026", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b77ddda-78ac-11ef-afe5-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1726989784, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726989784, "uuid": "1ae05005-4528-4422-b1ad-8f7e3d38ccf0", "comment": "Malware payload (Amadey)", "value": "f0388a2dde95260b1a33e15343e4baf9", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726989784, "uuid": "5a123cca-332b-40cd-8245-53f8e3440997", "comment": "Malware payload (Amadey)", "value": "9f38bf3e3e08f8eb68f752246bb01853ff26f1127e07eb7b4561f09db7184167", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726989784, "uuid": "11734f8c-4288-48f3-a4f9-de167ea39bed", "value": "T1A49533AC53BAA429C7DB9A736263206073741DE723067C78B9163AFD063796E0F63D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726989784, "uuid": "2f1b832a-6d70-4972-9cd5-d66430ebe9ff", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726989784, "uuid": "1ea4c4d4-c907-42dd-84e0-811e93feb251", "value": "49152:iVkujHudpCyr8oXJXp4mqWR5IzjdYrdHULnxQVdawszLQ9u9ZJSoeVB:eLyJ5+UIz5cJSxydaZPQ98X+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726989784, "uuid": "93292251-8d14-40a4-a998-15361c4ac800", "value": 1912320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726989784, "uuid": "bdb04ad2-d3fa-4bcd-aa4e-6485590164be", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0bfeda70-78b4-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726990016, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726990016, "uuid": "4efb10ba-53fe-4596-a664-9bcf450472ba", "comment": "Malware payload", "value": "e608eda892fa644c0e68935422de1db9", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726990016, "uuid": "f1090d58-b460-465e-b992-76b2d135b6d8", "comment": "Malware payload", "value": "9d871b5053d655fd24456315d0b758e803fbc9b6ed39f056823403f564a870d1", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726990016, "uuid": "856bea36-995d-4913-8098-cc89b70533bb", "value": "T1D8735B24E9792E27C1D4A17A62FBC321F1E6220E25B4865D7C760F8FFF2465068172", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726990016, "uuid": "e7ed5509-1f22-46da-bd71-9c784ceb9082", "value": "1536:RVFbZFcEvS/d7erkTS61Du+gc2i8R9QjLX56vNYCCAfhFx9:t/Jqxr1Du+gcz8YbovNqAfh9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726990016, "uuid": "d40af455-046c-471d-b2be-cdb65f3cf932", "value": 74572, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726990016, "uuid": "9d043489-80c4-4580-acff-038d770f4ad5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b7aadcd-78b4-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726990095, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726990095, "uuid": "24826027-9111-426f-8de5-9bb8fb2afff5", "comment": "Malware payload", "value": "3997feb2caf357f09bc10bbf66494047", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726990095, "uuid": "0065469b-8d02-46a8-b98c-e368a270366f", "comment": "Malware payload", "value": "42ba89599d638aae235947dc58615f8829775be78a249674e0918317878c0249", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726990095, "uuid": "5a9e4e27-ce50-467f-8f5f-689f680c6639", "value": "T138539EB9C4E8ED98C6684578B714C93DD723940465D33DFAEB46CAA7800BAEDF0097", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726990095, "uuid": "02879276-62d5-4742-9a20-e81b19aaccf2", "value": "1536://BMsvJvJabwtlw3bqSsH6aOIy/Cfs32j/JQZI1qhC87a:/JMSR893O6aO+f+uWZIYh4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726990095, "uuid": "6fd6dc11-bbc0-4846-b47a-667ca19a13ee", "value": 66368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726990095, "uuid": "8691b64d-23db-478a-98e6-49ce86a620a0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99c8dc01-78b7-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726991542, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726991542, "uuid": "24853c86-0674-485b-ac62-a2b0f2bb56ac", "comment": "Malware payload", "value": "2fb343544fc85ac33fca3257553b4c81", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726991542, "uuid": "9e359bb1-80c4-4890-b7e1-2fb5d51094f6", "comment": "Malware payload", "value": "513e6938acd9db384f04f25593a94f35508ebb1339caeafcaba2d336686aec80", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726991542, "uuid": "4f3f4eb3-49c5-4da4-ae88-a66e349bae44", "value": "T1CFF2E071F9112130F2D09974215E4E813A945CBCC17FB820B0AA7A9DBD71A121A3EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726991542, "uuid": "da59f9ae-75bb-46b6-b41f-f266ce1dd4c4", "value": "768:Au9YDJSsqL8dTvlz+kZaJftXp/KJxrKu+lmLSZSz69q3UELCe:Au9CgsqL8dTlqk41tXp/K/5+sLzvLF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726991542, "uuid": "87e9cb57-54d1-4233-91a3-5ae9a9fa7820", "value": 34492, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726991542, "uuid": "c7c94243-bf07-4c2e-b064-16df44193446", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726991542, "uuid": "d5b780e3-bfb3-4471-b40d-f22302961c66", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af4ce306-78b7-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726991578, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726991578, "uuid": "d7dbc910-18a3-4f36-9b8d-d514e0bd258d", "comment": "Malware payload", "value": "9c1e36ce62a3e79396faaad53b720c8d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726991578, "uuid": "6711605a-bb3d-4fce-a11d-829ced719e4a", "comment": "Malware payload", "value": "2a4b251214d7ecf9b2af4d4cdec6f1544c3b11d62216afff7917fd73165a5d0e", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726991578, "uuid": "23eeff90-2d69-4c40-92f7-50436b1df261", "value": "T1ACD2D094020444D9E217817189D4CBB107BD0E3BAD86EDC2573BA7EBCDC1D6A2E476", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726991578, "uuid": "49cbba16-f4f2-41a2-9e82-cb9773a99f57", "value": "768:IlfoA3KYJ7OW3qOsTo2oS4emJgGlzDpbuR1Ji:M3N7OFOr2oS4NVJuc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726991578, "uuid": "93d5b33c-b1ee-41fe-90c6-741c1724b43e", "value": 30908, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726991578, "uuid": "993f911d-ec7c-4969-8e24-8809ecf51bb9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "290ec6e7-78b8-11ef-afe5-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1726991782, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726991782, "uuid": "ac7ea892-1824-4197-8c1d-499bfc816f3f", "comment": "Malware payload (Amadey)", "value": "87afe8957eb4e25b74a2db2a333ad9f5", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726991782, "uuid": "5949149a-15b4-4482-93be-0759bc50dc5e", "comment": "Malware payload (Amadey)", "value": "2d9c38e20b25eb8201dd670c34cb4c92830d7ad7a607bb7b88a98763323b3b01", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726991782, "uuid": "e85e2958-1f20-4798-8334-d02bad0c640b", "value": "T1929533E6ED11DCE5DAB8007406CC2492FBF1D347487E67521E8FB3A8DAB4E85A4D18", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726991782, "uuid": "2664fb1e-fcc6-4ff8-a39b-d8365953ac35", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726991782, "uuid": "c888084e-f5ec-445b-a352-41b16ba185a9", "value": "49152:VW+GalFiOwEbBub++g8dwycmSjlO6MrkBFaR:I+hlFiub+TcmMgdg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726991782, "uuid": "8dd51bfa-748b-4735-b801-14efadbcbb9d", "value": 1887744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726991782, "uuid": "55057fd3-c28b-43e1-97c7-2043c1abaa36", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "424b1eca-78b8-11ef-afe5-82aee05be84a", "comment": "Malware payload (Smoke Loader)", "timestamp": 1726991825, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726991825, "uuid": "f7c4087b-300a-406b-a3e8-aa2034651e94", "comment": "Malware payload (Smoke Loader)", "value": "23b504ebcc23b1216f95bf578289d648", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726991825, "uuid": "6d06696b-7822-4635-8f5a-35d908e6f807", "comment": "Malware payload (Smoke Loader)", "value": "338e2378b54f3a94828bc23452f0b6e7bd7f69bc2fb13c618e727feafe61d1ee", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726991825, "uuid": "9d60768e-090b-489c-8b6c-7f2cea9726c8", "value": "T1E3A49F6342A1BC54F9124F729E2EE6E9365FF5608D15772B12389E2F28703F2C163B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726991825, "uuid": "dd852f5f-b3c5-4323-aa71-9ebafb8044f2", "value": "2f3fb52e2448b38ca202de4ef9ca1d86", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726991825, "uuid": "6e9ea6c5-e54b-4792-b8b6-c812c402c230", "value": "6144:3Ba9JaOIl9S0CkEjkXuARDWoQpLz1LiHTlXb55FXCnFk:3cXaO+SteXuGVQ9z1LiHBrpSC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726991825, "uuid": "c8086170-fb5f-4ab2-9bf8-e37d1bed2d8c", "value": 456704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726991825, "uuid": "f3f0ca5e-c60f-456a-bc8a-ec2ab07a4dfd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "14fc6d09-78b9-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726992178, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726992178, "uuid": "4607f812-f23c-40d9-ae4c-dae75a692e72", "comment": "Malware payload", "value": "dc507532a567b800d1a6e0d4feec6913", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726992178, "uuid": "09e6d4bc-a64b-4168-bf49-78b0324dadb5", "comment": "Malware payload", "value": "0f352b82870a9845dfde1addc86fc093ae54f32b4b46e5cd21a020e1f163e079", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726992178, "uuid": "ce4b7483-678e-4d8e-a303-a6b847c6ff21", "value": "T11763E81A2E218FEDF75887350BF75A21A79833C627E1D685E19CD6001E7028E645FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726992178, "uuid": "e16b54e1-8c83-4356-8abe-6472db8b93a5", "value": "768:Kj52Q1kQ7jJz+Vw3EZ8qdbXrAB8KtObv+2ssHk5L9/+1nxTky1+penEOIux9:Kjl1VJv3E2qdD8kssHeLQDaenEOp9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726992178, "uuid": "19a035ba-56ca-4fd7-b401-58a3c0d9283f", "value": 68276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726992178, "uuid": "337d4ef9-736f-4ccd-a7fe-5628d354a494", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726992178, "uuid": "6ea8adc7-184e-4a55-a57a-54d545716351", "value": "t1d9014f48893416f0d7611ed86bedff72d49164df4b129e378d10edae99399029d00c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1d6a9a4-78ba-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726992898, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726992898, "uuid": "c201fd30-ed96-4266-bf59-62ebd598bf69", "comment": "Malware payload", "value": "4998a7fd687848a97859edc6a8a6d697", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726992898, "uuid": "b7de3c21-c02d-459d-9ff8-5adbebb5828e", "comment": "Malware payload", "value": "f57a9cf03db212f2f17f61673fde904ef8a22eee42c4c31d264ee18308dab4be", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726992898, "uuid": "d95687b5-219f-479b-9d84-56a0460122c4", "value": "T1E9D2E192FE675AD2FB7FE9B02D25C9C07B6787AD1FB89DC220ED6B513009A164900D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726992898, "uuid": "f42e4b94-b0cf-4e3c-adc1-d6a86d95f7ed", "value": "768:HRtVr1QC5J4H2TO1/kcDNotffW31hdhbThb91/md4uVcqgw09t:H11QweWfWwf+315TV/md4u+qgw09t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726992898, "uuid": "87285819-f84e-4416-ab6c-d67861f4f598", "value": 28328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726992898, "uuid": "a583ddcb-8606-4270-a06e-e059e1c4d686", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c313e158-78bb-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726993329, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726993329, "uuid": "cb03a3a2-472c-4b9e-96a6-cb5f2cb5f570", "comment": "Malware payload", "value": "e2189781b423a1768643de0e025de441", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726993329, "uuid": "8036721f-7e2d-4567-b40f-8af05b363dfd", "comment": "Malware payload", "value": "d6df81cb0909ac891d8f5c03d8c07b07376a249ba7efa30fd429a728c4d8a6f8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726993329, "uuid": "59dc18d5-7568-444e-989a-f97ed83b3161", "value": "T1532103922E3238B70F6A8877236680C5B6ABD41CCDDE5D8574573479C42ED4820F34", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726993329, "uuid": "88921010-a899-4483-bb4b-b441539774db", "value": "12:prcCoGVeY0D5WSDDjg5AkwCMrcCoGVeYuD5WSDQAj85AkYgcCoGVeYZD5WSDdqjG:/QYxzvM5QYZzzQYRPXzQYblf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726993329, "uuid": "5964c138-64c8-4ba7-878b-d170924e6861", "value": 1146, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726993329, "uuid": "1da48a2b-90fa-4792-9aca-c6a66d3ce3e3", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "77e6118d-78bc-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726993633, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726993633, "uuid": "be0d5fd8-080e-462a-9ed4-72a8cda22457", "comment": "Malware payload", "value": "a011ae821ae822bade7ef4f396dcc20c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Ganiw", "colour": "#70338d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Setag", "colour": "#086622", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726993633, "uuid": "15ddcb87-0a98-430d-93ec-e95f094fa3d1", "comment": "Malware payload", "value": "b7596ec8533098af77fd3b2915f102ed3286c437140cc49ba60fbad80b466cbe", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Ganiw", "colour": "#70338d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Setag", "colour": "#086622", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726993633, "uuid": "944c84e9-620e-46bc-9dd2-23086c03f0f1", "value": "T1A8456B12FBD0CCB1D84616F5100FDA35D5229677A01BCA4FEA5DCD38BB29181AB1A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726993633, "uuid": "e288d4e5-af9c-490c-9a73-df8284b8280a", "value": "24576:e845rGHu6gVJKG75oFpA0VWeX4r2y1q2rJp0:745vRVJKGtSA0VWeoau9p0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726993633, "uuid": "ca299351-717e-4214-bc67-6963a9003d09", "value": 1223123, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726993633, "uuid": "fba3da45-1c05-4c18-a457-8056c613d51f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726993633, "uuid": "772e4e6f-59c3-49af-8ae0-7ed5ce0f7ec4", "value": "t1e3018946923c19882ea2ed54cc6127d354dbc16a2691e768fb8acdc4994e80af574c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38c8b5a1-78c0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726995245, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726995245, "uuid": "ed5ad470-7d27-4023-a673-80d5abb85bc4", "comment": "Malware payload", "value": "3ceea8e92695d4b80c852f71327fe7ad", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "supershell", "colour": "#85bddc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726995245, "uuid": "d31ab789-998b-4c27-b666-e1fa1fa3442b", "comment": "Malware payload", "value": "4adfd234495f16b145601ac12d25fd0f163dcd4c3fbed12b4a47e76a1fe03bc0", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "supershell", "colour": "#85bddc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726995245, "uuid": "a7b3b605-cb17-4638-8323-27b8ff8ff486", "value": "T153F0495464F6ACD032CCBC2C652F8D8C0AC0151B101A6B4C71CFFFB80EAA18572953", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726995245, "uuid": "3e761e82-2299-450e-9883-882fa2fd1a02", "value": "12:mjKAnu4FEe7iaC9g5xHJW4/iAQ1LrCal4C9paPayjgi7oah1hJvh0:yT5J7iaWg5xpW4k1/G7skh1hJve", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726995245, "uuid": "ee578e3b-6579-4ddc-afdf-e3448c18030d", "value": 611, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726995245, "uuid": "87714b50-f3c4-491f-93ac-f1050353a8dc", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a96eac1-78c0-11ef-afe5-82aee05be84a", "comment": "Malware payload (Supershell)", "timestamp": 1726995248, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726995248, "uuid": "5ba75c8b-f80e-4115-a263-4b1d72c85731", "comment": "Malware payload (Supershell)", "value": "292816ecfe0df6675d38acdddcf52916", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ReverseSSH", "colour": "#032A55", "exportable": true, "hide_tag": false }, { "name": "supershell", "colour": "#85bddc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726995248, "uuid": "b552abe3-62be-4b09-a824-190c74319c70", "comment": "Malware payload (Supershell)", "value": "55f40e61555ab7ca0a5545e1139ddd48089aec81bde2d54d8de583261675af2d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ReverseSSH", "colour": "#032A55", "exportable": true, "hide_tag": false }, { "name": "supershell", "colour": "#85bddc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726995248, "uuid": "af2e7929-9140-44a3-b6b1-ff308c486960", "value": "T1502633200091F63396BEBA6577BA540A89D3E12DF0B89335EB78D1DA7234FDF09652", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726995248, "uuid": "906312f6-f575-4ff7-9b4d-97b7d142be5f", "value": "98304:zuU4XLK4Co6zUwNpL7G+hfZfKKxZPI8gdwSYLaflT8slDk:CLLKPpUw71HqwSYWNTq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726995248, "uuid": "197c0b8b-16e6-4b8e-89ce-93bbd27f5cfb", "value": 4739860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726995248, "uuid": "f4856191-1879-4c8e-a0ef-2ac6d206a533", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726995248, "uuid": "33926771-8c44-43ac-8693-b295260ec31a", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba2189ce-78c0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726995462, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726995462, "uuid": "ce9de3e2-baea-435b-869a-c791293646f5", "comment": "Malware payload", "value": "74f0a1dc83c60fb3f69ac98a0510d6c7", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726995462, "uuid": "b57ed0e6-dfbd-4e99-8466-371dacf58b3d", "comment": "Malware payload", "value": "e45db2637c9449e263710846d5e417b86af22ca21fb2a40c3e3576db6f1bd932", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726995462, "uuid": "683c7b14-d3fe-4209-b808-f46082a3ad28", "value": "T10A01ADDF35257189140CAE18F06A468777CA9BC1B0740F29A9470DB7D8E5624B27CF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726995462, "uuid": "3a0fd18c-8313-40ac-b3d8-27d510b0b13f", "value": "12:qcj+ZULq+ZiNIl5zA+ZP0LKj+ZuOs+ZiC+Zc/+ZVSE+ZotaKA+Z6j+ZWiA+ZSfA2:LNANI7mKvJ+CTtBa9xv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726995462, "uuid": "4c99509d-fed5-4dc6-b51f-4c1d4d09abec", "value": 766, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726995462, "uuid": "6d9293b3-1ef8-4b98-b202-7cf249f77472", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "49edb84a-78c1-11ef-afe5-82aee05be84a", "comment": "Malware payload (Tofsee)", "timestamp": 1726995703, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726995703, "uuid": "a9c59448-324e-4c90-baf1-25450d73d9e5", "comment": "Malware payload (Tofsee)", "value": "ee3c7bfcec74601fffcf6a4eeb6d3c3f", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "Tofsee", "colour": "#baa077", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726995703, "uuid": "8d6b2865-9362-4435-b683-9b5e39703dba", "comment": "Malware payload (Tofsee)", "value": "3755348fbeb10ed577bff495b834be4a63cc53ff6323ee8ba5fa29187540c226", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "Tofsee", "colour": "#baa077", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726995703, "uuid": "f2428630-3d56-48bf-a62e-beb9d424d096", "value": "T13744F60661F0BD12FEAA07351F3993D87AAEBC665F35936D21543A1F1A732B0F50A3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726995703, "uuid": "3374839b-4908-410a-9b4c-4d5dcc714a46", "value": "961bc56325ea858767969d4be856f113", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726995703, "uuid": "346ffc3e-30cb-41c9-b12b-e18189935c9e", "value": "3072:k2GHLMg57JJi/JNTgyh+dioCpCgbWtWgu57lssAxaxLif7J:XGHLMwlEhNTgy0goCpCgtLUl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726995703, "uuid": "2bf5426e-2b67-4c6f-8ea4-f342732e06a8", "value": 254976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726995703, "uuid": "35171286-6d66-40da-a0e8-30630c1e24fb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b652987-78c2-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726996189, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726996189, "uuid": "c69dc89a-3a9d-43e6-8831-129acd79042e", "comment": "Malware payload", "value": "e8bf20b3f573eeb17c21bc27d0255ea9", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "This_exe_triggers_specifically_to_cobaltstrike_c2", "colour": "#e63640", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726996189, "uuid": "1fba2a11-c6b8-4999-8360-1e33df54773f", "comment": "Malware payload", "value": "31a72314d975210476e5c85d57dc2aa1d5b7e3d9359b401d50c87471903f1ebc", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "This_exe_triggers_specifically_to_cobaltstrike_c2", "colour": "#e63640", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726996189, "uuid": "337fc112-3f58-44f7-b419-0a353ed44317", "value": "T18E34F19C01E8DB6D0AE0F2DB1B343A81DB6AEEA48D4EDF66320488475935FF1B445D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726996189, "uuid": "b85163ec-21ee-49ac-9364-c94fd5ea465e", "value": "6144:sSPI3dZwfdEpUKrlOz84IVhlbZl89HL0XD/2M9kOX8ZiZ:sjmSp/lOz84IV/bZl8KX72Wk0Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726996189, "uuid": "f25fc85e-3af7-465b-8f6b-67643d510ac2", "value": 239686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726996189, "uuid": "ae791203-9487-49b3-a5c4-761640b5d6e0", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d9354b21-78c4-11ef-afe5-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1726997232, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726997232, "uuid": "b75417ec-2513-409d-87ec-61b1b68d15ce", "comment": "Malware payload (Stealc)", "value": "3dc69b8d7452ff8647388b805f6f74bb", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726997232, "uuid": "196afd4c-56be-4a94-aecb-43c84444939c", "comment": "Malware payload (Stealc)", "value": "ca8bf10ec3c2d1ddc56f92fc2b044a35e66487472930435d18ba9b721cc2c62d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726997232, "uuid": "b2b594fc-a533-489f-a650-4cd7676879a9", "value": "T15B54180A23F4BD91EEA687355F7993D8666EBC525F35B35D39403A2F1A732A0F5023", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726997232, "uuid": "8aaf0ae1-9b79-47f0-8ced-b00459bda66e", "value": "961bc56325ea858767969d4be856f113", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726997232, "uuid": "5895ae12-012b-44b3-b315-dda0ce9385a2", "value": "3072:kFrLGn5nJQyWhxJxbD9jLEt+tvOIIoSSivxkzEEAoABltZ0Tsu5ilssAxaxblB6n:yrLG5JLCJx5DJINvxkz2/bci5LUl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726997232, "uuid": "f0414e1c-eb49-4cdc-b5a5-f6b7d1b83cf6", "value": 304128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726997232, "uuid": "0a078cdc-ed0f-43dd-baa1-107ec255fc94", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "885dd23c-78c5-11ef-afe5-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1726997526, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726997526, "uuid": "1cb73137-0461-40b0-988a-6a985ffd2841", "comment": "Malware payload (GCleaner)", "value": "bca5fbaca16b5814e429ff45865b7f9e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726997526, "uuid": "74447ada-8066-446e-b48f-6f0b66f6c336", "comment": "Malware payload (GCleaner)", "value": "f283dda56a5c915d096d852348a3e8dd9bfe04d7b461accf52de2fc72c40a507", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726997526, "uuid": "e0fa6cb1-ccf9-4248-9f76-ed8f4713f684", "value": "T12374381A61F0BD52EEA647354F3997D86BAFBC125F75936E21003A1F1A332B1F9123", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726997526, "uuid": "505a77f9-3834-46f1-8190-4efbc79df12a", "value": "961bc56325ea858767969d4be856f113", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726997526, "uuid": "5d8c2bd8-2be8-4a3d-bc44-1acdde1fa33f", "value": "6144:fwLVmmVKX8GIASReajcwUJII6SxGezRaUl:oJB68G+U6eD/GS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726997526, "uuid": "9fa50db8-0a57-40c4-ad9a-5411dfc86268", "value": 342528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726997526, "uuid": "96453344-454c-4144-8605-339e8d86b4a6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "583f6998-78c4-11ef-afe5-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1726997817, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726997817, "uuid": "e7457cdd-867d-4906-9be7-bf3e87f29c8e", "comment": "Malware payload (Amadey)", "value": "5c33eea873ad4fe8c8e2822cbe985ee1", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726997817, "uuid": "cef0178c-b4d8-4e49-a96c-3e5f613d1884", "comment": "Malware payload (Amadey)", "value": "840fd914b65892b52ffb349d5cdd33ebbd1ffd0a8644611f0d2f33720edac0fa", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726997817, "uuid": "d254b4ec-f9ab-4495-b716-c2cba9757cdb", "value": "T1859533931BD34BEEE0E641B2CAD0E5F60E149411956C9FF7AB0E58F4D3A75A1AC030", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726997817, "uuid": "5dd10b6f-a554-417b-81b0-8312a5ce0aea", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726997817, "uuid": "be32405e-5f2e-425b-b749-896682ed0867", "value": "49152:sa5jd58VxBVgZBYi3jzeIy2MYGcNfjGRgpKZVADT8cmeQ:s8x5yapn46hfjGMKZaDoV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726997817, "uuid": "94152adb-9839-4714-874f-5f231391cd97", "value": 1970688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726997817, "uuid": "2e737637-adc7-4329-ad62-3895bdf0f32b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09579214-78c9-11ef-afe5-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1726999031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999031, "uuid": "528dff0b-c682-4a98-a567-eceb48de5713", "comment": "Malware payload (GCleaner)", "value": "457fe1c82df9f48e055f4ffd703e08ec", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999031, "uuid": "f4946538-f392-49a1-b172-7c33c9d32667", "comment": "Malware payload (GCleaner)", "value": "ae53ddff17c133e4d8b21519146627fd217ffcc0abae6e80b3b470f9c286d0d4", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999031, "uuid": "cb3afb20-7412-40a8-93d9-46ea0b3343a1", "value": "T15D64168A21F0BC53EEA647354F79B3F86AAEBC535E35935D21043A1F1A732A0F5123", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999031, "uuid": "16cef52a-e444-4128-be10-16f187f07987", "value": "961bc56325ea858767969d4be856f113", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999031, "uuid": "32cbb04a-d1c3-4f70-a940-0b2d0bffbef0", "value": "6144:ErL+HuubP9mGej+jyTGElJUqabqtepkHUl:YiO1fj+zqabqtee", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726999031, "uuid": "9741a55e-5269-4627-a966-e3417d0efe90", "value": 311808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999031, "uuid": "83020c0e-d471-45d1-8c3f-6ef5e8b26ba0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd4ff21e-78c9-11ef-afe5-82aee05be84a", "comment": "Malware payload (Meterpreter)", "timestamp": 1726999386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999386, "uuid": "cf651013-371a-406b-b0ac-5679c7b6fe15", "comment": "Malware payload (Meterpreter)", "value": "f6aed4b384496f21a311dff2cdd6b51c", "object_relation": "md5", "Tag": [ { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999386, "uuid": "84cd59ce-e11f-4645-9010-17a3ba733cd2", "comment": "Malware payload (Meterpreter)", "value": "dcd735d183902987f48260cee3f9b0709ea4e2e3987ed0fe2c701dc0495013a0", "object_relation": "sha256", "Tag": [ { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999386, "uuid": "b4f4ba8b-e462-4ed4-ade4-67100b50302c", "value": "T1C313F2A19B9F9623E059883C84D425AC554E726F4B73EB775CB42D5FAC1C18889723", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999386, "uuid": "216a6443-46b6-4659-9dea-b147f2d5501f", "value": "768:9UCGLyR66urNLo9vCztuU3gvd4oQKFkc1Cbfpp8FZAnYn6bsHUduQP2J3:9UCGLyR6XECztucgvaKFkcAfkFYC6L5K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726999386, "uuid": "cd7a5e75-2da1-4d8f-be91-953c50f3010e", "value": 44343, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999386, "uuid": "9141ff3f-fc03-4150-9bba-ef50fe5992b9", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd55bdaf-78c9-11ef-afe5-82aee05be84a", "comment": "Malware payload (Meterpreter)", "timestamp": 1726999386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999386, "uuid": "2749e5b1-f1d9-4b5f-9f53-cc5c9d4ce726", "comment": "Malware payload (Meterpreter)", "value": "1b73bb409f96bd368cfefa6635f358af", "object_relation": "md5", "Tag": [ { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999386, "uuid": "6b4eaf9c-323d-4273-9181-e0ff9eff7f3b", "comment": "Malware payload (Meterpreter)", "value": "1a2477e7a05ced92b8897b05b5343996364c64ddfec87c5aa4231b6ff9d7218c", "object_relation": "sha256", "Tag": [ { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999386, "uuid": "4d1bace9-bcfa-48f7-a2c4-75b11839a4d4", "value": "T18E73C082E8C00165D1A1127E57763A75A934F4F72712C2DB368CDAE4DBC19F0A63A3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999386, "uuid": "77c07cc5-594f-4366-9a9a-f68238d54c5c", "value": "481f47bbb2c9c21e108d65f52b04c448", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999386, "uuid": "2fc59207-992e-4ee1-9827-6284890d99c6", "value": "1536:InRjqIxPcn1iRPz6ePhf2tRdMc2sMb+KR0Nc8QsJq39:moHn1ilzXCRdMDse0Nc8QsC9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726999386, "uuid": "5ba565fc-eaf1-4a6f-9856-8aa417c8d5f9", "value": 73802, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999386, "uuid": "235764db-372d-4e37-b4d7-640f2ec26445", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd5e4a61-78c9-11ef-afe5-82aee05be84a", "comment": "Malware payload (Cobalt Strike)", "timestamp": 1726999386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999386, "uuid": "d84174be-2949-42e7-9f07-25afd5b08dfa", "comment": "Malware payload (Cobalt Strike)", "value": "d1ba5271cc1825702119cfd7e0232f81", "object_relation": "md5", "Tag": [ { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999386, "uuid": "c07f415d-4d90-4452-8736-9eb3378f31e5", "comment": "Malware payload (Cobalt Strike)", "value": "9b4013e7e8decdbe58db125765084aaaff774701c363ffbbd4f8dd24eda4fc3c", "object_relation": "sha256", "Tag": [ { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999386, "uuid": "7b216541-3d75-4b1f-9b86-02f1134c8aa9", "value": "T17A73BF02E9C46066D196123D67793BB5A975F6FA3602C18E7A8CCCF1DFD0CB0912A7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999386, "uuid": "720c1b4b-7183-410c-a52e-11724cd0cb1b", "value": "481f47bbb2c9c21e108d65f52b04c448", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999386, "uuid": "3fd11f17-f81f-40ee-be7b-1db9fbbbcc3c", "value": "1536:INi3NGdsLzuXz0jF+dhHEgCoK99KLxpMb+KR0Nc8QsJq39:OMviXmF+7HEgfKK7e0Nc8QsC9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726999386, "uuid": "6e492675-8bbf-4397-95a4-7d718ee3e1d4", "value": 73802, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999386, "uuid": "c46bf6f9-93e8-4c77-b8e8-0a4487b26513", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd79f3e3-78c9-11ef-afe5-82aee05be84a", "comment": "Malware payload (Meterpreter)", "timestamp": 1726999387, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999387, "uuid": "b29d6b51-c014-4bbc-8bf6-6e5b965e0eaf", "comment": "Malware payload (Meterpreter)", "value": "16451c80f18ca7d30f2ef0760c725315", "object_relation": "md5", "Tag": [ { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999387, "uuid": "61c58771-9e0e-4a70-b825-56ed0c614517", "comment": "Malware payload (Meterpreter)", "value": "b866fef4739496f6d000c5ac95d774d0515941f4c93f60d3bade20a7a5e0fe14", "object_relation": "sha256", "Tag": [ { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999387, "uuid": "02627468-dc5b-4c6e-8252-56f8eb1c5579", "value": "T13623F0A287E82728E9FB69B646381E47A60AF90EC434D7DDD3D064EF88507001D1CB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999387, "uuid": "9a4363d6-e379-4d81-88e3-e712bdee3d55", "value": "fc2ca0dd2bd0f0a143659652556a192d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999387, "uuid": "4422f1a1-1b78-4826-a719-58a4d718bd2f", "value": "768:j/6eAy7Qt0SIyMFKwg9/nBqy0bDiDXSZVixElkg40eO7cQn7DeWq3:z6eAT0zyMtYg7XiDGVwElkg97cQeWq3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726999387, "uuid": "d859dc85-4267-4511-b73a-52711e1a0874", "value": 46592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999387, "uuid": "fc4ed652-1066-4599-9a4c-9bfe42f9d89a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd7c9974-78c9-11ef-afe5-82aee05be84a", "comment": "Malware payload (Cobalt Strike)", "timestamp": 1726999387, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999387, "uuid": "e9e9dee2-c6fe-475c-94a4-163ab4d2b76b", "comment": "Malware payload (Cobalt Strike)", "value": "8d11608ef730593d4e376f51f73816c5", "object_relation": "md5", "Tag": [ { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999387, "uuid": "3936b335-35af-43b0-9a19-6bcfab8e10ed", "comment": "Malware payload (Cobalt Strike)", "value": "aaa42a4a5b883dab35847c6e52f1389a595350970b5b117296500c8b943feddb", "object_relation": "sha256", "Tag": [ { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999387, "uuid": "ec249389-14d1-497e-9c32-838d62a4eb4f", "value": "T1DE13F28E596F446AE23808981B737B382F83492EBC2418CEEB944DB447D36E407ED1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999387, "uuid": "aec55ec7-d9d9-42c5-810d-68322cb7e340", "value": "768:OvTHQBSE5/A7DdBaW0XFh3oZlzXzxgdhqc1d2nk3PJHXkV5z6oz2ZCxSr:OLHKD/A7RB+FhYJ+PJ3kfBz2USr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726999387, "uuid": "82d8d174-44b9-4dca-9a90-344bd2305ec6", "value": 44328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999387, "uuid": "0ba32e86-0973-46bb-a8df-61bd42ae5012", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd7cc488-78c9-11ef-afe5-82aee05be84a", "comment": "Malware payload (CobaltStrike)", "timestamp": 1726999387, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999387, "uuid": "f2a3c330-5200-4c48-9ec0-bd94078b9ece", "comment": "Malware payload (CobaltStrike)", "value": "2939997c9fc9dca6ccf9124200c5bcf7", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999387, "uuid": "9b200858-e7de-4145-8527-6157970ed6e2", "comment": "Malware payload (CobaltStrike)", "value": "69b2c233d4fdb8080ed851c14f8d35bbf2a1d0722b9fcd25881cef408c03cc31", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999387, "uuid": "8456aa35-ec08-4601-bd36-10d0e06295b7", "value": "T16573BF03D9C85462C292027D27B53BB56A75F5FB3615C2DA7A0CCDF5DBC2CA0A2263", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999387, "uuid": "ef0263ce-0e8e-494a-abfc-45bfdf606648", "value": "481f47bbb2c9c21e108d65f52b04c448", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999387, "uuid": "8ff789de-f285-42e9-a592-a2d849daf75d", "value": "1536:ICpTCZG9iemtDViYHtOWcKwxJOnrKzGRBJtLyMb+KR0Nc8QsJq39:bp2Ai/s7RJOnrrRftLye0Nc8QsC9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726999387, "uuid": "0abfb44e-a7a0-4746-bb57-c8be04dafe86", "value": 73802, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999387, "uuid": "5433d683-2eb8-416e-a458-d0ef46cfc83e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd9cffd6-78c9-11ef-afe5-82aee05be84a", "comment": "Malware payload (CobaltStrike)", "timestamp": 1726999387, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999387, "uuid": "21bee181-3337-4edb-a541-e24ac5c588da", "comment": "Malware payload (CobaltStrike)", "value": "03487ec0103b22c20bcc2f6864a705e7", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999387, "uuid": "7cd7e2bb-beca-45fd-abf8-fb535db200f8", "comment": "Malware payload (CobaltStrike)", "value": "2082e3ef2d3644c643cfa108c0e0da774eda43bb6fbd721b3eed9d518e6f8936", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999387, "uuid": "d0e66c30-7128-45ef-a6ac-9eb7056c9460", "value": "T1B964AE52DBA25685F490DEF9C1E37A20CBEC28F04D111AF2D7B7D9223751EA91CE60", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999387, "uuid": "64b60088-b31f-4533-96e4-64d9e656f57a", "value": "147442e63270e287ed57d33257638324", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999387, "uuid": "c7ad7c34-c736-45b0-93ac-c9cef93ece55", "value": "6144:sKHkwMRlf63GvO0wMq3CfWcsfebfGJdHeOFs9SvLMWzfrmi+cyr:sKzM/DrwR38ZsfebfGJd+OFs9S7zSNc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726999387, "uuid": "c4cbf06f-4e08-4856-bba9-23351157c869", "value": 328704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999387, "uuid": "0ab56a07-eaaf-4eb8-a2c1-804f27d1209e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dda1877a-78c9-11ef-afe5-82aee05be84a", "comment": "Malware payload (CobaltStrike)", "timestamp": 1726999387, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999387, "uuid": "028937a7-e503-42d6-916e-f36b44866b95", "comment": "Malware payload (CobaltStrike)", "value": "3b35c038ee69d08cbea6015cbfddc3c6", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999387, "uuid": "dcb21b7d-0564-4e2a-94e0-92ec36e590d5", "comment": "Malware payload (CobaltStrike)", "value": "113cedf07ce06a99c0c9ece0a04ecaeb2251064cbb164bcde432cb2f73c1faa0", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999387, "uuid": "8205ef5b-1bbd-433c-8fb6-42e75fcebfe7", "value": "T128142216F38D5A3E8EB6A6107711C2235FCB472001A3C4176CA2B51BBF77A4C9F2DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999387, "uuid": "eb773886-8d93-4a90-bf38-2ffc60a4cd8a", "value": "3072:i67abW67fMy3HRtsk4YC1G0fZqopBbHLMEISyFAiqZ65dMOZln+F/SsbqRRwP478:HarRtsknN0fZnpBdKFk3O/6LbCj7YTt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726999387, "uuid": "e860dd51-e3c4-4c1c-a7e5-48baf61ffff3", "value": 203635, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999387, "uuid": "63edb449-acad-423e-926d-31a83868224d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ddb21d92-78c9-11ef-afe5-82aee05be84a", "comment": "Malware payload (CobaltStrike)", "timestamp": 1726999387, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999387, "uuid": "b6198232-e37a-48f1-8705-05c7593548cd", "comment": "Malware payload (CobaltStrike)", "value": "59fc81032d61afec30ba06c776f7f3cd", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999387, "uuid": "a1a35bad-bfea-4a19-8661-b62d6788ba07", "comment": "Malware payload (CobaltStrike)", "value": "37bdec28067c098d357d9ffb8788813b4ff8ebeeb1132f2a6db109e57ead1896", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999387, "uuid": "4579d340-a502-400d-999c-52d43f554385", "value": "T168649ED6AAD1B888E95442F8397F7C5C89C8BF2B009B988C40DF85D04EEC93715B55", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999387, "uuid": "aa435969-3fcd-4aaf-a3ad-755c6fbcfa82", "value": "147442e63270e287ed57d33257638324", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999387, "uuid": "fd2783b2-7878-4bb2-b42f-03dd5d0a1651", "value": "6144:JZSnCSRkIaRrw8rfCM3uwAT+Ny1YkEjKsPNmWRRQ42sl6a3XrNHQnMF98nmRgeVw:XZS2frXTb3gT+gYhjKsPNmWHQ4PVrNHO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726999387, "uuid": "5479f2ae-d314-464d-8a0e-737a935c3e1a", "value": 328704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999387, "uuid": "c85c1672-355b-44ea-aa23-e3e27ce17376", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ddf2bc77-78c9-11ef-afe5-82aee05be84a", "comment": "Malware payload (Meterpreter)", "timestamp": 1726999387, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999387, "uuid": "8a9e4456-da83-4c67-9a6d-4c225f49339e", "comment": "Malware payload (Meterpreter)", "value": "b6b77de46fac92727df6141f2699e398", "object_relation": "md5", "Tag": [ { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999387, "uuid": "baa134d2-bcb3-442d-8794-96fe55bce5b9", "comment": "Malware payload (Meterpreter)", "value": "e7cbdd679455c484919c5622700a889a7d1b0ce703a4d0cdf0a7f7757fd3e266", "object_relation": "sha256", "Tag": [ { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999387, "uuid": "4d04d639-796f-4063-a11d-b32a7f43b510", "value": "T1A373BF42D5C41566C2A6127D6B713AB9AD75F1FA3301C2DF3A8CCAE4DFC19B092293", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999387, "uuid": "427cc53c-bd29-4d9d-9107-f8ad2fe3c7b8", "value": "481f47bbb2c9c21e108d65f52b04c448", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999387, "uuid": "12ce7d80-c954-46ef-ac65-17e87f9d6519", "value": "1536:Ir+j0SQCQTGEx6NuQ9oQzpXlnsd+GMb+KR0Nc8QsJq39:600nTGEx6MooQzhpjGe0Nc8QsC9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726999387, "uuid": "9693d7c5-3c08-4fc9-95cd-7953a15f7b64", "value": 73802, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999387, "uuid": "a329d5fa-8a35-4775-95ce-66d979f5507e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de8746e3-78c9-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726999388, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999388, "uuid": "3ac3e91a-4fa7-406d-a0ff-1e5ea20b7e0c", "comment": "Malware payload", "value": "c6a8a60cae37b98499a34fa16a1ca07b", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999388, "uuid": "966af07c-6229-4972-9ac5-0253faced253", "comment": "Malware payload", "value": "00b4ec29923d301ac9fbf630ea120a89b54c93b7e3fe4d41f02fe5a158fa30c6", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999388, "uuid": "b77b4d58-b6af-4349-b478-5ae4733d3493", "value": "T168142217B3208D3E8F0264289A33A5EDFD907B4E0D9C06E6E25B1C487F2568E86C97", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999388, "uuid": "9163eeb5-5636-4ec3-a9a1-0059d1a2a516", "value": "6144:F88wI5fuTd6AxnqzxMQngn6AkanQlr3o5RrPu:FhZxubkxVgn6UQlr3o5F2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726999388, "uuid": "ce536ebf-6092-44e6-88bb-8fdcea612e77", "value": 202660, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999388, "uuid": "1a78be47-4231-4b4b-a7c6-17e35d5e7d73", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df558d2b-78c9-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726999390, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999390, "uuid": "8e586ebb-60d2-45cf-95a9-beb4e1350d65", "comment": "Malware payload", "value": "bcb3e29bf2606db56b33c815dd0d4437", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999390, "uuid": "0eb5dbb8-7dfe-4dff-9148-3e50e820afd6", "comment": "Malware payload", "value": "4b0e2e84828685ce5088e5504a0e9574e83c452e52ab6a25af101c31e1e1f714", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999390, "uuid": "068be119-e0d6-4c40-a49e-1134c335cd99", "value": "T17774D002B6C545B2D57329331A35AB11AA7D7C301F71CACF93906A5EDE721C09F32B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999390, "uuid": "807c6b69-099a-4d6b-a4c6-32e584114900", "value": "0ae9e38912ff6bd742a1b9e5c003576a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999390, "uuid": "a35e30ce-2365-4a10-857c-cb2ebe686008", "value": "6144:8tH/xNLaAOvIBd7lAAxWS1elIoSN32rqrK9/lUMh5:8tH5NLaAdDhAAEIFJ22r6+e5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726999390, "uuid": "19ee170e-1d9f-4e27-81b3-b58a21dd6e48", "value": 345924, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999390, "uuid": "86a4d383-6d28-4bc4-916a-04e6ff3f9fcd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44771970-57eb-11ef-ac1d-82aee05be84a", "comment": "Malware payload", "timestamp": 1726999392, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999392, "uuid": "b66b9259-ec8f-4e56-8763-ce77bdcd6f72", "comment": "Malware payload", "value": "9d48895988527514eee50120c4a81a28", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999392, "uuid": "9f300b0d-1719-444d-bd38-72bf56b208b9", "comment": "Malware payload", "value": "f10f7e3d0fb14a36464d480192eeb0ce1147d5edef1d81d6eb157168bd11d2a4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999392, "uuid": "b2cf42da-6ec8-4e72-9d6b-66efb18e5c88", "value": "T1B5D08041C1529143C47C8A3575046FDE2714C17740915F6663D56FC98CEE9540E31B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999392, "uuid": "23f6de10-6e61-4ab5-9118-207b72e6ea03", "value": "3:Bkkk/tMlwXll/O/slrCs4X1lFrSwf66rnB1IM8IPNioOHyUvwGcVt6fE2:Btk/tMl//E2s42mnB1IKQXSEwhVYfE2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726999392, "uuid": "f0ac43a4-0852-437c-a7e7-d9bfd51cf1fa", "value": 207, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999392, "uuid": "a88eb427-04c4-4dab-85d9-fdc2b65561b8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1542bbd-78c9-11ef-afe5-82aee05be84a", "comment": "Malware payload (Meterpreter)", "timestamp": 1726999393, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999393, "uuid": "c885b11c-75b8-44bf-a599-f0dab5aa23c6", "comment": "Malware payload (Meterpreter)", "value": "c72a3773f36c1e96d38c8178ce4c3142", "object_relation": "md5", "Tag": [ { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999393, "uuid": "f04131e4-113b-4454-8aea-571878f34e59", "comment": "Malware payload (Meterpreter)", "value": "637945b594925ffab100bc0fdfe4ceda9973beb9fc9a9bb1d58d5b3c9c5b15af", "object_relation": "sha256", "Tag": [ { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999393, "uuid": "cc4b6de9-04fc-4a7d-9718-68f12f386142", "value": "T13373B042E8C41422C196227E17763AB5A975F5BB3202C2DF798CC9F5DBC18F092767", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999393, "uuid": "c0c53a1e-e8a7-4cef-9804-1b4737a5701b", "value": "481f47bbb2c9c21e108d65f52b04c448", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999393, "uuid": "3dbf2ee3-0c61-49a6-a60d-269b7b31c61b", "value": "1536:IifUA9MAZ6/2dCFqpT2VVEx2st5b70YbMb+KR0Nc8QsJq39:xUAK06/2dCFq12riJ30Ybe0Nc8QsC9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726999393, "uuid": "f624ded0-bad2-460d-ae57-d7b17656c004", "value": 73802, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999393, "uuid": "21a16f0c-3888-44c3-a637-0ec13b9e0865", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e19e0c8d-78c9-11ef-afe5-82aee05be84a", "comment": "Malware payload (Metasploit)", "timestamp": 1726999394, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999394, "uuid": "12ce1d60-9163-4c49-9b2f-c1bc88ca1eb5", "comment": "Malware payload (Metasploit)", "value": "5f6126afe5c54827e2d577d82831f71c", "object_relation": "md5", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999394, "uuid": "78302886-22cd-4104-9dfa-cd846f166417", "comment": "Malware payload (Metasploit)", "value": "cc55cad4660ccb1e41914da0ca526ce20dd8bc4e874bd756d3ab97046a2ef061", "object_relation": "sha256", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999394, "uuid": "43d0d8cd-720b-42b5-a57a-c2ff3c837e54", "value": "T114815C25C760CA9AC74CA9F9FA2C4BC79711B0A9069163829B14700AE3C69821F685", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999394, "uuid": "cf6d7621-fe21-430e-b3dd-9d88d737a046", "value": "96:2YnDDpnTWpP9HvTWP3NUzvi75cYpuu/nw:2+8ph64i7Yu/w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726999394, "uuid": "cc128772-b5f8-4e04-9b3d-7e5053c37504", "value": 3950, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999394, "uuid": "428038cb-c2da-41f4-828b-b2cc43db02f5", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1b66a42-78c9-11ef-afe5-82aee05be84a", "comment": "Malware payload (CobaltStrike)", "timestamp": 1726999394, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999394, "uuid": "afce5a3d-094f-4c7d-93fb-6039e9b17c80", "comment": "Malware payload (CobaltStrike)", "value": "4b6b4048c597d60f54030b1d4fb3f376", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999394, "uuid": "3f094bcc-c128-4eff-95c1-5df2a38de317", "comment": "Malware payload (CobaltStrike)", "value": "0c8fd78b49b429955b95d5491ee6e0622ba69d3fcf49aabc5762c0f36795a3b8", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999394, "uuid": "8b64a678-232d-4c34-9462-61818114f3e8", "value": "T1AD92CA3FE31358E9C106D57845FB3733DCB27DB386A6571E2724D2B42E105A46EAAA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999394, "uuid": "e2234fe3-592f-4952-bf1c-5bd00ba64cc7", "value": "147442e63270e287ed57d33257638324", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999394, "uuid": "aab878a4-ea41-43a8-9440-a38185221eb3", "value": "192:8V7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2KcQ0k6WF8qa1Dojjgi:eqaCF31cix+Dc4zjuojFF46gi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726999394, "uuid": "e5b4d9b2-7fe4-4b27-b76d-18bb9c14c911", "value": 19456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999394, "uuid": "a4013f8b-f723-44d0-b73b-2f5dbb1bbf9b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1c6e317-78c9-11ef-afe5-82aee05be84a", "comment": "Malware payload (CobaltStrike)", "timestamp": 1726999394, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999394, "uuid": "61334c4b-3008-4558-b29c-dabd7f1f9501", "comment": "Malware payload (CobaltStrike)", "value": "4bd25a55bcb6aec078ab1d909cfabe64", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999394, "uuid": "4405e21e-f98e-429c-a946-ac4113b74ed8", "comment": "Malware payload (CobaltStrike)", "value": "f0c2e045cbe2076d3c85f4637c9f404407239a109c4d493165a6b55067729d60", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999394, "uuid": "c4b4c4d8-5d52-4580-a3af-92da934552f4", "value": "T19564AED80BF2687FE25791FED8EA00703EE4B479D86A5010263479DC99CAF56B409C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999394, "uuid": "8fc01140-ca31-4cc6-aa48-bdd00707ca43", "value": "147442e63270e287ed57d33257638324", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999394, "uuid": "de40203b-4346-4dc7-8695-c695f3263fb6", "value": "6144:RrfLjOTpbBMUCE6Y0iwA5nImWyBYto+Azsl7hg/s+:1LjyplVCLS2o+wO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726999394, "uuid": "7d9ec595-7aa4-4a5f-923b-ba5f9b358ab9", "value": 328704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999394, "uuid": "8461bab6-00b4-4482-a058-d4632f318e9b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1d7864b-78c9-11ef-afe5-82aee05be84a", "comment": "Malware payload (CobaltStrike)", "timestamp": 1726999394, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999394, "uuid": "5fb0b2e2-5f10-46a3-a6bb-d8ef22a9b635", "comment": "Malware payload (CobaltStrike)", "value": "fc05967e47192397275605f69c32d738", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999394, "uuid": "c3f29c55-77a0-48c7-a9bd-47d12af4c7c2", "comment": "Malware payload (CobaltStrike)", "value": "60f5f1256f0c3a2aa439bbd5cc394e8956f87ef8f81053549c5178a491dfd52e", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999394, "uuid": "c46319bc-f769-4651-9f5a-b4d177bf5490", "value": "T13014129164A18881F3A4B84FF02FC6754DB6738AA8B225D25F9F15E0B31CDDAD1212", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999394, "uuid": "eea74d0c-62d7-4b9c-b68f-2d8f3acf4fc8", "value": "6144:Ii7rXMfnMqN65+lEqReo/0zYnH2Yy28GWG/ZjTlbL6:IWMpOu/0zYnWr2vdL6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726999394, "uuid": "609d67b7-2810-4866-829f-89d6dc7f1b75", "value": 199708, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999394, "uuid": "1e608aa9-0165-469f-9cfe-c7c2c29f9f28", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1e3c7f5-78c9-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726999394, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999394, "uuid": "253d6abf-0df1-48c7-b328-b28bd3259a71", "comment": "Malware payload", "value": "f9c534d22743b405a051775bd65a1d89", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999394, "uuid": "7b6067b8-9f7e-47fd-b7f6-087ad9b87800", "comment": "Malware payload", "value": "dd7912a176663052e48cded9689061580495938a8afed59bf4c4a529e2eb3277", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999394, "uuid": "9082458d-fc5d-436e-947b-a157a75e1685", "value": "T13B13F19498491A33C916E51988BFFB69B9BCEEAD06A650E1CC265C2FF104C8D79F0F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999394, "uuid": "fab46769-761a-4747-b869-e274cab4ddcc", "value": "768:eI8nFvaUDaEd1C50btaxYJVpadu7kNKCJxbAOv5Wmx/0QR8dKDCbRzh:eI3UDaEjQonYNKC/t5Wa8QR8d6CbRN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726999394, "uuid": "c188dbaf-dea8-47f7-9b07-5dc7b2593cad", "value": 44206, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999394, "uuid": "51c18510-82dd-4de0-954e-e43a9738e77a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1f0e965-78c9-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726999394, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999394, "uuid": "5f470c4f-8324-488c-9f56-03ace7fff7a6", "comment": "Malware payload", "value": "d21cc01fb5eb733d3cc06f63fad6cafc", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999394, "uuid": "783a2f4c-6090-4951-b320-7976d6a63801", "comment": "Malware payload", "value": "6e4d23c7430a246fe2487fb734ea14b8cedfa58cad3461f8ff346a43be5570a8", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999394, "uuid": "fc241ef3-91d3-48ef-98d8-b5fb24d86689", "value": "T11A1302F6D1ED2185E96D2038BE7D3AF8F656DF18A646E9003955F8C3B22D404BB293", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999394, "uuid": "56e8c4df-fe34-4f6b-b790-20b9b1d9b8f1", "value": "768:bSCcAo0Cvsjbuu/fJG74AE1bv3wN3pdDdZrh6BV/bT6QoG6G5TmDz2gn:uQ7Cvsjb9/E8AE1b/apzD6P/bSwT1g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726999394, "uuid": "78ce922b-3aaa-4ad6-ba5d-b7616d55840b", "value": 44419, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999394, "uuid": "7c02f158-fa91-40af-b82e-e213750e1cf5", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e25d2b96-78c9-11ef-afe5-82aee05be84a", "comment": "Malware payload (CobaltStrike)", "timestamp": 1726999395, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999395, "uuid": "6cac1e64-0e66-453a-b8b4-7773f6258b75", "comment": "Malware payload (CobaltStrike)", "value": "20cfd4b4f12dc4aae8971d7b95b870e2", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999395, "uuid": "0d0144ee-7b9b-4ba0-a3ea-43a079a39dba", "comment": "Malware payload (CobaltStrike)", "value": "1526175ef4385fbc4c71c8930b7a8d7b0367b2afc6565d53cd9edc0c8a6d444a", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999395, "uuid": "9509baef-33dc-4278-b17a-d2c807ca4863", "value": "T1C764BFB6797A2D6DC15FD1FBBD3095708F5DB1A794F306B0849AAF3B0688072C9E40", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999395, "uuid": "8f9e66b7-6b3e-4003-a9cd-d7f72b8ac8e8", "value": "147442e63270e287ed57d33257638324", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999395, "uuid": "a6a277bf-9dd8-4515-9853-509f0dc154c9", "value": "6144:MaiefOpSSUVQZqStt/N5hN8Qqf9FBKmzzghp8xqghTnY0Dh:BfqbUVQZJtVDNDqVFBKmzzghp8xPY+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726999395, "uuid": "6ffc5253-d577-404a-bc6b-a094cb904b13", "value": 328704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999395, "uuid": "6321effa-a048-4d1a-ac7e-59173e4cf1fc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e28f00ad-78c9-11ef-afe5-82aee05be84a", "comment": "Malware payload (CobaltStrike)", "timestamp": 1726999395, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999395, "uuid": "4cba1533-1b9b-456b-b52f-a95679859093", "comment": "Malware payload (CobaltStrike)", "value": "0b86a1aad0c4a168bfffbe1da6cdd45e", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999395, "uuid": "dac791f4-41fe-4f91-8077-4830d4ab85b1", "comment": "Malware payload (CobaltStrike)", "value": "531c3ed73ae00747f7bcb790e442981b3d677998abcf7067be1bdd4c6b4c9e53", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999395, "uuid": "cac8f6e4-c88b-4183-95e5-46d2e419ba41", "value": "T17D649DF29184216EC335C9B96DE3B234786E275A5A9475D361A33E07FDF89C86308C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999395, "uuid": "30c356ce-ca04-4402-b4f1-1b2508901133", "value": "147442e63270e287ed57d33257638324", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999395, "uuid": "54248b69-0cd8-41b7-b7d2-e6ad6c16e5c6", "value": "6144:mzLV/RAXIfWTp2RyDu7ujRw/hojpLKiRi7UvBr:mheht+yv2/hIRi7qB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726999395, "uuid": "84596f1b-232e-48de-bf89-3541a6234029", "value": 328704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999395, "uuid": "6ee48053-46bf-4c7e-8786-0a6f66bd4a68", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e2d0d7ae-78c9-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726999396, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999396, "uuid": "1c5f13f4-b644-4955-8305-cf9013117210", "comment": "Malware payload", "value": "6d537ceec9f5368b207b024422b298f7", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999396, "uuid": "a1a0234b-e7f3-48a8-8e6e-3d7d8fa56a9c", "comment": "Malware payload", "value": "46e6f96884a3ddbec74118822e4128281f691e84cb51d92016447fac696728ef", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999396, "uuid": "f887dcee-49d0-4248-b38b-1ee8f5412007", "value": "T14D716C589001C52A5894BDF329EC2FA993C04260AC8D7BC8AC129FC2F8764D72950E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999396, "uuid": "1e3ee8ad-f02b-487a-afee-273e4810b342", "value": "48:9DKXkNXJ0pPMkrWnVJstFrYYq1w0nAT1gLKCTT0wr4wPeDqFWrRD8xweZwA2nGbl:cXkjAzUstFq3616v9rzcKR2nGbVv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726999396, "uuid": "135352ed-de70-4809-967b-507f916c57db", "value": 3573, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999396, "uuid": "5ff27a3b-ee83-4bda-ad24-2698558523b1", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e3780b90-78c9-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726999397, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999397, "uuid": "ab482f7f-1a08-4371-a752-8c4e9e48b7ae", "comment": "Malware payload", "value": "835eadd44dcbb9c4754e98980a67d8d1", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999397, "uuid": "2494c635-f1be-476a-891d-b2734fd6a31e", "comment": "Malware payload", "value": "02288f539e12d54bef67d2b175850c955d7698ef1a2a1a8f9513c71914d2f5ef", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999397, "uuid": "4e5eb096-8ca0-4ab8-9fd1-3fc66e3f88bd", "value": "T1B713F2DCAD9B52C4D09F506C45CD8F86E36D20BD1DA637ACA4A7768AEE849CC2CC01", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999397, "uuid": "ba886fc8-002f-4786-b6bb-56695b411a2a", "value": "768:UCVdFIeqGy7fh8CAoB1knr0mot56TJn4mvjzl9YwSNNYHN76cp6a:UCVQeqb7Tt8Et01TjAjYFXQa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726999397, "uuid": "d43b73ff-3d16-4e9b-be11-623c4ddfa649", "value": 44197, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999397, "uuid": "d45694ef-75ae-4daf-aaf3-fc652f5b46cc", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e3784c55-78c9-11ef-afe5-82aee05be84a", "comment": "Malware payload (Cobalt Strike)", "timestamp": 1726999397, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999397, "uuid": "49a0ef6f-2a60-4707-b6e0-a00e468fa31e", "comment": "Malware payload (Cobalt Strike)", "value": "f52a6c6e1c8be6ea65f385f16d2680b6", "object_relation": "md5", "Tag": [ { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999397, "uuid": "41e55203-ad7d-45aa-9ef9-75191243d21e", "comment": "Malware payload (Cobalt Strike)", "value": "6b3215f08df986ac0d45a243858e9fbf9a6457600667fcb5a5debfb5e78acf5f", "object_relation": "sha256", "Tag": [ { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999397, "uuid": "c8651c7f-f788-4bad-b2d4-ab17338a5079", "value": "T1D4739E42E9C41035D1B5127E2AB53BB9AA74F5BB3611C29B394CCDF5EBC1C70A2263", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999397, "uuid": "f2f055c9-92c8-4233-ab0c-d1479612a9b3", "value": "481f47bbb2c9c21e108d65f52b04c448", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999397, "uuid": "e063fdfe-4b57-4dca-8250-2942d0526503", "value": "1536:IR800mMcfeNbN6QRwO+h7Mb+KR0Nc8QsJq39:o7acOIQGO+Je0Nc8QsC9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726999397, "uuid": "c4e484f8-e091-4610-a1a0-9658b14bdc7c", "value": 73802, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999397, "uuid": "e7670e3f-110a-441d-b93a-93d9b8cbb246", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e3793c3a-78c9-11ef-afe5-82aee05be84a", "comment": "Malware payload (CobaltStrike)", "timestamp": 1726999397, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999397, "uuid": "53b8772c-de1b-43d9-94fc-7e5a98a340aa", "comment": "Malware payload (CobaltStrike)", "value": "a31229d235bc81bdb1da5226971e501e", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999397, "uuid": "87f03f1c-c6d2-4c97-9be6-2c8f97c785c1", "comment": "Malware payload (CobaltStrike)", "value": "eb6bc3bf768ebe6ad3c97ce6a35c4c686203fbe2acf17e9e62a76427e9510e4e", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999397, "uuid": "0bfea5e5-0764-48e5-89c6-5459213fcc57", "value": "T1DC141371E6DF836F67D10A0D243A708F2EB343E51A05F8994513873A74CED6E4BD1A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999397, "uuid": "98c30bc3-1620-49e3-93cb-1ce99921e854", "value": "6144:ngELTqEYak83V5O6E+aWuncD/0jE6biy6v5j2l:gELTqEYak0xl1un26biTv5jq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726999397, "uuid": "c9832d50-627c-4e39-b35c-aff0c7736373", "value": 203091, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999397, "uuid": "98cee022-ab51-4044-9995-bf21a49cc6f1", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e39e0385-78c9-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726999397, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999397, "uuid": "041ac6ca-db1e-443d-96bc-a0efed8cd088", "comment": "Malware payload", "value": "1887573e43dbc7a8201e42018e721064", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999397, "uuid": "4ab41102-8017-4d2f-9456-9c912bdf098c", "comment": "Malware payload", "value": "f00e351019960fbe3adf84771b01ff51718d1359c2ac848e3d09a94eb668ab56", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999397, "uuid": "4336976a-6d91-4fc7-b5ee-5a98ae70ccbe", "value": "T1A213F170B11DA343D2A79B7F61A7EA177AC1F94BC325C5B0DA5B1412A7B8807097FA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999397, "uuid": "3eff9760-2d78-4f0c-bbf1-8405194b12ce", "value": "768:FI8jYRRzmDT/ht89sLTEti69oAxGXlDEpUEFSBJqANZfF8scDiQkmP:xjiRqX/htcsLGi69oAxG1IWF/XN2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726999397, "uuid": "f0d6d7db-5e56-47fd-a5c2-37d9130a171e", "value": 43890, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999397, "uuid": "4c03043d-b424-4f20-91a8-4ae45ab9cc89", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e3a53366-78c9-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726999397, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999397, "uuid": "0097bf96-14dd-47b2-8e7e-57ff2371be0c", "comment": "Malware payload", "value": "c659488e712bd8f1b4b31fb76219afac", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999397, "uuid": "6748be93-82b6-4a60-859a-bf7307891677", "comment": "Malware payload", "value": "99e5786512d9a1225a72687536948c52983aa317de71252c0ea4d2db96276482", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999397, "uuid": "97de30d3-ac7d-4ec7-aba5-261db73fdbc6", "value": "T1881302C1942A201EFB5550A5E296269C6C477BDE02277BE406C9CD864739ECD220BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999397, "uuid": "1d78c1ac-6b1a-429a-a08d-298e2499dda2", "value": "768:zCDAoKNsPVqviX0hL1oHJc0GB3XuzoYF/mpK8L/wHlTdfzYGXODzYa0HHyZ0t03U:u4yqv6oo+DBOPF/YL4XfzozYaGHGfU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726999397, "uuid": "40297c4e-7cc2-46e5-84f2-e617eeb14922", "value": 44290, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999397, "uuid": "8de303dd-35f4-48b6-beb1-80bf60c22274", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4822885-78c9-11ef-afe5-82aee05be84a", "comment": "Malware payload (Cobalt Strike)", "timestamp": 1726999398, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999398, "uuid": "999e2735-aa37-4645-be23-cba36aa91e18", "comment": "Malware payload (Cobalt Strike)", "value": "dd42f60354f24e75270f1b19749b101d", "object_relation": "md5", "Tag": [ { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999398, "uuid": "c002c73f-0b91-4159-95b1-1f2a357860e9", "comment": "Malware payload (Cobalt Strike)", "value": "ed2d62e585c6682eb44cd0b0de885d0959e35761f6ba2ccbe62e56cc72e8b341", "object_relation": "sha256", "Tag": [ { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999398, "uuid": "d03d3210-7f9d-4a10-9974-a6bdf4f8b32d", "value": "T1D22423BD00286B5500BB3E79E2056D3C93CB2F8E9EA1643C2576BD0DDF90E41D245A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999398, "uuid": "846c9af6-30e0-49fa-ba65-cb4df6bad9df", "value": "3072:/leGiKkMYBfS54w5gb32l7OBFs8EtHgt/htpuyN49VqGkraD7rPrjKRU1O/m:/Qsk9xSjo2wm8q4ptlN43qGk+Lam", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726999398, "uuid": "085343b8-96fe-46b5-b147-d91124d2f70d", "value": 211027, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999398, "uuid": "a14245cf-484b-4e9f-9d9c-cf7081667719", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e529beb4-78c9-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726999400, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999400, "uuid": "bf32f23f-cdaa-4ad8-9d75-3a42912603c8", "comment": "Malware payload", "value": "fa17330c7495c31fd401504c3a3a5555", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999400, "uuid": "554b55bc-26a9-4416-9be3-56544dc2a60e", "comment": "Malware payload", "value": "7bbfa9b1745e86f75e336f9b19b4aa396b31ca5495d651ceb6b6c79e77169b0b", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999400, "uuid": "b707f44a-dd2a-4431-a572-9cd34bbc3b01", "value": "T1467623F08E255468C29DD6349FEEE30CA6CEC58B4353EA177F8661295E06ED09BB17", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999400, "uuid": "b6fb5b68-5fcd-4272-9595-a651676763b1", "value": "196608:xdHOPWb4q4XaFEO2/jzA00Jmux9OCFAyw:xN4pX7QWuxGV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726999400, "uuid": "305d5e7f-00aa-477f-8d8b-5a9a20ca13b8", "value": 7314842, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999400, "uuid": "71f07858-33a7-4f00-96bd-a2360d923865", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "feed9c09-78c9-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726999443, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999443, "uuid": "4a334dbe-ee96-47e2-9f5b-fa33b326fe32", "comment": "Malware payload", "value": "e0a2759fb5940b3974132e85a51229e8", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999443, "uuid": "b01ad583-300d-4a27-9d3d-48017ec2f0dc", "comment": "Malware payload", "value": "4fa65a256112a0d4a83ed9caeea19a1b1d77ba1a0467bbb0ce3af9136a98c39b", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999443, "uuid": "a863f221-0eed-42c2-aac6-037cba8360b3", "value": "T1A5A83343F4457A96F62D527EC8612328ADAB3873D61A7103CD98D1D37F1A3EB84384", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999443, "uuid": "3ef280d2-723c-452b-8554-c77e87d0a473", "value": "3145728:nvXDSV130z/wYnzuTAUhgwunz2bsbgnTJxRXMxx8/Rh0NxbLiAsGP0WagzAJZC3D:nr2Kz/ZzsgHzxeTNqq/RaP/xNIq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726999443, "uuid": "0264c0fc-9c5a-404d-8897-f6da1aee6bd9", "value": 210968389, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999443, "uuid": "2b9579c5-47f7-4fb1-861d-f45ced9576ea", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "24dc33c3-78ca-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726999506, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999506, "uuid": "128835ee-bb40-4840-a73b-19de476cca5f", "comment": "Malware payload", "value": "69afce0d871fbb27c821c9c1a4767f2a", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999506, "uuid": "bf14e0e4-5e16-4ce9-a153-cb5802c3aeb7", "comment": "Malware payload", "value": "5fb73c68d5cafbb6899fa156aa1cbb57e54e00a88aeb3eb670ca97fd102e7232", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999506, "uuid": "5532c7e1-f514-43eb-b78b-ee0e9ea34513", "value": "T118E17EB48889FD47793668F2BC10985DBC88D5435010AF53DF5DA4166C37522914E4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999506, "uuid": "b726cc22-6133-43a1-add9-20c99d83469a", "value": "96:30WZ95e7mwwM8ZzBNy23QD4FjsSfK/ehKdhKLTTBor3Hsj260auGOg:VZ90m1MqQEFjxf0cyKLx8gN9uG1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726999506, "uuid": "4ad0822a-715a-40f9-aafa-4cea026434ee", "value": 7376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999506, "uuid": "bd418dd0-b4ee-4ddf-8a78-78ba405e120d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f4aa41d-78cb-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727000034, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000034, "uuid": "2b8d79b8-f1e2-4043-8689-bcdbd135c80b", "comment": "Malware payload", "value": "a0f53fe5292c5e326f222a4731c0428d", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000034, "uuid": "c4a10a0e-4530-4600-8b7a-e2ed614c3185", "comment": "Malware payload", "value": "e58c549481e605cbed39fc4b9bb7250aad77da566d5a84733875e3c6cbcd6896", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000034, "uuid": "297b73a5-e33b-4eda-96ad-7f26af7f17ab", "value": "T1F995338812EB3A24CFD483BF0F19419A3823363ED7F58DD42E4546B16BE776D06B21", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000034, "uuid": "9c94c791-f511-42ba-9652-978f543b28bf", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000034, "uuid": "e0fc8971-2003-4545-a503-b10333e28521", "value": "24576:Rz51xebsKk65ukG7t0JtdghBJ0LugKfp80KByFph46KDoY1pBQljN4xYn8HMHWyk:R1eYKHIgwJ0+R8lyvh/KDoY1slJbUMl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727000034, "uuid": "c9f3fc13-71c7-459f-924e-dde7ce85a6e3", "value": 1963520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000034, "uuid": "5855b78c-0a1e-47fb-9a3c-e9bf8bac74e5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "660fc7bc-78cb-11ef-afe5-82aee05be84a", "comment": "Malware payload (Metasploit)", "timestamp": 1727000045, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000045, "uuid": "6c408a4e-906a-47d1-92f4-8c2e35cedbd1", "comment": "Malware payload (Metasploit)", "value": "f1796b78cb43fa7b6805584f0c3207c1", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000045, "uuid": "777bc1ad-5a44-4c8b-9af1-14f98f0e7030", "comment": "Malware payload (Metasploit)", "value": "efc499a1811ccdb91ec97daecb683b18c9193b6fe2dac087c6cf79a616b7550a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000045, "uuid": "61cdad32-a5d8-45cb-a6bb-46ee864485a4", "value": "T1FA73AE42F6C01475D2A2227E2AB53AB559B5E1F73601C1EA3A8CCDE4DBD1CB0952A3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000045, "uuid": "44b39a46-4879-4410-ae48-21059f846bcc", "value": "481f47bbb2c9c21e108d65f52b04c448", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000045, "uuid": "6225e4bc-683e-47e9-893a-b794c36e0ec9", "value": "1536:IKZTVkMXTvN4CzkHeLGC/1dKYaMb+KR0Nc8QsJq39:VDkWFRbKDe0Nc8QsC9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727000045, "uuid": "defece82-3cfb-498b-8d2c-83240c4fe66d", "value": 73802, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000045, "uuid": "05200585-f7b9-417c-8fdb-94642a226220", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6707a7ac-78cb-11ef-afe5-82aee05be84a", "comment": "Malware payload (Metasploit)", "timestamp": 1727000047, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000047, "uuid": "5adbff00-fbbf-4bfa-a4de-9384c9369d16", "comment": "Malware payload (Metasploit)", "value": "fe62c6284cc763752ff6801c12f29b33", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000047, "uuid": "94bc471d-ed48-489d-8b8d-8e966d862571", "comment": "Malware payload (Metasploit)", "value": "be7457b45ae1ecedaee4ee764b8cb7d807407e10ec05f952de9d8582b093ef5f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000047, "uuid": "e9c80aaa-1aae-4c37-8d48-915fcd67f0c6", "value": "T1D773C04294C41521D1B6223D26763BBAAD75F5F67712C1CE798CC8E9DBC0CF0A2663", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000047, "uuid": "5701b6d6-d372-40b5-97a2-dd3b5ec68f6e", "value": "481f47bbb2c9c21e108d65f52b04c448", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000047, "uuid": "6ecc0527-9628-4067-82d6-a0fdae18d68e", "value": "1536:Ia6XsbXNn5IqsylTAQoIUJyqzMb+KR0Nc8QsJq39:pz8wcQ0Jyme0Nc8QsC9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727000047, "uuid": "c54eb56d-62bc-4f2c-89e4-cdd2852a6fde", "value": 73802, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000047, "uuid": "6f9a24d2-ec07-49eb-abfd-b54ecb18f55d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "676864d9-78cb-11ef-afe5-82aee05be84a", "comment": "Malware payload (Metasploit)", "timestamp": 1727000048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000048, "uuid": "6b2a74c5-c17f-474f-904f-bd17506ff355", "comment": "Malware payload (Metasploit)", "value": "4ff07dff62d31b141d2ff73725935c08", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000048, "uuid": "1f87696a-4bc8-4313-a3c3-3c1d35af1dd6", "comment": "Malware payload (Metasploit)", "value": "9a4106e091412d9bfe496224044cac352ccc303ac6f84650732eb1bd3a5060cf", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000048, "uuid": "ea275d1d-4909-4e13-a028-4dadc1cf6286", "value": "T14873CF82EAC44576C192223E16753BB53570F5BA3601C29E7A4CC9F5DFD1DB0A32A3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000048, "uuid": "7a5fbe43-8fab-4ae0-ae76-b0784f20e00e", "value": "481f47bbb2c9c21e108d65f52b04c448", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000048, "uuid": "74df1dbe-b4a0-4bb0-a3b2-69e7cfffd1e2", "value": "1536:IOAK48ogBDuG7u78G+3WaYyVfVG4cMb+KR0Nc8QsJq39:hOK1uGjjZVfMe0Nc8QsC9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727000048, "uuid": "29e2a5df-4a7d-4972-8689-7e21cda165f2", "value": 73802, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000048, "uuid": "f7723261-2d7d-4f50-b2e0-7e2aeb247c04", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95022d9b-78cb-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727000124, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000124, "uuid": "e08dacbd-daaa-401b-80ae-534caf9f2a33", "comment": "Malware payload", "value": "30cffd3dd9661eb5d67d7edfd2096378", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000124, "uuid": "0bb0eb9b-8452-42bf-abd4-9db8d24e68c0", "comment": "Malware payload", "value": "66f50ea4772990331ca853e92a1db8cc5319f3b4e0c10fb823f96527ece08c36", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000124, "uuid": "e5944025-9673-46ee-a6ae-1cc2395c9ea0", "value": "T1D2D2F1752B45CC61DF80863AACBC8345236766A1D1FD33661E40071AE3832D8DDBFD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000124, "uuid": "6526dd5a-9c4a-49cd-bb97-0e1b45368fc8", "value": "768:7tFPMu43+Knj412MjX2YNoTdv0Wt4B1lkrVKs3Uoze:7D0uwqxkTN0l+rFze", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727000124, "uuid": "cd7987aa-44f7-4f1b-9bf1-db6c76d527c8", "value": 29960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000124, "uuid": "f3462e6f-fbb5-4932-9b62-15a55df92155", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000124, "uuid": "7c828c5f-87de-430a-b269-1be497bd2683", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad3453cb-78cb-11ef-afe5-82aee05be84a", "comment": "Malware payload (Metasploit)", "timestamp": 1727000165, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000165, "uuid": "0ceda94b-c336-48e4-bb6a-c9e9fd7f9993", "comment": "Malware payload (Metasploit)", "value": "754d714c418dc5118bf7ae95ddda25c9", "object_relation": "md5", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000165, "uuid": "6c3b388c-17be-4573-94ac-709d86b8d697", "comment": "Malware payload (Metasploit)", "value": "302baf431151623c04ab0a9e39e8d6cb9d0bf7019464b955322fe389f3646cbf", "object_relation": "sha256", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000165, "uuid": "2c435083-6a6c-4fa4-b832-eb577ff6a619", "value": "T113816DCAFC86E61C36957B127DBB3F1D81929245083978C0D7BAA1D74C6B34538752", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000165, "uuid": "5b139723-8db0-4d72-a14f-d75b4a694ff0", "value": "96:94kPWcKL42CSwtrAx2aA5e/f5YV4Y11C7yO+PRhfNCtOr:ikOcO42BwtUx2aA5R7I7CJFm6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727000165, "uuid": "9f25719a-c6dd-481a-b3cd-f95bf63a7e87", "value": 3949, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000165, "uuid": "86eac929-c53e-4362-9f0d-bd2296b0a054", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad3759f4-78cb-11ef-afe5-82aee05be84a", "comment": "Malware payload (Metasploit)", "timestamp": 1727000165, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000165, "uuid": "bbca7d6c-df2a-4a13-a4ac-ece999b700f6", "comment": "Malware payload (Metasploit)", "value": "07a838e44a8318a2da2c6f915029d77c", "object_relation": "md5", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000165, "uuid": "d42c846f-1c18-47de-9216-fc32840eeac1", "comment": "Malware payload (Metasploit)", "value": "3719360dd0ffd091f6a35dbacc77b9367b380dca952210619e4eec84c4c1908c", "object_relation": "sha256", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000165, "uuid": "773253e4-1905-43cc-8dca-cf52cadd04cf", "value": "T1D213F2D4DAC2D9C7D0BF6AB9D840B7A91E5ED174D034EE99C749E4148F0A326263C3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000165, "uuid": "1d8719f0-4605-4246-a3b0-94c1b794f765", "value": "768:nLCyBvrAcHNRT1a4qV4VtFW6urDdqUdWdSRXSKE4w6gvoqF2T6LP9wF8:L1BvrAcHc4EefWtrDdqiWSRXS9T6kXxv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727000165, "uuid": "b1fe4bd4-edfc-4b1a-a7cf-4206e6d0650f", "value": 44294, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000165, "uuid": "82131665-1dad-4f1f-b09a-439c64839cce", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad3bf8af-78cb-11ef-afe5-82aee05be84a", "comment": "Malware payload (Metasploit)", "timestamp": 1727000165, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000165, "uuid": "0f7b425a-7b8d-44ed-bd6a-c0b58bb4aa71", "comment": "Malware payload (Metasploit)", "value": "c0b24eedcef33abbd0501a6fe46036e5", "object_relation": "md5", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000165, "uuid": "215db66f-478e-41d0-b9c5-e2d8983414fd", "comment": "Malware payload (Metasploit)", "value": "a596cec58ba77f74ccba1ded6041fef4ffea1b6c73c59403e8d2e72f59c6b35f", "object_relation": "sha256", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000165, "uuid": "3e44ca24-38f3-4c0d-826e-f3c69b01e0ea", "value": "T13313F1EEECE6F04CA4511CDE2BA8CF85E164627A4EBB7967087C9E45C8875A47C984", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000165, "uuid": "9d8b3d1e-92b2-4b44-b2ce-cb17fba894a4", "value": "768:uc3uZjBacnUwTwffpvQas63FX7k/w2NYDyXrjI9apVHIZs9UMQXpCX1ppaDi78pw:zujBagTAfBv8dS4rM9avH0yRgpCFpj8m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727000165, "uuid": "0a3f8338-4a8b-475f-bfe1-bfee4063d1f9", "value": 44233, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000165, "uuid": "604b57c4-b46c-4107-a89a-fa260faf8f2c", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0c204e7-78cb-11ef-afe5-82aee05be84a", "comment": "Malware payload (Metasploit)", "timestamp": 1727000224, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000224, "uuid": "a2f92d1e-2205-4c8a-be98-7d0ce98ce198", "comment": "Malware payload (Metasploit)", "value": "aa1b883c7ec107178c37188f3fd55961", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000224, "uuid": "16e8b3c5-aad4-4359-8bcc-31ccb25a3c0e", "comment": "Malware payload (Metasploit)", "value": "16dfeb06b56cdeec3fb5ab34cb10cf5d7a26adc4bd0de67d84f7881b9e4eb530", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000224, "uuid": "183a1a61-cd99-45ce-a557-31368bf5a566", "value": "T1D3F027143EE9523CD3BA6E3B50F6BB114936B452FD23C29C01949BDAA525410A933F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000224, "uuid": "e8f4d6cd-b0de-4c0a-a48a-f86e4415ba2b", "value": "12:8egiPr13huQjAWuR8+UBJQLkmcekmO+Uc6:8eX5wEAWuR8+0+/6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727000224, "uuid": "14740103-aaf4-4358-9bb2-2f24c4b9eef1", "value": 589, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000224, "uuid": "84272641-9a53-4084-84a3-1c54f5400635", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3d2e9c0d-78cc-11ef-afe5-82aee05be84a", "comment": "Malware payload (Metasploit)", "timestamp": 1727000406, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000406, "uuid": "a8ab711e-6d0f-498d-b838-35bf17adcb7d", "comment": "Malware payload (Metasploit)", "value": "6ab2d1e01dcb7e5212b51366156e3d6b", "object_relation": "md5", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000406, "uuid": "fc58e0a8-b311-48c7-939b-36372ad9c248", "comment": "Malware payload (Metasploit)", "value": "ef9979db4ea62b7e854d738a497f2f172c9e0f382aac5bae8b0a1db87ffb4b1c", "object_relation": "sha256", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000406, "uuid": "f9052c74-83ec-4c24-a0d0-161d8b8ab9a8", "value": "T161E14CB9990BBC0553A30DE8EE95079CFDA071CF7674A53FDA1C8DC711211814EBD9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000406, "uuid": "ba8f2230-0dbc-4e1d-9370-339b9e698ab5", "value": "96:LZig5e4GuRqxtoLq8lNMXiXu8FP1nuyaEZ/ZD7ulpHdRDG:9ig0uQxtEXMSZLnNaEZ/ZWhdRDG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727000406, "uuid": "0ddb5747-c0e5-44c9-a0f7-6f5248d5cb05", "value": 7397, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000406, "uuid": "e5a3722a-74e1-4d7a-b584-c486747a26dd", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "36a78214-78cd-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727000825, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000825, "uuid": "f0715dd3-5f22-43e0-98e6-e5670813e387", "comment": "Malware payload", "value": "95d9263b45b837cda0ef2901ad30c846", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000825, "uuid": "90296c36-b5cc-4100-b96f-f551fe857f84", "comment": "Malware payload", "value": "f195a69b9d907599214eb5a4dec75388acc2161d62397a0b40d2c422e1627458", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000825, "uuid": "529ec3a2-e24e-4d0e-b16a-ffc46aec5de1", "value": "T152515B2DC952BA5CD49337A0ED2D1CE6DBEACA81321F9DD80A83BF2552584534A100", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000825, "uuid": "ea29f6b4-0e16-4ca3-a97b-c8108854f2db", "value": "48:9xxciEfoXhNBO7jVhQBw4fTKpw4Y1YumE9dEIq4t8PZf:HmgXHBO7jVUw4fTKlYWIdrWf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727000825, "uuid": "e81e5858-f32e-4437-baf9-beea149bb29d", "value": 2478, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000825, "uuid": "b5640125-7d06-4675-a916-293dbcdd0f55", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "20192e88-7859-11ef-afe5-82aee05be84a", "comment": "Malware payload (RedLineStealer)", "timestamp": 1727000945, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000945, "uuid": "7b9122cf-5f39-475d-83f1-f1efc2b603d0", "comment": "Malware payload (RedLineStealer)", "value": "c61cc62b59b5959951d1158887b20b7b", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000945, "uuid": "7af357f3-1aa0-4d55-b7de-adeb9bd28253", "comment": "Malware payload (RedLineStealer)", "value": "6702392e56414e5569fe81bbe157836f3fb2b96455d744126c77e7025ebd3b7b", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000945, "uuid": "0cabf14d-ecd3-46d3-8251-bb726c393360", "value": "T1F464237622CC89DBFA5BCE76B4E3F02D2B54D5F19A16048BA343835B1F65A400B54B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000945, "uuid": "95881203-e564-4cdb-b2e2-3b3e49cdb1d7", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000945, "uuid": "97569817-ad11-47be-975e-606a91b56232", "value": "6144:nHCvNULzTf8DVnDIZo4b70JkgYrgJ0WiiTikz1iRKXQL/0d98t:HkULf0hDh4b7wk7MJPis5iIX/6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727000945, "uuid": "6441e546-118e-4b98-b87b-04d9274173b2", "value": 331640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000945, "uuid": "3657e1ba-693a-4440-828e-c60287d168c1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e12fbcf-78cd-11ef-afe5-82aee05be84a", "comment": "Malware payload (Metasploit)", "timestamp": 1727000945, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000945, "uuid": "af51b40c-1a35-4897-afcd-e8f4af8591e0", "comment": "Malware payload (Metasploit)", "value": "8f0cbaeb2dc079386e3beba3003b3d63", "object_relation": "md5", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000945, "uuid": "bd1480ff-b507-42ce-b717-d8dcdbaece96", "comment": "Malware payload (Metasploit)", "value": "ce26b6aec2c84bb11093c812dcb5e523ef4a12015adc8e0747fe2efa4d471119", "object_relation": "sha256", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000945, "uuid": "3a717179-2bcd-4e6d-8772-4f25a46cab04", "value": "T105F0547B4143D180C07FE4B0306A0B06CF1711A086C56B53BAC42680A4012C0ED044", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000945, "uuid": "97481c49-c0a1-425d-a8ed-6134e4e3a62a", "value": "12:5jMGmrmnH+nT8cU/bSLuQuZfWn7uwSWdRtZ8mtaC:9CIHJ8oZdwSWd1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727000945, "uuid": "a7805333-384a-4239-99c1-8b67a382a79d", "value": 507, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000945, "uuid": "738728a2-5bde-4166-a620-7f695a34b148", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81235b8f-78cd-11ef-afe5-82aee05be84a", "comment": "Malware payload (Smoke Loader)", "timestamp": 1727000950, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000950, "uuid": "e4d56c6c-beb2-4528-a1ff-e4fd68b5d7cb", "comment": "Malware payload (Smoke Loader)", "value": "782e7eed25fd4ce9eefc4d380337be63", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000950, "uuid": "9241f45e-897a-43fe-8213-c4793a2d644a", "comment": "Malware payload (Smoke Loader)", "value": "a752eef61e86d9689e486cd214e3ed4fe5f5b048a5ef653574572b75d1b56af9", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000950, "uuid": "563c4613-03a0-4e5d-8eb7-e9a830c824ba", "value": "T16B44E54A25F0BD12FEA607350F3997D86AAEBCE35E35936D21447A1F1A732B1F5123", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000950, "uuid": "e115eb0b-4fa9-487b-8864-6aafe841810e", "value": "961bc56325ea858767969d4be856f113", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000950, "uuid": "2244847c-b97e-4be9-b773-65b278b7c731", "value": "3072:jRGHLMg57JJidA0TUYWj5wRd8oS/jgu54lssAxaxHTif7J:9GHLMwlEd0YY5Md/HTUl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727000950, "uuid": "e375538b-32df-4c63-b4c7-139d9c8141f8", "value": 255488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000950, "uuid": "8e072fb3-90e1-46be-852e-1b7e585442e9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b52211c4-78cd-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727001037, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727001037, "uuid": "86479760-8b16-4672-8063-3a5acc2f358f", "comment": "Malware payload", "value": "77922885c8a4bdb444ef81d0b97b895f", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SpyNote", "colour": "#ac1889", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727001037, "uuid": "26e21f91-b68f-468f-8af4-46dfc1533e74", "comment": "Malware payload", "value": "157c52cbe2e001105600301f584b55c966931bd5c165b7fd2755328357ba4f81", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SpyNote", "colour": "#ac1889", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727001037, "uuid": "4a06b1d1-95d3-4633-991b-171833eaf399", "value": "T1E6660107FB89C797D5BDC3F85A2329AA2A131F04865296EBC518BB3D3C771D18DC46", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727001037, "uuid": "f6bc0ec5-4d0c-4096-8290-ae29c6428cc0", "value": "98304:rHsZJ8zBdTlmzg6dh4yxasEZ4fiikw2cc5HtwzxEJCs22FDq60t623xyKrJKTTir:TxIz9nAJ4f7zTc5H+F6jFGZhMgJQlw7l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727001037, "uuid": "71f4259e-4b28-4b99-ab72-c359dd29acc0", "value": 6920684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727001037, "uuid": "510f3475-2528-4f9c-9b27-d813c9bb9097", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "31e541b4-78ce-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727001246, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727001246, "uuid": "1e5a9c94-3e8e-42c8-95f5-fd681d2bfa9e", "comment": "Malware payload", "value": "6f6d2b03c1676a4ebb3d5ddcb2be7fe8", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727001246, "uuid": "01749a1e-ec79-408c-83a4-a236436ce802", "comment": "Malware payload", "value": "4902bf5124af3916e10e71a064ba1f31a39222d6b169cb6dcde866b6f510bc4c", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727001246, "uuid": "c0f33d9d-56d3-4fc8-8ec3-2eca4d30a1fe", "value": "T1C3515D16E70FC791E24D1C750A79799D438D61260311BE5A8626F3325341442EEA4B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727001246, "uuid": "4b0e4976-8a58-4e18-bab6-fc104d5d7f23", "value": "48:9JAAtm6Ze+NzO9BhT/vpyTYA5NThpow1AQPM1Ir0eVg2nTMpJ8qMgAn:ZK+NEZR2YMNTIwOH662l4An", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727001246, "uuid": "d0ee4b3f-9462-4df3-ab9b-503977c877bd", "value": 2482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727001246, "uuid": "b3b20815-cb13-450d-9e32-6fbb44830533", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "50ad2f84-78d0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727002157, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727002157, "uuid": "08524585-cb75-414b-a971-02ef77e4cd56", "comment": "Malware payload", "value": "229b5410655197e234e5042a96230f5a", "object_relation": "md5", "Tag": [ { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727002157, "uuid": "77427dd0-3d88-4569-8d3f-a078cf68cdda", "comment": "Malware payload", "value": "d4156fd0ebb875daabc39995fd95f15356eaff32f185950889e6773551827a5c", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727002157, "uuid": "77be06ad-2d83-4aaf-8fdc-59168cbf0d0d", "value": "T1A3165A8332FD6C99E96DC3F3B17EC060C2A1B91ED6019AAE0D412D7CA467FD26C479", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727002157, "uuid": "75e7dd47-2185-40c7-812e-6a31f241e7cd", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727002157, "uuid": "ed49baa0-c973-46a6-a3af-c8e17deed669", "value": "98304:n81z4UQuEbOTb4LdUN/yR4X6ZvTCozlSgFmKmy9N41fUZmM920w41fUZmM920F:81z4UQuEbggdUZym6Z7CaN8eO1fUZmMc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727002157, "uuid": "7c8f8b63-9eca-463b-8383-32cf5c3ec7dd", "value": 4355336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727002157, "uuid": "c1af1e1b-b4af-46d3-966d-e4bf014620f1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc7f7b52-78d0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727002338, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727002338, "uuid": "179478e0-c85d-4aee-90bb-d8f00efb8d7b", "comment": "Malware payload", "value": "c38ef05f91770c87309bc9dde1b3d575", "object_relation": "md5", "Tag": [ { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727002338, "uuid": "c79f3ebe-4397-4d29-ab41-7e6ec327f5cb", "comment": "Malware payload", "value": "fe9fb40aa5f59bdc3bf9f032aa8a9362d95a21727041e449f3035feb1c28d869", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727002338, "uuid": "df6273e3-e6c8-4907-b62b-de97b0b712da", "value": "T143E5230873A6D104E6B76F76CA3951F990B27D10DCB5D50BA3067ECD3A339189AEB7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727002338, "uuid": "d79bc00c-a1ff-4d5b-a493-3abdab5e725a", "value": "a56f115ee5ef2625bd949acaeec66b76", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727002338, "uuid": "5561c180-5f0b-4979-ae45-f9edc52e3681", "value": "49152:vlRsiR740IxciBU13z8Y6mPl3tueJUy1CL6VjWrWCxQ6fxL/rOlEHl0HNiNL8SN:NRBI2j87myeOVoiWCx9x7PGNiNLhN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727002338, "uuid": "5186c148-489c-4b20-b08b-9c95609cd1dd", "value": 3108544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727002338, "uuid": "cc56d3b9-47e0-4f4c-9885-d4c76f637a52", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "14c3fe50-78d3-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727003345, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727003345, "uuid": "300e7ff3-df21-46b5-8780-d914689c61db", "comment": "Malware payload", "value": "8e44a4db06512ab3b4fbe1293d1c4df3", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727003345, "uuid": "72bcf0e9-7ef1-4404-9038-f25e5f518f49", "comment": "Malware payload", "value": "350b72b192ad0cef2708a199ae5e89572b3a2a868488d9cc97785ed5f4d9c5d2", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727003345, "uuid": "e973564a-79b9-4664-8e9a-0a16b099ec88", "value": "T1F5E5CF5173A8DB1BC06E0231E472467953F1AD0AE3E2F39F69447B796CB37020DA92", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727003345, "uuid": "6701a101-9595-49e6-85fd-4de893c98708", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727003345, "uuid": "f0b8c842-2a76-4ca6-81ac-71bf04b05930", "value": "49152:g0BU0oLd8dqIeqt9sFIeOA50Jfy4pKpfeJ:h60HqlKslOA5UdKpfO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727003345, "uuid": "71672884-43c1-4449-9693-c3fe65dd86de", "value": 3090432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727003345, "uuid": "4680eea0-2542-48b2-90ec-921d5b1ddb1c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84317c58-78d7-11ef-afe5-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1727005250, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727005250, "uuid": "abe47f0b-be39-494c-bb55-0b0e1206e617", "comment": "Malware payload (Amadey)", "value": "beae48a1ffa834e6a2597a62073eddb3", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727005250, "uuid": "b903924c-2e2b-4767-b9fc-b9bd282e570f", "comment": "Malware payload (Amadey)", "value": "2d5fc696737dcd3f0b0b6b9c167bf9d546b02941c5a971962aec5e3ee954f6fb", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727005250, "uuid": "a733e9ce-c9c4-49cd-a18a-a9676b8ede10", "value": "T1089533E50B70D9F4DAFE3B745A83278AD76404B5D4BF8615AD437438BCE42AFC2090", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727005250, "uuid": "af716e1d-5d5f-46a2-9827-df0f113ac5d0", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727005250, "uuid": "5e85beec-a431-4748-815a-a5845b02d09b", "value": "49152:KWH5Z75p5NimkIKFhaL3VEZ7tjsz4DJLqTlm:dZZ77uOKFoL3VEZ71a4+M", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727005250, "uuid": "efe88936-29bf-406d-87d5-78dedff57efc", "value": 1903616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727005250, "uuid": "4b5a1c79-da8d-4153-9b72-ae5b0347688e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "794fb215-77a1-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727007607, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727007607, "uuid": "d23bd7ad-8195-440a-a433-3496b5c77ff7", "comment": "Malware payload", "value": "03fc809eef8308c5e8bf9ef1b7911b71", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727007607, "uuid": "7cf69c11-b010-4346-8b60-a450e6e1f8ad", "comment": "Malware payload", "value": "4e35cb46867a1645c7aed9e37908480651e1f49fe09b42a6945b2821c1948dea", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007607, "uuid": "be0f7dd5-b44e-47cd-baec-2684a7fb0dbd", "value": "T178E30945F8909F17C5C252BBFB4E428D772A17A8D3EE720399256F24378B86B0E771", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007607, "uuid": "67d48c4d-40e1-4a52-8229-3dcc6084962f", "value": "3072:7oDYBnfzPimuv4y6ptqd1/atn9833JUnGe:MDunfW7v4y6pEd1/ahKnJd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727007607, "uuid": "a2710c21-597d-4bc4-8caf-632e107c0176", "value": 146080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007607, "uuid": "f8f87c05-509e-4f36-9040-c8c0bff1f1de", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007607, "uuid": "4811a21b-d7b0-4949-90fc-6fec54924e35", "value": "t1c6f05c00c7840fdc16d4144e41ea953229cc38ee9f51ba92bbceec5fc216884f46c1", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8033861f-77a9-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727007607, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727007607, "uuid": "8d58685f-47ed-4cc5-ac18-92feafeb3e0f", "comment": "Malware payload", "value": "dc5fb9cc5895884e21f7cbbcc9bf7359", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727007607, "uuid": "a29caf9a-49f9-4cb1-a024-1b72151fc68f", "comment": "Malware payload", "value": "5fa9574748472f39a00ba595f7f9bc39ce39ff0a4f91fac45bba7c91f2697a7c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007607, "uuid": "68402eb1-c561-47de-a110-5c327caae6e2", "value": "T1D5D30A45F8509F27C6D251BBFB4E428D7B2617A8D3EE72039D256F24378B86B0E361", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007607, "uuid": "94f0b8c1-3c2c-4847-8d26-c0df51394df4", "value": "1536:RBDYf5OckzyC0DzUm44N2m02/4VzbnbuCILNQKCuTPti0OvwlwYwywVRcTvhd/wQ:RBDJPyBC4Nl4xniCUNQKBVijG5MnG5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727007607, "uuid": "5a64272d-3428-4023-84cc-84340ca5b221", "value": 142080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007607, "uuid": "a3d3f082-9e47-4209-904f-fa429919c622", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007607, "uuid": "11b5b223-65f5-47f1-8f5e-4d89d7a01a4a", "value": "t161f05c46cf0909d417ed018990de162629ec7cf316158952faae9c6b80265d1f41d0", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8302608f-77ae-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727007607, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727007607, "uuid": "74f79685-baf2-4841-8964-6bb2d2137e59", "comment": "Malware payload", "value": "6645dd5a1315d0aee1fc7ab093bdb974", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727007607, "uuid": "6aabe904-2645-499a-a01a-458edd5f39f7", "comment": "Malware payload", "value": "37404524f5ec1dc1b470212c89d2dc47ef9562e3855dbda76f2ab3d2e6c5241e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007607, "uuid": "99c51b11-978c-4bc4-a487-7a272796be2d", "value": "T141E3F946F8819F15D5D152BEFE0E528E37231B78E2DE72029D246B247B8B87F0E3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007607, "uuid": "a66ce232-80ed-4c68-acde-2ea3a511a604", "value": "3072:3l0rGEQHjokSXFIkH7a0C/yHX/3a1nVC3qqcnf:GGEujcXykba08wP3+Y3qqE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727007607, "uuid": "65fbfde7-4d03-47b5-96e1-f8979b92fbe6", "value": 157276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007607, "uuid": "7a1fc80f-91a8-4138-926b-ce1dec9cbb86", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007607, "uuid": "490f7de1-d78f-4b14-8e9d-b33dc438b974", "value": "t1bff02e7bee8e2d8d2bc7082590a325019fe4bdb416155442ef68960fc5516e5f455c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d486afb-77a3-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727007607, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727007607, "uuid": "f4246b10-86d2-4b34-ae7f-62bcb381b4bf", "comment": "Malware payload", "value": "c94c0a97cde08d90c1964778bde29628", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727007607, "uuid": "2abe7ee2-50d9-4635-8a09-9c108f392533", "comment": "Malware payload", "value": "7d369a38ad82b64bb2625b759ac1b7dae4fccc2ab49380704ff9cbde92d38264", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007607, "uuid": "8ad44cc6-5d65-4441-8391-ce0f88203cf7", "value": "T15314A71E2E328F6DF678C73447B78A209B6D23D627E1DA84D2ACD1101F6025E545FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007607, "uuid": "b5737638-e614-43dc-bcb0-eec197b1ec9d", "value": "3072:FW02a3BF+E5CTo77RX2RBs0fHgrLQhUjVn56:FW02eBF+Evh2BtfAPQhqD6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727007607, "uuid": "3f503a84-2e83-4f17-8b6b-372c7f8ef8ea", "value": 198544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007607, "uuid": "e93a7c37-2666-461c-8997-bb74fde2607b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007607, "uuid": "3288be42-4973-4ca0-95f5-57f6e4de7a56", "value": "t1ea419f58097827b0a7256c5d089dff2bd6a731db7e166c238e11e85eeb69f839d10c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cef34910-77a6-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727007665, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727007665, "uuid": "b15d5b7e-8700-4065-8d04-7ba69f9457ec", "comment": "Malware payload", "value": "fb3ccc3ca3ee474f17493d314c62ec4d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727007665, "uuid": "167d1540-e16c-458b-84d2-934538ec11f3", "comment": "Malware payload", "value": "d6b74e14602f1509b82c1605a21b19e55342a588ed3b54c6d52f0f79b4a653b2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007665, "uuid": "5e09d163-b573-4870-a682-b77321f25314", "value": "T16CF33B46A7818B13C0D2177ABADF42453333AB64D7EB23069928AFF43F4679E4E635", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007665, "uuid": "00e5f473-00ba-4491-b1ed-19333de01dd7", "value": "3072:kzTN8Wlch2YQ7l7a+h1QJxsTY+WYgtBDJn8ZT6AoqM/9DOAEP:yN5chqJ7a+h1QJxCYsg/DKZT6yM/9SAs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727007665, "uuid": "bdef99b2-5263-441b-8d3c-afec958b60a7", "value": 165472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007665, "uuid": "da41eebf-0e2c-4e1d-a2b8-24dff1b019bd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007665, "uuid": "bffc24f1-0417-4ba5-9424-965856a6feb3", "value": "t1d33165148926891b69b24ab8ddfc47f195154323ab907e319f2ec8cc1525041f61ad", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "24d947b4-78dd-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727007667, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727007667, "uuid": "c33cf07a-2cfb-49ea-b04b-9256135daf75", "comment": "Malware payload", "value": "d8581bf622f904ba517db0904fd7f0f5", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "link", "colour": "#E25206", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727007667, "uuid": "5b3e00e5-153a-4706-8361-b1ea7b971f32", "comment": "Malware payload", "value": "61059485c9fd582d152345d6b6da792b45cadb3894a3b3202a54d19b39f2525a", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "link", "colour": "#E25206", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007667, "uuid": "510f924b-0fc9-4cb7-80cd-50702f6cb800", "value": "T1C0D013FDD4055305245CDD4371F90510CD7ED5D545F54543C5555D50E889101BD7E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007667, "uuid": "2346bbee-0dc6-4efe-94b8-7733c4e44ac8", "value": "6:CCmTogyDmu9MATzDCmTHLWCOmKXNRyWeEDmkiVzJO:UogyDX77rWf7NkEDGVzM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727007667, "uuid": "cea50b11-a29d-4e2c-9e34-a1b7d9a40a56", "value": 198, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007667, "uuid": "35cabbe7-0af9-45c7-89eb-a262a4c80892", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f46cc8ff-77e2-11ef-afe5-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1727007787, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727007787, "uuid": "e52acaef-5c7d-43a2-885c-78c652237971", "comment": "Malware payload (AsyncRAT)", "value": "ce0639cb84857bd4ad992206e7369cb9", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727007787, "uuid": "a5a5ed79-ed05-4e85-8b7a-0e0348b0629c", "comment": "Malware payload (AsyncRAT)", "value": "e6e07cde3550631edba2fdf14825cb64f97a06715fca13cea78e6f85a0481f14", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007787, "uuid": "8ab350ce-27f6-417f-afcb-68ef74cd8362", "value": "T1E8259E5BF5A6A6BCC556C07443279A76B636B88D0231ADBF02D0D6303E99D620F3DB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007787, "uuid": "6eee7ff2-eb05-412e-a912-dc7e046f47c5", "value": "8d489fb407dee81072c055a97f32e2d1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007787, "uuid": "f7d7568f-08cc-46ec-a7bd-3d1a0712118f", "value": "24576:1Hm7GnfHOGiTGzXzJ0Zduvfv5/iM6eBvOeMxRXm98tyMq0:pm7GfuGia0Zduvfv6wGeyla8ty", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727007787, "uuid": "ed7f0d5a-4087-472b-9608-77d605cb759b", "value": 1029632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007787, "uuid": "d6c1fc83-e66b-4115-b73e-d552fa6bc0b3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78cf0c51-78dd-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727007808, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727007808, "uuid": "708c3014-2155-47c0-aae7-a7569865e104", "comment": "Malware payload", "value": "f41d7e0e12ccca30ce220727a9962054", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727007808, "uuid": "e3ea380a-f258-452b-b98b-ab6900a32167", "comment": "Malware payload", "value": "986ce414e2936f4f3e2bb1405e539dded330177564ab572312a62ecf431d39b5", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007808, "uuid": "487f1ee3-ec54-49a9-9267-16b3f24152c5", "value": "T127019ECF3569F1C22A0CAE1CF06A818F76C19AC2B1700F25F5179DB5D4E52142274F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007808, "uuid": "e4617ad9-fe9e-4560-a4e7-e1c715dbe96f", "value": "12:3J33cjQ3ULqQ3iNIl5zAQ3P0LKjQ3uOsQ3iCQ3c/Q3VSEQ3otaKAQ36jQ3SfAUA:3J3MnsNI7GKZfKYBtBYHA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727007808, "uuid": "cb2ac528-e89f-42c6-9887-01c1b9aaeeb0", "value": 718, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007808, "uuid": "543bc245-dbb3-46b1-8d06-dff05645a86e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90d750a5-78dd-11ef-afe5-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1727007848, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727007848, "uuid": "c712623c-d269-43c1-af41-27f8960636e6", "comment": "Malware payload (Stealc)", "value": "8182ef512acaef1f22fa95974fc5f17d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727007848, "uuid": "1ad77cd8-88e4-42e5-ac2f-5ef848901fe0", "comment": "Malware payload (Stealc)", "value": "4840c37304750bcc66371e7fd334762e2559ef6f6de7d2b3d5bce9ba94379ccb", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007848, "uuid": "0fc6f227-d106-4d30-afd9-1f0f4e1a4bce", "value": "T18306F11EA060943FC2E29139DADFFA39589F3A23AABD7D123A6C3DD04577145317A1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007848, "uuid": "5380b121-168f-4f94-b691-b9833710702f", "value": "57327b2d8a90132c43442d6b61fd840e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007848, "uuid": "5833eb13-61b0-44ed-ab62-db9fa5e5f572", "value": "98304:Kq3Ue/t4BT7/Z/U6NVQFamv1oOgEoYYkTZe:Kt8t4x7RcsmFxv+OgEoYvTZe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727007848, "uuid": "bed95b16-2149-47ca-a838-876594fdec6b", "value": 3677576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007848, "uuid": "89adf962-ff0a-4149-b065-e9def77fad62", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b37b1c71-78dd-11ef-afe5-82aee05be84a", "comment": "Malware payload (UACModuleSmokeLoader)", "timestamp": 1727007906, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727007906, "uuid": "4ebcd84b-00b4-48d7-a483-01a1ea55bd46", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "26b5d97e8271c10f757b5eb6778270f6", "object_relation": "md5", "Tag": [ { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727007906, "uuid": "b403f253-8db0-4135-9604-a37d64b75f0b", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "0f46cfd62ca1f1e0b1329c4f85d452b74d5fa072204affe789deb8ffba66313d", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007906, "uuid": "a41d8c1f-8076-48d4-95d1-f6e1fe310a4b", "value": "T189C4F110F5E2A025EF674B705670C2A45BF6BCF2EE7D958F32943A1E19B32904A173", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007906, "uuid": "a68538c0-4eee-4759-826b-74895fd4d387", "value": "371f652fdd8e6836c241a37f6252659c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007906, "uuid": "f50541ce-549b-4600-bc46-66078e681883", "value": "12288:QLT4Z+HsRNjoR/2r4/bcobNenj5R4WcC7Yqx23:QLTxHsRw64/bRREoCf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727007906, "uuid": "5516f92a-f21d-4092-b2d5-3eb0dc2d50d9", "value": 560128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007906, "uuid": "663081a1-e25b-449a-9239-84eca4fd2c1f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2bd3d02-78df-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727008764, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727008764, "uuid": "83112523-6f0a-490e-953f-eb25d330e0b4", "comment": "Malware payload", "value": "39b73ee14f405cb2de7ba90819e28219", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727008764, "uuid": "f41bd749-d6d6-4750-a66c-96e4bbad2600", "comment": "Malware payload", "value": "36033b490304026a66449cd60050c2ec839d21fdabb2bd6e7e3c507d1cc8a15e", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727008764, "uuid": "7b62a9fb-b31d-46f8-95c1-754b8a7eabed", "value": "T16026AE227490807AC66B0334991DB37A77BDA9704B3442D7ABD47E7D3DB04C2AA397", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727008764, "uuid": "9d8c9ea2-1ddd-433b-bec7-0a0565625dc8", "value": "052a42c495a0aeaeca141d0e9c942b5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727008764, "uuid": "ce31abce-ea74-4d17-bd62-42a2afc2579e", "value": "98304:MJDV9bD55mTEbek9rEdMQWlLYzjozp2uj6CwCV1hxT5MbkOO/glN4HuQlKn:W1BQyjYzjobaiHuQl+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727008764, "uuid": "2d3da632-ba99-4fdd-863b-005557a1ca5f", "value": 4572672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727008764, "uuid": "4275b54c-2779-4c37-a534-1d4e8bcb651e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4c2a810-78df-11ef-afe5-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1727008767, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727008767, "uuid": "beba2ff0-0ff2-445f-b264-c2947d3d7744", "comment": "Malware payload (GCleaner)", "value": "f17cf9ff13fca3a18a147ade49a540df", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727008767, "uuid": "b53b828f-0766-484e-844e-2076135f05dd", "comment": "Malware payload (GCleaner)", "value": "badce563d395768ef71e4dc1821c80639b2684311782893efb3289d2477d78ea", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727008767, "uuid": "50ac7441-4e1d-496e-b208-c6e75087d46a", "value": "T10864180A61F1BC56EEA607315F39A3D86AAEBC725F35A35D31043A1F1A733A0F5127", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727008767, "uuid": "15725155-6521-4628-afa4-e2365bec30ad", "value": "961bc56325ea858767969d4be856f113", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727008767, "uuid": "6175b983-41a7-4e3f-a61d-28f175979670", "value": "6144:CrL+HuuxI8xZG67ID91GyKRrRFhv4nWCl:6iOF8G0ITtKRrTN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727008767, "uuid": "731c6238-2cac-4774-9a70-7f26d820df9b", "value": 312320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727008767, "uuid": "dcde6843-58c7-42b3-806d-8630574a571e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d9f00b0-78e0-11ef-afe5-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1727008943, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727008943, "uuid": "a738584e-4b55-4202-a5e8-1ffffd482f8b", "comment": "Malware payload (Socks5Systemz)", "value": "758b4aef524705bfa71608708391af2b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727008943, "uuid": "a82e5826-78d9-4f32-9470-c89891533232", "comment": "Malware payload (Socks5Systemz)", "value": "6a63f5c7b618b7752c9d6e4e4e588f3c6b850fe5244a35a3aeff950eda456bd1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727008943, "uuid": "8316b069-09c1-4248-8c00-5f03cd1bfa90", "value": "T17E44D50661F0BD12EEBE47355F3993D86AAEBC525E39D35E21847A1F1B732A0F5123", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727008943, "uuid": "eb0f50e1-ae0e-4666-8498-6b7dfaae64e6", "value": "961bc56325ea858767969d4be856f113", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727008943, "uuid": "aca771d9-a0de-4a72-9225-c2ecb35b5481", "value": "3072:NXGHLMg57JJiCIl+7FY3beh9ikd5q36hgtvPgu5hlssAxaxEAf7J:RGHLMwlECIlXeak236iDECl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727008943, "uuid": "7223da36-f348-4f1a-ac27-5ad77d2ef61b", "value": 254976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727008943, "uuid": "faf55ba3-302e-43e5-98d9-0408942512ea", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9037d10a-78e0-11ef-afe5-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1727009135, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727009135, "uuid": "a1b1a200-0a50-46d1-bbf6-2350b094ee64", "comment": "Malware payload (Socks5Systemz)", "value": "20cbb5b5620993354d767bd765cee7be", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727009135, "uuid": "0b7839f0-15dc-42a5-b2b0-b30a2412c197", "comment": "Malware payload (Socks5Systemz)", "value": "21f59e9ec7e11e6b4192b0302348263db4e65ceb240986233fe037bda02cdede", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727009135, "uuid": "e7f00b73-0c0b-4ea3-8686-1de43e0407eb", "value": "T1CFE53397CBF28CB6E51A41B1DACE6950094F3221AC29D16DB03C6E7DCF76662DD503", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727009135, "uuid": "6ab8b21d-5a41-4462-9ed6-959cf86e491d", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727009135, "uuid": "615b32be-7eec-4834-a715-676bbe3cd793", "value": "49152:C9qT6AQpHK4K73R89ueQsD429D0RoqzarLz7Iv6r4dRyUQgm0N3RlDv5Z5UaGcC:MFFD43Ricl2xqoqOL3Iv6r4KYm4Bn5Up", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727009135, "uuid": "1305c0df-c5e7-4bcc-801a-98ae8125996e", "value": 3110017, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727009135, "uuid": "69a48d8f-46f1-4bfb-8d67-a13ddbc4a70f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9957897-78e0-11ef-afe5-82aee05be84a", "comment": "Malware payload (RedLineStealer)", "timestamp": 1727009285, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727009285, "uuid": "52ac5fa8-cb6c-4acc-96e9-fe5c2a92005a", "comment": "Malware payload (RedLineStealer)", "value": "4e97e36dd5e4fae769cb1ade01d9be99", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727009285, "uuid": "8adb70fa-e91d-45a5-afe3-2a066841c368", "comment": "Malware payload (RedLineStealer)", "value": "9545cb95accf9eb43999ff192849f2c8c2ef8286c3fc1232d3750cbcd9c8dc4e", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727009285, "uuid": "15a017d2-417b-42da-8e5b-be9989c67de8", "value": "T15C642340E3E05A9DDA37BB31D1DA61280BADA6ED1C9D4BE43A7693440ECD75300C6B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727009285, "uuid": "68115a8e-5f98-4188-b453-ac97f3b4820e", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727009285, "uuid": "573c3ddc-741a-4766-9305-93d82fbffc82", "value": "6144:49SiPY2r9uh6YdytMe6J5jiqsGN9r0u2iIRBd0VlzC7El8GzgsJFkci:wZPYg9uhbc6JRLN9IiKaVltl8g1kc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727009285, "uuid": "fe12ca93-c693-48e4-812e-209fb0648f68", "value": 321024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727009285, "uuid": "2ebe0e8f-1882-426a-ad50-2e42a3719d7a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b23713a-78e1-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727009476, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727009476, "uuid": "b5bd81c7-cb7c-403c-b220-6bb3b38ead2f", "comment": "Malware payload", "value": "6de7bf11fc69cd18369db9760441eb8f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727009476, "uuid": "1f04afd5-e665-46bd-916f-2a6e6af9d099", "comment": "Malware payload", "value": "410372493aa4fa4ae2c9fbcb1ce4f1e9d6708f1c9e8745d4207029b3b7f7c752", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727009476, "uuid": "d90c69de-d428-4d58-b7cf-8a9ae28466b5", "value": "T174E59D23F182C472C1652BB059B6477C6D34AE205D348D87BBF4FDB87D321B2AB661", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727009476, "uuid": "ebc28b03-7271-4078-b363-c5b286f8ef81", "value": "4172274830e7ce389a542bcb8a4a980f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727009476, "uuid": "fb34f2a3-4149-4c1e-9960-81dc39e853bc", "value": "49152:p9J+C0Jk5KG4elG4T0H53HB7/ClmEf0vuCnWTdPXSgK7Wq:/0pKKG4elG4QH53H7EFSR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727009476, "uuid": "e45f86d5-5c5f-40f8-96e9-428e60041aa9", "value": 3072000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727009476, "uuid": "8bcba878-55ee-418c-b60c-5e69a0ca905a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23d76bb0-78e1-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727009690, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727009690, "uuid": "c12aecd5-9912-4645-9124-1c0a532b9946", "comment": "Malware payload", "value": "4360b7ebe876f626a3d9737f9d13e0ab", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727009690, "uuid": "d250cda2-f8d7-4c60-ad66-fbf53bcfd0d9", "comment": "Malware payload", "value": "21d3db9d16ddfaddb4bc10ab3278c53aa11eee43b0c78611b3d98c96bf67bc2d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727009690, "uuid": "ef4a7ceb-78b9-4ba6-ac34-99a4cb9fb35a", "value": "T14A159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727009690, "uuid": "91643d14-bed5-4901-8a63-052d629f6cf3", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727009690, "uuid": "d143d035-f0f7-49a6-8e0b-2d9c08be8f18", "value": "12288:jqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgaGTq:jqDEvCTbMWu7rQYlBQcBiT6rprG8aeq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727009690, "uuid": "4a692fd3-7a3c-4658-b3a8-8d613b78266f", "value": 921600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727009690, "uuid": "bca5aa8f-a3f9-4e42-a596-ae7b3fe4251e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7327b44d-78e2-11ef-afe5-82aee05be84a", "comment": "Malware payload (RedLineStealer)", "timestamp": 1727009946, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727009946, "uuid": "485c54ff-1c0c-4b11-bc8a-527f9890a956", "comment": "Malware payload (RedLineStealer)", "value": "6423234685ca0046f61adac81f3b71d2", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727009946, "uuid": "b0c5ca37-cb0c-4d24-8500-02513ec3a670", "comment": "Malware payload (RedLineStealer)", "value": "2982d7fbda8b889a9cc7ea780acd6ab1e03dc69360836a3a60bae08ae6307ad5", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727009946, "uuid": "74fa6d9b-0c2e-4369-8207-116ef14c452a", "value": "T14E64235C6BC1124AEEFE4931BA6F132457B19FAE0A93B50D21D6CE128E03742DF623", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727009946, "uuid": "8a73e492-7514-492e-adc5-0e57aa8851e0", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727009946, "uuid": "a8300523-96f3-4fa4-966e-ec0a75908045", "value": "6144:JdAUBV1OgLYTQdRyAl4V2sHAe2HIRqMkNnT3DhxJgUGCm:4uV1O5Qz/4IsIkkpxxvGC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727009946, "uuid": "a7c9319f-4464-4545-9663-5d8950ce6412", "value": 321024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727009946, "uuid": "00a37c6e-fb7e-4277-804d-467821528bbc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72a33ec1-6d77-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727010125, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727010125, "uuid": "0a33b864-1c20-4548-ab82-ac579fd6a23c", "comment": "Malware payload", "value": "7b086ee96e9d6108d5dcab9ddc0ac083", "object_relation": "md5", "Tag": [ { "name": "200", "colour": "#699f99", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727010125, "uuid": "d9139773-dd00-462f-b3c1-165640114e45", "comment": "Malware payload", "value": "ea7127f96f6acde246099ee9d3dd4bb95ce5fe7df51e51cf12e31c3c9621cc04", "object_relation": "sha256", "Tag": [ { "name": "200", "colour": "#699f99", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727010125, "uuid": "44a71974-370b-4613-b606-654a06771c98", "value": "T1E1632980FA4B85F5D407497040A7F33FDB32D9690171D66EEF59AF32EA63602921A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727010125, "uuid": "f1d21ed5-1a9d-40dc-ada1-948d0380e0f7", "value": "1536:w2je3ziNxSMG6EXjT8MG/hSu2T/WvwylR2cccs88eF:1S3ONx66EzT8MGZSf6osR2cfsFeF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727010125, "uuid": "bac567b4-de45-4daa-9dfb-83c4ab2c8c02", "value": 66828, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727010125, "uuid": "91c6bdb6-b7b7-4234-afe3-f4ff5e001f82", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727010125, "uuid": "e0bc063d-eeee-4c04-99f0-c5d7d06c816a", "value": "t14131e4f70d6e1cedb7d06c44c31e2ea15a2ee57755b037e80622c92422afec190a9c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0c3db6f3-78e3-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727010203, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727010203, "uuid": "058b5252-453e-42af-86f2-c88a4852d691", "comment": "Malware payload", "value": "b5955fc1357bda7a7218d34a1c89ba0c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727010203, "uuid": "d4a0ed68-2f98-4de0-97c1-4a192dcbf771", "comment": "Malware payload", "value": "613de02b66d13429c74e5b837b5cf97444b5f1b398511c2a930c2fbf5f32923d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727010203, "uuid": "44e11f72-675e-4dfe-805f-3d7bc2fff22a", "value": "T10A8533036CDE941AF51D4472CAA1771823AD6329B4F6F8FC3F010ED771392947699E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727010203, "uuid": "1576a8e1-362b-42b3-a006-15954c427910", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727010203, "uuid": "cd9ded61-54cd-4b04-849f-d58a3ef5bb6f", "value": "24576:JRb8umIIZF0Rd/D65UvJUySu/co7RuYW9WLpLB7fmriE33ErOwsePDrmkR4uhp+l:fbDLDpL1btBunq5s+/RhvdhsR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727010203, "uuid": "35b4c66b-9bf6-404a-9521-d9855d45580f", "value": 1807872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727010203, "uuid": "54f19c61-533b-44ab-8307-8e8d64b130fe", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23d098f6-6d6f-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727010545, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727010545, "uuid": "163c0f00-40d1-4cf9-8f05-1011d05375c4", "comment": "Malware payload", "value": "c19bf8b76a72dc9e7bd1c1867f5ccbac", "object_relation": "md5", "Tag": [ { "name": "200", "colour": "#699f99", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727010545, "uuid": "0fb07567-4315-400b-a933-a312f7cdc211", "comment": "Malware payload", "value": "029e60627f265e228f4a459b59d33ec36787687ea0aaed9326fe0555ec9ab9b0", "object_relation": "sha256", "Tag": [ { "name": "200", "colour": "#699f99", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727010545, "uuid": "c2ce74ce-62e6-4be0-9d36-fe67b9dd4f92", "value": "T156634A02B31C0A47D1A35EB0393F17E093BEE99121E0F685791FDB469672E325586F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727010545, "uuid": "e44e8113-1f06-42d2-98e0-c8da5fb4d823", "value": "1536:uZpm1HfsNzlH/B6TE63PJD9ZHfS/8IaZMkI08w:xilfBD6xbI8Ixkx8w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727010545, "uuid": "62779d82-7c03-4685-8f25-8ffe4569fa84", "value": 69364, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727010545, "uuid": "24c6ddfa-40fd-4104-9abe-964950ed6111", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f6439862-6d49-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727010545, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727010545, "uuid": "fff97240-35f1-42aa-8d0e-0a99922eb58f", "comment": "Malware payload", "value": "8bf3a187df00826e28958980addcd898", "object_relation": "md5", "Tag": [ { "name": "200", "colour": "#699f99", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727010545, "uuid": "4f101529-c2d4-4aa0-9b06-06088af19bf0", "comment": "Malware payload", "value": "b40b4cdd4b4017ff09db8d6818703ada60f8c274b34ff6936d1105025143adac", "object_relation": "sha256", "Tag": [ { "name": "200", "colour": "#699f99", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727010545, "uuid": "50e6e943-9635-411c-979e-e3cb40f600be", "value": "T1F3539D77CC6AAE54D04582B4B5604FB82723E504C6173FFB499AC3AA6093DACFA053", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727010545, "uuid": "afea3aa6-1eea-46e8-91d9-d1ddc13294bf", "value": "1536:tTaO28qTGhxbsSwRkkzYlkKMpsa8LWWCtxH6s:tTTXqTGhxAlkamLMsLWWW6s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727010545, "uuid": "239a6276-8ea1-498b-98ba-a8fee7e6bf60", "value": 62900, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727010545, "uuid": "d6edc79f-073e-47b6-b98b-fd5a1f45a21c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d6f3ef71-6d42-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727010545, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727010545, "uuid": "bba02b72-27fc-41e8-b175-61b2895eb1b7", "comment": "Malware payload", "value": "c15ccd3e90308aeca504d8eaed893446", "object_relation": "md5", "Tag": [ { "name": "200", "colour": "#699f99", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727010545, "uuid": "28dbc04a-2504-42e8-bcee-71c4b345bfa4", "comment": "Malware payload", "value": "31ce2897dd0e0d2ac41dafc06ce9a5e5d794ed37983441a5cfa8b5187ebe7067", "object_relation": "sha256", "Tag": [ { "name": "200", "colour": "#699f99", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727010545, "uuid": "1bd724e3-3f06-4687-a03e-c7fe98f0ddc5", "value": "T18093D619BF650FF7DC6FDD3746A9070625DCA91622A83B367534C828B64B24F0AE38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727010545, "uuid": "1a523686-ddac-4920-af0f-ab0488a0630d", "value": "1536:Oz2jofzkSVjE3qnwurmB4VZM/Cqck++LPZH0IhMcQ3tC:K0izkI43wafck+EPup3I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727010545, "uuid": "4aa645cb-3fda-4eea-8a60-a2362eead64d", "value": 93076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727010545, "uuid": "a8627460-a627-4a0f-9cd8-c24d3d0e86bc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4ef3833-6d44-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727010545, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727010545, "uuid": "52b35225-6e38-42e9-989a-4a997070ed85", "comment": "Malware payload", "value": "bb352153bc132468a1418dda79a1ab5a", "object_relation": "md5", "Tag": [ { "name": "200", "colour": "#699f99", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727010545, "uuid": "7b5eac1c-848a-4703-9699-6e3f3541eb27", "comment": "Malware payload", "value": "a4a087066d765731fa2b952fbbd4e13c3fb65395295c571cc1e377d66c1798c5", "object_relation": "sha256", "Tag": [ { "name": "200", "colour": "#699f99", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727010545, "uuid": "c67cd3e7-7755-401a-b2b8-ceedff887697", "value": "T121734A9AF800DD7DF80AE77B44530519F630A39446830F3B6767FDA3AD721A81867E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727010545, "uuid": "49b82e62-cf8e-41cf-be38-37dfc5bb4bb8", "value": "1536:UulbnvKfttR/HmlkDB8WS/E2HDAPtVbvDfT7ItNuVbu:UulvMPmlkD3qFMtpvDTVbu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727010545, "uuid": "aed2a8e6-2dfd-4933-9552-a4585c7fa84c", "value": 75952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727010545, "uuid": "faf15674-56d4-4e69-bf3e-9d5cc55ed9b0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af372fea-6d51-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727010546, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727010546, "uuid": "f5182159-e89c-47d8-a221-43c855a19c7c", "comment": "Malware payload", "value": "0e786d45d92b2c654f0c545a713af1bc", "object_relation": "md5", "Tag": [ { "name": "200", "colour": "#699f99", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727010546, "uuid": "c8a561e4-6d5c-4eb5-ab28-6e5a1f666c81", "comment": "Malware payload", "value": "dd9376eef7784f63ec063c4559d9475767574aebe160e1ee8cebe5e6a2bd644f", "object_relation": "sha256", "Tag": [ { "name": "200", "colour": "#699f99", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727010546, "uuid": "aa037fd0-d9a2-4209-9ab4-21d2f5a56406", "value": "T1AD634C07B586C0FCC49AC2780B6BB63AD97774BD1239B2BA27D4FA233D49D201E1E5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727010546, "uuid": "604aedbe-819e-45aa-acb8-3526d050f3ea", "value": "1536:rPmZWtTuk2md3YBgZifOCLp6EdCs9JMuk1Gcyd0v0vgf79hRW1:DmZWtTu6JegZiGCL9t9Pk1Gcy7vgf79w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727010546, "uuid": "9157be1c-0a06-4cd8-85ff-697fadcb3e69", "value": 68496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727010546, "uuid": "d80a95d9-2e38-411a-b9d6-2f2a52ddc8e1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727010546, "uuid": "54ae0b58-39ed-4785-a717-bc4db03f3c8e", "value": "t1be2167b4b5a908a071fbfb78b342e5141c75192120e472e1ca378cf6da663810cb14", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d70eea8b-6d4c-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727010546, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727010546, "uuid": "5a47c8ca-2011-46ec-84a9-18b95676898b", "comment": "Malware payload", "value": "7f62cb7add77154d38b25f469c6ed4f1", "object_relation": "md5", "Tag": [ { "name": "200", "colour": "#699f99", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727010546, "uuid": "d378605c-536c-468c-9da6-e05cf868122c", "comment": "Malware payload", "value": "985db3c8fe81609e93694125f62aeadca8251d437d6ace12ac9e67933a66c19b", "object_relation": "sha256", "Tag": [ { "name": "200", "colour": "#699f99", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727010546, "uuid": "d840dbe7-f12e-45bf-afe0-08c2dd0441e3", "value": "T12F535BC1E643D4F6EC2604756037A7378676E43A1129EB97E7D8E533EC42B10E6172", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727010546, "uuid": "b46d0325-cba3-4a58-894c-016d1027ea1e", "value": "1536:Et/Sczikx4JmPFww1MLK3tYouOSn233tfYEg6m9+Oz:EBpzikuJmVMLK3+Vxn239f9LEnz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727010546, "uuid": "b51cfc51-5787-4191-b52d-d22022671b12", "value": 62732, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727010546, "uuid": "0eb2b7b4-f542-4dfe-8111-91df29051c0a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727010546, "uuid": "ac494f33-61bc-4b01-b6d2-b495bb725610", "value": "t16f31e8fb1ebd2df9b3d4ad08c31a6ba61a2ae53701703a6146b2dc9427c35d1507ac", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "465c0ccf-6d3d-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727010546, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727010546, "uuid": "7c19da66-5f70-4e24-a973-1bd1d7c7bd30", "comment": "Malware payload", "value": "892ff8284046b6298441a8cdd08d14a5", "object_relation": "md5", "Tag": [ { "name": "200", "colour": "#699f99", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727010546, "uuid": "27266c2a-c1d7-4e20-a2d1-eddcf97e4da3", "comment": "Malware payload", "value": "c15dd05f572a426366688564a03e7a6697372fcd76453b901101bb820beaaf4c", "object_relation": "sha256", "Tag": [ { "name": "200", "colour": "#699f99", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727010546, "uuid": "5e5a3688-1431-40ac-b190-56e83645f3d6", "value": "T1EF93C70E7E258FADF769C23547B78E21939837C627E1C685E15CDA011E7038E641FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727010546, "uuid": "3beac392-9833-4eb4-826c-29db24c26a79", "value": "1536:eX3/xS3to7eHU3EETdJAYydesdpwH+7Xwgs9eIYkgS:eX3/03S7eHU3EE7RsMH+7AgvkgS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727010546, "uuid": "74a80011-cf8a-4e1c-a72f-6737647a8d8d", "value": 93076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727010546, "uuid": "063b0bb9-1bbf-46df-91b1-94a306cb49f2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727010546, "uuid": "9b401eec-fd2e-4e82-82c6-f9c07c5ceb04", "value": "t12b112858883813f597b60c9d6aecff36e45170df4a215e378d00b99aab6dd025d01c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ffd8acee-78e3-11ef-afe5-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1727010611, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727010611, "uuid": "be61a717-c7d2-440b-9d71-33ca29754624", "comment": "Malware payload (Vidar)", "value": "0ce7cf7cb9d41ae3d473c334443c7293", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727010611, "uuid": "79c09905-4f27-4e7b-9ee5-da65432d9faa", "comment": "Malware payload (Vidar)", "value": "f093c3d6caae966180b506123ceba03a980cee862c6d27ccf1cbc31a4803ad8c", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727010611, "uuid": "0147de4f-33c1-4030-9e00-5a509a1a397f", "value": "T1D0F5CF617BE0FD19DBA12B36A1A34938AA31E4127727F32F1B1C10792D63B744F523", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727010611, "uuid": "9a3852cc-886d-4ba8-b52b-da919d74be98", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727010611, "uuid": "e452070e-2694-4e5f-979f-fb1fffa1e8d6", "value": "49152:mPLdm1zaOSAlDfevZhs2H4mFY0JO6sxnm4USW283JR1eXfzS1p/CvZsDKa70tjDq:KOrevZWQ40Y0em43H0rWfz8PKO0tq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727010611, "uuid": "670bb6bb-d07b-4083-9197-41dd5d4c96b3", "value": 3635200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727010611, "uuid": "511461fa-e327-4d3f-8fdb-c2742a84b4d7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6799f1b3-78e1-11ef-afe5-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1727011056, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727011056, "uuid": "2e65095e-850e-47e8-9fdb-84b526da6af2", "comment": "Malware payload (Amadey)", "value": "3d0cecaf9690b3d080091bcd2be73482", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727011056, "uuid": "291fba47-3800-4a4a-ace8-fdc43ad40413", "comment": "Malware payload (Amadey)", "value": "54792cffb279a9bd7822595556848d6f2b9d832dd295b2485f4ef72aaf5c3bd8", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727011056, "uuid": "50b7b8c2-7e7f-49ea-94c6-745bfabbbc94", "value": "T18495332D4A0369ECE6EC0A73E13B9BE2ED38D61455C9571C8706DABBC03B5F18E26C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727011056, "uuid": "d7bf0af7-aec1-46af-8acb-80c658a3e399", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727011056, "uuid": "d8ca6af8-d7c7-452d-bebc-bfd76fcb2336", "value": "24576:vKiwxUKsOjw6FbiDvajr+W6T/tdI5WPRp0yHCaeSFjas7IegKhaXL/P/ANCS7RQJ:rKsOzFECjiW6T/t+oHCaGegKX+qlq4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727011056, "uuid": "74ecb3e3-9c84-448e-a533-c0e9b05ba694", "value": 1920000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727011056, "uuid": "e9c4ca04-3b77-4d3c-8fc4-0b65c687af81", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab98763b-78e2-11ef-afe5-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1727011071, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727011071, "uuid": "b8d46f87-d3ed-47e9-9ff1-d2c5a2cf0b75", "comment": "Malware payload (GCleaner)", "value": "35238332e9edad50c0590b5cefd7e189", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727011071, "uuid": "582d17cd-c09c-46ee-8bae-7b7e2836ee6a", "comment": "Malware payload (GCleaner)", "value": "b317c7d68ddb01950e905f90579b0031a6fca0e873647358fae9ca42c9123916", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727011071, "uuid": "8027e753-521e-41f7-abb3-c4be4fae3da2", "value": "T13F74481A62F0BD12EEA647354F7D97D876AFBC125E35936E21103A1F1A732B1F9123", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727011071, "uuid": "c25b7c99-765f-4f55-825b-e67716f89d86", "value": "961bc56325ea858767969d4be856f113", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727011071, "uuid": "89379f49-4539-40bd-9b61-20f0d14a46b4", "value": "6144:owLVmmVhvHSiCvjkPoNIxJsf2gnrcnWCl:3JB76vjEBgnr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727011071, "uuid": "6cae6e4a-470a-47b4-a57a-ac3781f4276f", "value": 342528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727011071, "uuid": "c1d88222-80ee-4e22-854b-54bf8244a710", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f3c393d-78e5-11ef-afe5-82aee05be84a", "comment": "Malware payload (UACModuleSmokeLoader)", "timestamp": 1727011201, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727011201, "uuid": "b1009168-2e43-4ea3-a802-bb060265b710", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "8384c209dec4e8825506385813667d2d", "object_relation": "md5", "Tag": [ { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727011201, "uuid": "9d533ec3-6a47-444c-896b-7ef32d188863", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "6cb206becd21e9b8e9f92a771b82092e38da2f89bb933bb2e6bbb56f353d04d2", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727011201, "uuid": "25b07682-84ec-4c08-afe9-7e050073e23e", "value": "T19EC4BE0621F1BC15EEA647751F3993D866AEBC565E3AA39D3140FA1F1A732B0F9023", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727011201, "uuid": "d75c52b6-933e-4203-8a31-3e470490d5e1", "value": "961bc56325ea858767969d4be856f113", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727011201, "uuid": "baa771cc-eb3a-46ba-a553-be645ea9194c", "value": "12288:c/ObZ3zXMVRPuJwFRwkJiQzkRDebcWJjN:YyDOwkkXRSgWB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727011201, "uuid": "810f277f-d383-4951-95da-5a91e5acb4b5", "value": 593920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727011201, "uuid": "d3056ad6-72b5-42b5-a9bb-798203ade9ca", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf23f642-78e6-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727011791, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727011791, "uuid": "a69e87ac-8619-45aa-933e-e97bd2d613ff", "comment": "Malware payload", "value": "c45747ee1177144c266e2a77ffc4a5ee", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727011791, "uuid": "59439361-8808-400d-bdd6-7bb8c799cba3", "comment": "Malware payload", "value": "10894334cbeea85cb6e1bfeb2370b45b4121e84d3d4169f5a719bfc514a76e7d", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727011791, "uuid": "c46fc590-ca44-4af5-8e03-3c7b4a0b670e", "value": "T1C456BFDAD1AE44D29C053FC9A8141BCB4B2847324A740068367B7D8A9F775FEC05EE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727011791, "uuid": "3e3442e5-58fc-40b4-8575-69224854bd9f", "value": "24576:QynuKBEMJn4sjljsm1tK8qsKBaq2tPUVJBneL3OaE3WrZhzu7xHRgWXedOlDD1GY:w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727011791, "uuid": "c61b23c5-8c4c-47b2-b719-2950ab282ea4", "value": 6010035, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727011791, "uuid": "9f68a39b-b45d-483d-b4ef-e2ce2fdea0a0", "value": "application/json", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a6a67d8-78e7-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727011971, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727011971, "uuid": "01a9fe22-7e45-4e3f-b62c-c3b6ca04e73f", "comment": "Malware payload", "value": "f6f28d646c3a053ec83322d8069ad41b", "object_relation": "md5", "Tag": [ { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727011971, "uuid": "43d64924-d128-4638-84e3-88abd501e29e", "comment": "Malware payload", "value": "762c901fe2e895d3e5bf509f1813d978bc65ca5bce9e842e1d096555c2420a92", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727011971, "uuid": "15e650f0-d58f-4e16-b100-4dea34bf0770", "value": "T1CD46235E3A97E096E8403870EB0FAFF226B67C99CDD54C332DC47E4A7471EA2705A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727011971, "uuid": "0b14506a-85ac-448d-9154-d2fe94247a2b", "value": "f49261e98cef38949d602332c56c3bf6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727011971, "uuid": "6d57d1eb-571f-4e1d-a526-be77f72aa44d", "value": "98304:48Uhy9KIgl196ti2b3XGlf/OeKAhDfIiTkcBL5T3qx8vi35JruoprG:jiNP1QtpjGpVEKksedpJr3ZG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727011971, "uuid": "159650ea-bffe-457d-bb96-dcbf3cfd2954", "value": 5753928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727011971, "uuid": "3e347a85-88b2-434b-876c-49f05aa6ed84", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cfea676e-78e9-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727013108, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727013108, "uuid": "2fd8f630-fe10-482d-8a60-8598064fb9b5", "comment": "Malware payload", "value": "b053a47b41e5b41c8e2f414f9b26bbdb", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727013108, "uuid": "eb01ca37-8190-4e8f-a752-c3dffe82e731", "comment": "Malware payload", "value": "31dab6708798e7e0ee704d1846b59cb53bafd6a22c6980320bf267af29f3526d", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727013108, "uuid": "b3c0e335-b96a-4d4e-b4d8-66e4289e3446", "value": "T17C117DD6DC2195A48FA342A9E3A620CDE15C84CFC506482CB29FC7664F958D2D382A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727013108, "uuid": "b31cc343-9fac-460a-9ee4-cba0dcefd37a", "value": "24:Eix3TcVBcFTwsoWH1yMG6Z5wQJ8yRcfgJhc5lc8cY9RcfJhc5lc8cY2:Eixj0BMwsNH1Zx78/sW5ypxRW5ypb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727013108, "uuid": "8e1597db-8570-4928-896f-2dc682ca0eba", "value": 983, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727013108, "uuid": "582c3448-d298-4ab8-99ef-ad2319bd5777", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f5c6441-78eb-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727013644, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727013644, "uuid": "0aeb0a3e-f601-435c-ac3f-a8a0ecb02581", "comment": "Malware payload", "value": "949232d38a521a026eb8f9a97ab7b10b", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727013644, "uuid": "06ce53a3-7d5f-44c0-b6b9-2cd01786bdeb", "comment": "Malware payload", "value": "66c909e16084b2f9defe829bc4c8e9f880bd069bd64be53507fe5b8e58c3a5cd", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727013644, "uuid": "1561d2da-4f94-40dc-8c1a-846ebeda20be", "value": "T18795331BE5D2B6E0C8159AB02DD38D195F323EA48843DE61BF243F77EE896D391091", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727013644, "uuid": "a485eb7c-b45d-47d6-880d-a3ddad63a1da", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727013644, "uuid": "26b54964-809d-4dc8-8dcd-a5e988775cf7", "value": "49152:D11GMuzDQ+7Yt5f0hyjPziU89iYCWkoztXFJ8/g76DK:vsP7a5f2mSVCFo/J8/y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727013644, "uuid": "5c191f96-ba52-41c1-94ae-2dc5f41e425a", "value": 1887744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727013644, "uuid": "3c3d61b7-ace4-4818-bdf7-c70b19722bf6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1b47b36d-78eb-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727013664, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727013664, "uuid": "0957c07b-73eb-4672-bdb0-158e4daa0361", "comment": "Malware payload", "value": "31c0eabcbe67221b9a22cdc525cc544c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727013664, "uuid": "07285dc1-a4f8-4e2c-9af6-3e8543008dfd", "comment": "Malware payload", "value": "a69b10d5ce2066384d7dd9f1d96a0e1780511237fc9da0ff3c8f2b9001053ad7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727013664, "uuid": "c075d0ae-321c-4419-9b20-8cedd5d70066", "value": "T109C2D028F6252BCFDEDEEF740A4995DBB7702FFD1753AE6170D94B46231912640018", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727013664, "uuid": "e4a057ca-ecf2-4660-85cd-544acc0a209d", "value": "384:qdj70LsKn4Z5C+G5pFczSqnzXUIM4sFqEQIcYm6BvIaPrYEeM4uVcqgw05VxJo:+us6neu4wqEQIu6Brhd4uVcqgw09O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727013664, "uuid": "eb556485-44af-4513-a5af-03805862e369", "value": 27096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727013664, "uuid": "29936e3a-d88a-4634-b06f-64280221f135", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3d21507d-78ec-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727014150, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727014150, "uuid": "c5d07c11-6691-436c-be79-71797f3263ee", "comment": "Malware payload", "value": "a168adac30aec2b58bf74a636b75a34e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727014150, "uuid": "7e6e3786-0276-414b-82fa-acbd63b8fad3", "comment": "Malware payload", "value": "3b494612f2c91bc238354a661f036350f04f46ec460566f45589c93bdcf1e2f2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727014150, "uuid": "a7be01f6-d945-4cdb-bc61-875019172f5d", "value": "T10DD2F2DEB4F7C5EFC696D9737E5FE4869020589090A4769BA648CCC38BE23704B1D8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727014150, "uuid": "d909e46a-102e-4654-ab7c-58dfd829bda5", "value": "384:M7a3ZX5812DRH/ahAaEVf4ZAtB+dXiODuLZA3xq7zxmJ8QzpMuTXa3qQGY7b66yy:8g81ORH/TatZrXfc1lOzp3mvn7qTMIFW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727014150, "uuid": "64899212-b8ee-46b9-a99d-a367a9fd4f00", "value": 29500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727014150, "uuid": "b495ffa4-268a-4dcb-a01e-1bb3c2d60a3f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727014150, "uuid": "986df026-786d-4294-b839-b9ad40aedb71", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "540f8836-78ec-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727014188, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727014188, "uuid": "fb1a8fc6-31c5-47a1-a918-0e8b3f7f881b", "comment": "Malware payload", "value": "3abcd14ff5bda3d7122f70e29446cc6b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727014188, "uuid": "b87bf8a3-eb47-436d-904e-4e9846228bab", "comment": "Malware payload", "value": "641c43705b93a3941bf481e5c230a59ad50f14318b4265c855838aea315013fa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727014188, "uuid": "7a2d955f-08d0-49db-b7c2-a002175727ce", "value": "T191D2D17C66138AE4C566517E05910FA1782C1EBDA9037CAA11E5FBC7C8AF49838D7E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727014188, "uuid": "83dc3b19-9d5b-4f55-a679-c18abcccb15b", "value": "768:HO3x1YT9jCAeAq7uA00QmoCj5cxjfgPQLJgGlzDpbuR1Jq:HOUBeJL0lCmgoBVJuo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727014188, "uuid": "912475b0-454a-41ea-a6d7-fe08cf11abd4", "value": 29448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727014188, "uuid": "deb18367-c239-4683-8e52-f2401110358c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e23b4bbe-78ec-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727014427, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727014427, "uuid": "0cb37318-5571-4357-bea2-376fb4e3b32c", "comment": "Malware payload", "value": "346c6b363476e91c4d8d9c05799ab98c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727014427, "uuid": "3f1f9103-2a0a-4032-8b8f-70c2c6521cee", "comment": "Malware payload", "value": "da89979c5c79417956dc545ff210511a457cd7d778dbab2ae367d459c9b2501d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727014427, "uuid": "72a867b2-2924-4521-b51c-30ed7199028e", "value": "T149159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727014427, "uuid": "2c9d466a-5819-437c-80f5-b5d7ddb9b6b7", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727014427, "uuid": "1d4a781c-2321-4497-9f0f-388360a91d4a", "value": "12288:CqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga3T1:CqDEvCTbMWu7rQYlBQcBiT6rprG8aj1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727014427, "uuid": "444f03e1-3a7f-4f30-a2e2-b5d5916a0a1b", "value": 921600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727014427, "uuid": "8062a076-b4a9-461f-9557-5c6382731145", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "efa60349-78ec-11ef-afe5-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1727014450, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727014450, "uuid": "2190d1e9-34fc-4daa-b2bc-cf4e732256aa", "comment": "Malware payload (Vidar)", "value": "93ac3eec07e9598362d48f4d10b75a8b", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727014450, "uuid": "c0dda6b4-a9ab-4949-8205-b5cbc4853564", "comment": "Malware payload (Vidar)", "value": "86772d44d0e2a57a8c2c0c410dc8b5380b2be24d078f0c79c05c9daaa56cd682", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727014450, "uuid": "d465f76d-063e-47b4-8030-9cb661c04f34", "value": "T12E06BE516BE0DE0AD3A52B76E1A389B84A31ED25F716B30F1B2C38693C72B744D503", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727014450, "uuid": "86585bf8-863a-4b92-9f07-ecead5cd8bfc", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727014450, "uuid": "cd37aac7-7456-4118-a403-f1db691a188a", "value": "98304:MPqs7vKIYtlgn6d8b7JINdZ+P/v/zhh8+TrB:MP77vKBtl6bW5K/zj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727014450, "uuid": "07b4108e-2c06-480b-9e0a-4a567ef5f8e0", "value": 3850240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727014450, "uuid": "103a55a2-41af-4574-aa65-8e76c658a206", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33087338-78ed-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727014563, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727014563, "uuid": "3c1471c2-6226-40bf-96f9-472197a297d7", "comment": "Malware payload", "value": "94ce18cfdef90bc36121b3f61322f02a", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727014563, "uuid": "36647f20-e997-4b0e-bc39-7f2c76051b30", "comment": "Malware payload", "value": "ad3564d101924daa4cb2fb2bcb041b25f236bd38ae5858ad32477360d37ea472", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727014563, "uuid": "682725de-3fb6-4a94-9aad-52abe5f92bba", "value": "T1F295331DEB70866CE46F5432F82349A5DD34B8881470DFAE164FA66A67677040CFBC", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727014563, "uuid": "83200d1e-8217-4dfb-9841-743741a4774a", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727014563, "uuid": "1e989ab0-be6b-446c-bec0-13ac388317de", "value": "49152:e2Am3mclpFKeOtkM0e6QXtNHD9lrIAmOrhysJRdI:e2Fk30QtTlZrpDq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727014563, "uuid": "c23b97b3-ef2b-4477-a8ea-85de1b7e6438", "value": 1908224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727014563, "uuid": "0e136377-4860-4d2c-a6b8-cb3a8f6b23db", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6bf76439-77ed-11ef-afe5-82aee05be84a", "comment": "Malware payload (Smoke Loader)", "timestamp": 1727014745, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727014745, "uuid": "c6c02071-cd21-4ca8-9cdf-ea1729e55395", "comment": "Malware payload (Smoke Loader)", "value": "2f59fbd6623872fbdc2f63d18023bfda", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727014745, "uuid": "a506d9ae-0244-4c91-b6e8-3515d5e6c7f1", "comment": "Malware payload (Smoke Loader)", "value": "0c50705ed7cfc68f11aecd4cee0b808934d4957672ac0ea0615e9a1c31870a52", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727014745, "uuid": "7a81f96a-f168-47e4-aae8-3261a1f8995d", "value": "T140947D42E2A17C44FD225B358E3EC7E53F9DB5A1CE59B7A92118AA1F2CF01B1D123B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727014745, "uuid": "b759fd1f-0334-4fd1-8c42-a6960047f21b", "value": "3f8722ca559b0bb5005a556460a2361a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727014745, "uuid": "198c5ccd-da0f-49bb-aa14-479affaad2a5", "value": "6144:6FlsK6LzPfEoIw13JVbP2GOSbkee7xJVGZchwrWEKCoD0Yj8lmxEkuPF7:zK6HfEBsJVblOIQxGZYIWlaNV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727014745, "uuid": "7afa6954-8d5c-42fd-a1c7-955a691c1fb4", "value": 418816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727014745, "uuid": "bdf954d5-b44c-47eb-9629-3a168047aecd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3d1053f5-7808-11ef-afe5-82aee05be84a", "comment": "Malware payload (RedLineStealer)", "timestamp": 1727014745, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727014745, "uuid": "8e2f2ecb-255a-4bd7-80bd-ade49e84e34f", "comment": "Malware payload (RedLineStealer)", "value": "e8e6cd9ec48fafccc174f7bf07d045e2", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727014745, "uuid": "bd606527-1e5d-4294-92fe-335d4ccde610", "comment": "Malware payload (RedLineStealer)", "value": "76b4e6a99335d5ffa35e15863b544bf2ec9ed76cc8320e1d3e2f521a27018d07", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727014745, "uuid": "36bef58d-db93-48a0-9930-b28d36130ffa", "value": "T13F6423F99D79452ECCAB0A7AEBB34133E3F26331CB81E581973DC242479B35656610", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727014745, "uuid": "3905242f-d029-4857-b4b4-e7c567d3a243", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727014745, "uuid": "baee95d3-4142-4f6e-9926-8ac1709e1bd2", "value": "6144:abAWIT0bNaTfjfPsC/LEkuPlXVRKur64ZXzK7rrn31nvFRHW/SPxjM9jg3gfQ9:abA+bKTDjEkuPlFEurPm1nvvHW6Cjg3n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727014745, "uuid": "f1bc19da-6e7f-45d6-a0dc-a081aa0e42dd", "value": 331640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727014745, "uuid": "224ef96c-c686-4604-9961-173471a78433", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52de9a56-6d3e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727014818, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727014818, "uuid": "f79184f5-a1d8-453e-b736-cc7c493d1f64", "comment": "Malware payload", "value": "b5e4a7d4c4e93a4febf8e5bad91684ae", "object_relation": "md5", "Tag": [ { "name": "200", "colour": "#699f99", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727014818, "uuid": "a2bc4b0e-b8b8-43e4-bedb-7593033bead1", "comment": "Malware payload", "value": "dee9dcf781148cc63f5634af148eba456de6561077e4090d4069896ee211e549", "object_relation": "sha256", "Tag": [ { "name": "200", "colour": "#699f99", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727014818, "uuid": "088a34aa-4cf1-47f9-8eab-c90c6326bca8", "value": "T137732956B8818B11C9C512BAFE1E118E3313577CE3DF73229D206F24778A92B0E7B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727014818, "uuid": "b91c76e2-dc3f-486b-a41e-db402b84f1e2", "value": "1536:tDnDSELq8y13ANYWS2+VHkTsoaXPCKMdQxOMtiGaKEklTc5QYeH:ZLq8/YWS2+tkTsoaXJaKEkTc+rH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727014818, "uuid": "79cfc355-4d2c-422b-9765-71f74f12bd5f", "value": 80476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727014818, "uuid": "9f7da17c-4fd6-41c5-83b5-9e03a23443c0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727014818, "uuid": "1cf5bd96-5092-4674-aba7-00cd2e8a5cf7", "value": "t1f1e0721ec61c09e0baf4238341a1266a9a81f1c32a1208a1522a8bcc020ae8f30334", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1b02018f-6d77-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727014964, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727014964, "uuid": "a82762b2-3c74-4003-b39f-e0514b908c8c", "comment": "Malware payload", "value": "54b4fc70b2a71998e47d6214be35579f", "object_relation": "md5", "Tag": [ { "name": "200", "colour": "#699f99", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727014964, "uuid": "14cbe9b7-e94f-4efd-825d-4eb0c4038b28", "comment": "Malware payload", "value": "e7b31d259f3554ec43f6f15e4b6aeecc4ebb67073c6bb552b6d71eeedad7423c", "object_relation": "sha256", "Tag": [ { "name": "200", "colour": "#699f99", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727014964, "uuid": "33dfa37d-c246-498f-8d81-65e14d5f5263", "value": "T107632985BC819A12C6C522BBFB2F428C372663E8D2EE3207DD256F11778791F0E676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727014964, "uuid": "9cad4853-15e5-4c25-a0fd-3148298a428d", "value": "1536:Y3haCZatwqLrScBplScupt5rcnm01L3V2/f9sT2p2:Y3hZA7Obrcnm01L+9r2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727014964, "uuid": "084bef01-202d-4c5d-8818-3fdeb6d6bb30", "value": 71096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727014964, "uuid": "625e8aff-68d9-4271-8b11-c3c9a4286fc7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727014964, "uuid": "efb53cf2-84f9-4557-9270-b34596b71b3a", "value": "t179410ba6df640aec27d19300478f5a5d4efa36ee23066596ce5d5b8f8643ac1703e8", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7949e723-78ee-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727015110, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727015110, "uuid": "9a58322d-1cc5-4f51-ae2f-8962c467ea39", "comment": "Malware payload", "value": "17c45222714840683650be884f65a6bc", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727015110, "uuid": "1fd0ff7e-abc6-4aeb-a1bb-bfdb5d78cdc8", "comment": "Malware payload", "value": "f0170bdbf532092ec6e768c54f2dc081fe3020caf3dc8a90841cf9b73e37409d", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727015110, "uuid": "4d5ff4c9-0474-4b15-972b-dc79384d742b", "value": "T1FCA3F2CC8FBB83A4861CAF2981044C8EC4625EE21FD1D575F586C7363BE34B2E1D59", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727015110, "uuid": "f27dd702-3023-4a9e-b5b6-61f897ed3f08", "value": "1536:YkEFOAgXTuunhl8gCfACmFvdaxtGaDC85pVKAoD0+mlZAFlxOMqCmXBdh7FjWL/7:8FOhTX8g0ACmFCtN+AVVAFlmZVjWL7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727015110, "uuid": "2536072f-a6ca-4e91-8ad1-e75ef10597c8", "value": 106560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727015110, "uuid": "cc61c3b4-341d-4c65-b182-87091f9c71b9", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c848eb3-78ee-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727015115, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727015115, "uuid": "085cc4ac-670c-43f3-959b-bb5f9b469341", "comment": "Malware payload", "value": "27ee351b991f2fba2750c9b1a2836ac9", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727015115, "uuid": "6ae57f81-4127-4a82-b0f4-754b5215ffb4", "comment": "Malware payload", "value": "89a1b6bbfb720a61871e8131a91926dee8f03b89ee0432079bba965433521fdb", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727015115, "uuid": "ac392d97-29ac-4b5c-b53a-64010761893b", "value": "T1ACA42430E4E60F70A8627B8734D6B82D8E707A6F1CA3C9556F676692254BCC530CBD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727015115, "uuid": "c6febff1-7b73-4846-8a41-9bc0d983ca26", "value": "12288:OJcTaVAvAio7xLxei1Uy1+F2PbT1E2RqL:tVoVLxxZHPbNgL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727015115, "uuid": "64d7e339-1f7a-42b4-b43f-a8f65e5fb5aa", "value": 483308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727015115, "uuid": "72aad5a1-cc93-4b49-90ac-06ab73877452", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72dd846d-78ef-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727015529, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727015529, "uuid": "58adaf55-5ed3-4e80-a040-33a77575bfd1", "comment": "Malware payload", "value": "fb0f5184e4550dee12c4ded3db2e7fee", "object_relation": "md5", "Tag": [ { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727015529, "uuid": "e4150c11-1af7-4b1d-9c0a-03f7cdd66344", "comment": "Malware payload", "value": "277edda72addd5505c05bcd7f00f7c96bb756fb180fe3b767c3d3b722559689d", "object_relation": "sha256", "Tag": [ { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727015529, "uuid": "ae274270-b75d-4759-8936-e3de811d64c1", "value": "T1B28533588A28B16EEF0C0F7464F212D4513D85BEEEE32488744832966F8FF767A135", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727015529, "uuid": "4a19423b-25af-4202-96f3-9d00004fae1b", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727015529, "uuid": "b568a076-1004-45cc-ad11-04d6b46912d9", "value": "49152:ZEBuRiFiJk4FXZPtZnBSof41aky8CoJ2j0LHwC1HY:ZEMsiJHPjNOtlP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727015529, "uuid": "19212956-ee05-43f9-b2ab-fadf1ec96a7e", "value": 1794048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727015529, "uuid": "b6222d56-beea-4256-9c03-b77056e91177", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a2fc6b76-78ef-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727015609, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727015609, "uuid": "b6e3efc1-e9bb-4267-bcdc-5a402ca45830", "comment": "Malware payload", "value": "082d5ae49932776ed7a4ab366394979a", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "This_exe_triggers_specifically_to_cobaltstrike_c2", "colour": "#e63640", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727015609, "uuid": "7709bf24-abf0-4915-901d-8cc2af75ec0e", "comment": "Malware payload", "value": "bccae6c873aefa80fed8f7b3ad58b70ef0a454fd7deab16f7c300e269e1a189e", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "This_exe_triggers_specifically_to_cobaltstrike_c2", "colour": "#e63640", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727015609, "uuid": "d28a5197-40df-4838-b179-5cbfe3eb18a9", "value": "T12634BD45E5EABDA9052F54357015BFFB9E00E946C0E73A8ECA42A4B78036DF0CDC9E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727015609, "uuid": "eacb9b1b-3889-4159-963f-f7112e7147ac", "value": "3072:+bFTkM2kZLf3bNhGhhwgfvcLeaNWsKRUVh2zUw5ZpQeV5Hi5YCqeaJVMicCzRpxr:MIklf3J0cgf0L3N9AUVwZpQtpaJVNpt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727015609, "uuid": "8f6ef7a3-cd11-4e5f-b79a-e77f52fab83f", "value": 239706, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727015609, "uuid": "71f6aa72-2c48-4c8c-b22e-b059aeb81d7d", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e29a177f-78ef-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727015716, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727015716, "uuid": "70b18a1e-9553-4260-8a9d-08daf3a78244", "comment": "Malware payload", "value": "b05c7cc552647ff5d4eb28e3f0bf7e29", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727015716, "uuid": "4ede1c02-3c50-43f4-9822-91f5ee18fa2c", "comment": "Malware payload", "value": "4c2f3cf732e1af10d1c18949d319c04ec2927d39beafe084a782963c9c5568c6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727015716, "uuid": "85d7aa0e-3f15-4fe7-9b88-03ab5c65c2d9", "value": "T15BC2E13ABA569DBAF50C7433243983EF0A49DD50C3591303D6C28B514BBBB6D3266C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727015716, "uuid": "25b22764-90e1-4c8e-bece-e2e5e3366c45", "value": "768:0rsctyqMtB8eaJSnvy9fTtOjs8UlepEq2iIz:0rHt5MJaQvy9fkjs8TqXi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727015716, "uuid": "586dcee4-1924-414b-aa62-154fd09887de", "value": 28088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727015716, "uuid": "5e8663ee-eaba-4a3e-8b2d-4644fe3e2440", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727015716, "uuid": "2c4e0cf8-3014-4f2c-b46b-6951fadee95c", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91a0ac7f-78f0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727016010, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727016010, "uuid": "86a47e4b-7933-4e93-b335-dd4c3d7469cd", "comment": "Malware payload", "value": "f552fe3f8b601af77c58b9630940ecc5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727016010, "uuid": "9966e53a-5b17-4ad4-abe3-d2d2bbd8d9a9", "comment": "Malware payload", "value": "21beacbd95bbd2fe4ebc0e02f42a3c6d2bd7b6ea730c23207d8a46ed144a8e7b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727016010, "uuid": "b579bfb0-965a-45dc-b769-29a818be8e93", "value": "T17ED2E1AF23AF47F6DC396430A576E0D0DC87781BBB0203AF15D035BD9966618AF119", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727016010, "uuid": "63f1330e-7d3e-42f4-bece-897336e8de2d", "value": "384:iHAOkDeerL4KleS5ggIV4qffgGXPeCUMf6urixWibVLi3FzcUL5fhnUxaVXAL5zn:WzjglqfrU+6uCWmQFzFfhSx0fq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727016010, "uuid": "605e4bce-3475-4c5b-a148-1845d3f9d456", "value": 29448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727016010, "uuid": "f38063d4-3d7d-4f86-8814-b83917eadce5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727016010, "uuid": "39c81a1d-ccbd-4894-8556-b3718c692613", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d1a170c8-6d45-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727016103, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727016103, "uuid": "11f3e3d0-bd31-4344-8701-104950ba8329", "comment": "Malware payload", "value": "fe9b2bf69f1e1130f9a0d2044074f86a", "object_relation": "md5", "Tag": [ { "name": "200", "colour": "#699f99", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727016103, "uuid": "92396412-d949-43a8-901f-5e90d4ded8ca", "comment": "Malware payload", "value": "a90dd14840394305a5ef9bf562a7ae143928671ea84d1908eda59fa4cb819d8e", "object_relation": "sha256", "Tag": [ { "name": "200", "colour": "#699f99", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727016103, "uuid": "10ff0cae-5a34-4153-af01-fa619d021582", "value": "T14D3307B51555B2BCF8E15078F80721F529430A183BDCE7C3A093197AFEB4B097896E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727016103, "uuid": "99c20aba-a77e-44bb-8c67-828098db9343", "value": "768:0y5OpcM2kRl1pQi9tPJ8f+R4tO6Rp3TCGdk6pVcZRe:X5OTZh9tPufxR5ZVVcZR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727016103, "uuid": "24fa13f2-1100-4e3b-ab57-720d39945e8e", "value": 50804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727016103, "uuid": "7fc61ac3-1509-49ef-a86f-9dfe74d9a506", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727016103, "uuid": "1ecce46c-09de-465c-9ee2-ab50b898cdbd", "value": "t101e0ab00fd5a8a1848eb9a308ced03f8e0005112952287209f11c7e0883f118a30cb", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b44a5672-78f1-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727016497, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727016497, "uuid": "9cdb75ba-9053-48f2-adb0-a691270efef1", "comment": "Malware payload", "value": "d3959591cfccf40bb893d2f5681d1ae7", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SpyNote", "colour": "#ac1889", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727016497, "uuid": "efb5acc9-f8cb-45fc-b7d4-ae97f2e7712a", "comment": "Malware payload", "value": "c5a16e21e4a23ec0b94b3a37e573aebdb7a398681a4dbaaf219f3ea5d6b82bdb", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SpyNote", "colour": "#ac1889", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727016497, "uuid": "2ba9135f-f002-4ba8-b85e-a70831557b6a", "value": "T117660147FB89C797D5BDC3F86A23296A2A131F04865296EBC518BB3D3D731D04EC46", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727016497, "uuid": "9f84e4ec-e543-4814-8628-a9f0f636a0b7", "value": "98304:VTsZJ8zBdTlmzg6dh4kGnm4YjFBbgaUDWfOSP0wty0tZcOSL1mRqYDzfh/U5:ZxIz9Enm4YHfUifO8xZcOSL1RCU5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727016497, "uuid": "ad0461ee-e9c3-40aa-87a5-c43204a27356", "value": 6916588, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727016497, "uuid": "315dc8f3-ca5d-4c66-b1cd-3cb59db41633", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62664755-78f2-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727016790, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727016790, "uuid": "30eb4b91-20ca-400d-a3da-70ba8c0d9b09", "comment": "Malware payload", "value": "166f1d6b5e5f186efd98007933cad0bd", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727016790, "uuid": "a444c4c2-35a8-4dee-8380-2b7105e3fda7", "comment": "Malware payload", "value": "76618fa69ebf29788df5a1450b9b83f12fa315fae7cb71d3768a77d084805e1f", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727016790, "uuid": "33327231-a8b3-4ddd-9c3f-4cce88e7c766", "value": "T1FD341229335861F90CBC3F99F9A05562CE70C22736577A0963F9E87F3059AFE0805A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727016790, "uuid": "853884ef-ff74-4269-b93c-368ee1fe11e5", "value": "3072:YpW5THHNz8dDZI/mvkqwfE35YiItMVG9xpPEpEbAC/Fgya++7NGkz4mYZ8ccYd7M:YpeHRAk9mLG9HME95WN4mY26d7b7c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727016790, "uuid": "1c95ecf5-794d-4fcd-919d-efd98a62f439", "value": 240192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727016790, "uuid": "6d44ed44-748b-47a3-9fa1-987042f9a9b0", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "628495e4-78f2-11ef-afe5-82aee05be84a", "comment": "Malware payload (AgentTesla)", "timestamp": 1727016790, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727016790, "uuid": "5158cfb5-229d-4273-88dc-853923e25b55", "comment": "Malware payload (AgentTesla)", "value": "1fe6c4f83c987d801743c26444919702", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727016790, "uuid": "270f8b60-c60b-40cd-b06a-4ed3349433f3", "comment": "Malware payload (AgentTesla)", "value": "2e3551983fc1704f6bae61c606ba56a091aa94c947297b10e7ebcbb66eba6dd1", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727016790, "uuid": "18556bae-c501-481d-8433-b2d1f6363a19", "value": "T1577485FA6076ED8A87370E80D1043F075C299EDF66B847F8768815D1C29C68CADE75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727016790, "uuid": "d68c54d7-49d4-47cc-9c71-1de79daeba48", "value": "3072:YoDtgf0wo5h5HCmtFC741YKfmaydZcHIRoNo7VE9zowkFYoOlsjYbT2ZGaDf3wnG:F1ty4OuNyB74zowDG22c+ht", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727016790, "uuid": "2bb851a0-9816-4ac4-acc0-6a85a0a6c5f7", "value": 337920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727016790, "uuid": "2d9e5dd2-0e49-4154-b9dc-c73c3eae6ccd", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6364e39b-78f2-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727016791, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727016791, "uuid": "d092be6c-c4ec-4673-98cc-7176f7455716", "comment": "Malware payload", "value": "0b2bd7535a362d772acf2a6769ad6537", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727016791, "uuid": "e553749e-bdda-4ec0-b9d8-78c949d8676f", "comment": "Malware payload", "value": "8040306c7feac0f79361f9cd1bdcc50951126e4bd24886af56a96d0639352c78", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727016791, "uuid": "ec65eecb-c3a5-4346-9cfd-10953c84c3c3", "value": "T1CE949BC7A91822B0BC9C159694603FFE9E3138E621117A71BB0DDBCD344E6F2B3652", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727016791, "uuid": "67d6cd1c-fea0-4028-acb3-cb20955dc29f", "value": "6144:h8J0B+6gxfCz8/ykN51fHmwb+EHOxqKPWZFUAbcpsW8gKykjdFLuRlWZIb2w1UQu:h3gxfCgdr1+ZqKP5Abc6W8iW7w2Qu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727016791, "uuid": "2f6c34fd-99bc-4616-a9ba-616f2458de69", "value": 438372, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727016791, "uuid": "9e0d4aa0-abb7-428d-9238-3315bb3054a8", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8461dae4-78f2-11ef-afe5-82aee05be84a", "comment": "Malware payload (AgentTesla)", "timestamp": 1727016847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727016847, "uuid": "42c8b80d-1dcf-41d7-99b5-f8c628b60df2", "comment": "Malware payload (AgentTesla)", "value": "d822f5b3ac838341b2643c8908f0bc4f", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727016847, "uuid": "df24d478-3c5d-413c-97cb-25de12f5201c", "comment": "Malware payload (AgentTesla)", "value": "9dde591540775e53b8022335ce85851955555fcb54d35511b2b195323c981c11", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727016847, "uuid": "2a12e536-404e-49da-8b75-171d82d07e21", "value": "T1F645E121F5C69036C1B323B19E7EF76A963D69360337D2D727C82E225EA05416B297", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727016847, "uuid": "a1c0fe1c-bc46-4623-83ff-c65cec8710f0", "value": "d3bf8a7746a8d1ee8f6e5960c3f69378", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727016847, "uuid": "4e67b278-cf04-4cdb-94a3-ac3aa09b5c53", "value": "24576:uRmJkcoQricOIQxiZY1iaC8QOhTxBfJnTtJFZja0BwHfPKPFT:7JZoQrbTFZY1iaC4BxtBjamwq9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727016847, "uuid": "9ea36589-ba40-406c-bc1b-9e5e4be6f6b1", "value": 1184087, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727016847, "uuid": "2a13e07e-488b-4ba4-b54a-d8e39b7c7fee", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5b963e4-78f2-11ef-afe5-82aee05be84a", "comment": "Malware payload (AgentTesla)", "timestamp": 1727016983, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727016983, "uuid": "1d3f5d31-4ddf-4cde-9e21-f3314187b79c", "comment": "Malware payload (AgentTesla)", "value": "e4df42ee6fd39d7ef3cb767571a3d9cf", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727016983, "uuid": "1ba7c7d6-4baf-47da-84fb-1248af993cf8", "comment": "Malware payload (AgentTesla)", "value": "6460c253f6d9b12b4598caca091e84040c80a929cae2997f0c9eb11c2897a1f0", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727016983, "uuid": "f39face1-1531-488b-afa1-6e3a64785861", "value": "T11645E122F5D68036C1B323B19E7FF769963D69360336D29723C82E315EA05816B297", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727016983, "uuid": "9167627d-5ca6-4aad-be22-8264fc3f084f", "value": "d3bf8a7746a8d1ee8f6e5960c3f69378", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727016983, "uuid": "d92867d3-1f62-474b-83dd-ee0fe586b813", "value": "24576:uRmJkcoQricOIQxiZY1iaCkSyjflIANDV/qlFswQjzJwBPvAZnpm:7JZoQrbTFZY1iaCkSyj+AND1mFNuwBnd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727016983, "uuid": "a015d4d7-5aac-4673-a328-94638ab718e8", "value": 1177915, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727016983, "uuid": "ce8617d6-02eb-4768-a9e9-bafaf377c088", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b3afd73-78f3-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727017234, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727017234, "uuid": "c290f570-55ef-49b9-b021-44a00cc68199", "comment": "Malware payload", "value": "24ec1d5e5f7142cc8f7ec187760e8b92", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727017234, "uuid": "ade2de3d-fa93-4424-95ee-88377cbdb8f0", "comment": "Malware payload", "value": "3be5b7709af9b03a66dad04f33fc278ba6998c600afd2df2d06081b1d2b321e6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727017234, "uuid": "0802ba47-45a3-4dad-b5bd-b514da9251be", "value": "T18E539EA1C5ECAD58C66481B4F614CD398323A409B5E72EF6D646C69A901FFECF0487", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727017234, "uuid": "b539ebb5-6599-4201-8127-0e34f6736993", "value": "1536:+akIwysU/jHWnBEYkAON6FSEhcofs3Y3yHFDZmACM:+TIwrULHEwzoBh1f+Y3OFDZmA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727017234, "uuid": "467a78f7-a1ac-4ae4-b80f-b317d834c555", "value": 63952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727017234, "uuid": "3dec4e30-1f60-42d2-8060-6411aa551fa5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "209a1a71-78f5-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727017968, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727017968, "uuid": "faffd2db-22b0-4dd6-89bd-4ae5cb377ac8", "comment": "Malware payload", "value": "008ce259d934678fdb491068880cf830", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727017968, "uuid": "488c04f2-7da6-40e3-a459-5b09a0911e4b", "comment": "Malware payload", "value": "b0b3fbb7e6d578da227df469ee4104d4beeeef07cf0aa969da85ddf73b59f045", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727017968, "uuid": "091ef9cb-43cf-49f7-a173-90313e5ed674", "value": "T1E99533B2FE3EE632C89963BF4C275593F736B66A72335F44C91E1D6D1102241BE284", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727017968, "uuid": "2b8e5d0c-7a37-4e2c-a211-a5ba9001dfdb", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727017968, "uuid": "4543ad29-ff0a-49ab-a8f7-7f5f4f6a94b3", "value": "49152:HEk6eRxHscySPDvP4CtZ3tPiutxDjK5m:H/s2P7P4Ct5tPiwM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727017968, "uuid": "5c5fef9b-faba-4f51-a901-0c8af423faf8", "value": 1891840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727017968, "uuid": "1f203c48-e0da-4380-ac11-4b6d5e35fe3c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "27d0d4de-78f6-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727018409, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727018409, "uuid": "a2670bfc-f4c7-4bd9-ace5-7a378b5e0e8a", "comment": "Malware payload", "value": "f8419f12470fc303181dc6c6ff07388f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727018409, "uuid": "2916b816-1f2f-4564-bfc6-4c1cccc95134", "comment": "Malware payload", "value": "991a40ac522bfa368c075bfcb9aca27047714b1dd9cda6965491272840763e0a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727018409, "uuid": "0931cea3-c834-4d91-a0e1-5b38525e9f5c", "value": "T1C58533580C78E361DC1849B0CA5B52550FFD1EFED81F3EA65F52737A0A53381EA9A2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727018409, "uuid": "8c1b8e97-901d-4f7e-b51a-ffec7504ac97", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727018409, "uuid": "e2df6733-03fd-4f73-b5c2-4b7dc3c45b06", "value": "49152:e/XTCF4mJUhY2cvaJYab/yom9u92LSHIl:e/OFyhnGara8922", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727018409, "uuid": "a9239df1-c46b-4c5d-9372-61225b3012b4", "value": 1766912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727018409, "uuid": "03718745-4e66-4478-aaac-699630fe720a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e495a8c-78f6-11ef-afe5-82aee05be84a", "comment": "Malware payload (Smoke Loader)", "timestamp": 1727018447, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727018447, "uuid": "6feb32c0-69ee-4f41-8da5-cb9cd65c2ced", "comment": "Malware payload (Smoke Loader)", "value": "f61056227f79f8c3c1273d849058d562", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727018447, "uuid": "d9b15178-bf80-4ba3-8778-3bc4061d8b47", "comment": "Malware payload (Smoke Loader)", "value": "e2ad8e0efd30852aa3fe5c4c72dccc9f26fdf699e1aa0a5cf716ede595d148ad", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727018447, "uuid": "edd4ee40-1dbc-41fb-a6ff-a97f9ff310df", "value": "T1E844C30A61F0BD52EEA64735DF3997D86BEEBC525E35936D21483B1F0A732B0B5123", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727018447, "uuid": "6d2b5ff0-9202-4734-a6bc-41e31153e20f", "value": "961bc56325ea858767969d4be856f113", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727018447, "uuid": "32b1a386-2ed1-403d-b3d4-51c2adb470b1", "value": "3072:6nGHLMg57JJi4fd/M+HmOuJpBLgpgu5alssAxaxMe9Uf7J:IGHLMwlEOd/M+HmrBf9el", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727018447, "uuid": "ae3cb53f-7446-419d-a9de-39e90a84147b", "value": 254976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727018447, "uuid": "20e6ab65-33d3-4359-bf95-dda9ecc9e756", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "542c8e12-78f6-11ef-afe5-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1727018484, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727018484, "uuid": "e0840496-f7c4-4326-befa-c565d7f72f99", "comment": "Malware payload (GCleaner)", "value": "b09033cab6888fad245a9ca802e4220f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727018484, "uuid": "f958d7e3-0b86-4a1e-b28c-c23fee20da38", "comment": "Malware payload (GCleaner)", "value": "fa0d5a8a44dd0f71be3909939a5501c996ec8287054ae33d70d79c643dc7b066", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727018484, "uuid": "2da294c0-9712-4cef-b5c8-88b41714ffa0", "value": "T19874391A61F0BD12DEA647365F7997D86BAFBC125F35936E21403A1F1A733A1F9023", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727018484, "uuid": "bc4ae957-3cb8-4997-8ff4-f7fa28e74773", "value": "961bc56325ea858767969d4be856f113", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727018484, "uuid": "23faa1d7-72ce-4a9c-a49a-a051752337ea", "value": "6144:cwLVmmVb8dRwU+bi+Tl+f3XUCNaBxWjrWdSHwel:zJBeL+bi+MnBNYWjYm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727018484, "uuid": "21689256-3898-472c-b658-1f8a4575156f", "value": 343552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727018484, "uuid": "ccb49c24-76c2-4156-804c-a1357df0f6d2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6dc0ca7a-78f6-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727018527, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727018527, "uuid": "4f4a062b-f7d3-49f9-8a0d-948ca9fd6462", "comment": "Malware payload", "value": "ca763e63734583e9b88284d8cb74213b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727018527, "uuid": "d561e11c-a6ec-44ae-81bc-cdcf1db1452c", "comment": "Malware payload", "value": "a4de95fe955d61c12fb973d63c53b063a1f6e28a8c4853d3c7b58727790a619e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727018527, "uuid": "a4a960c2-15e1-44f5-831f-1611136604cd", "value": "T1B6159E0273D1C062FF9B92334B5AF6515BBC69260123E62F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727018527, "uuid": "6af6e1c1-603d-417e-8e11-68601d98b348", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727018527, "uuid": "4358bfda-2d41-433f-91f1-5b75938f4033", "value": "24576:kqDEvCTbMWu7rQYlBQcBiT6rprG8as8X:kTvC/MTQYxsWR7as8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727018527, "uuid": "35c35010-9af5-415f-8bd0-30da77e27d9e", "value": 921600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727018527, "uuid": "ac872e61-4cbe-42aa-b205-1149a3bdebfc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "92cd79f2-78f6-11ef-afe5-82aee05be84a", "comment": "Malware payload (UACModuleSmokeLoader)", "timestamp": 1727018589, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727018589, "uuid": "ca4a2ff4-6513-4326-950d-241738857ab6", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "a7534df90ba90aec43065ec89c7480c0", "object_relation": "md5", "Tag": [ { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727018589, "uuid": "14bc5b27-333d-47f4-8624-c149d61fb0ec", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "737bca54f7041fd30a8b02f8e339c0c496ecfe5aa45f272aa3a45036426fe5a4", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727018589, "uuid": "6c7ab430-5c08-4ea2-a874-18afcfb6224a", "value": "T1A7C4CE8A61F0BD16EEA247752F3997D877AEBC526E35935D21403A1F1A732B0F6023", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727018589, "uuid": "7d9dcf6f-7d92-4983-9fab-5de4b9c46881", "value": "961bc56325ea858767969d4be856f113", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727018589, "uuid": "1da0e285-6b71-43c5-bfa4-7cb6ae4b031a", "value": "12288:B/Oz8keN7yoJHtCp044Fnjkq1tSAc9es9D:l3PLJHtCp04Ej71Fc9e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727018589, "uuid": "fda49ada-1d25-4327-b841-6aba12a56329", "value": 593920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727018589, "uuid": "6c27029a-3e8b-44d3-9802-01ff916af507", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2461bc94-78f7-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727018833, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727018833, "uuid": "c341e1a8-987d-40b0-b9d0-e9244d918c86", "comment": "Malware payload", "value": "c17b6642ca7b7807e580957c104f037d", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727018833, "uuid": "7f8d3ec4-eee5-478e-be5d-c85fdb178d70", "comment": "Malware payload", "value": "367a9b02dc41f3b19b4f3eb8193480a26f2054379740c5a7062e92b7319f3f4c", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727018833, "uuid": "78f616be-00a1-40cd-bd88-9cc657b6f52f", "value": "T19831318D70628E3017BDC57D768535CCA6C3D6BF890A9EA4F043B06C385C36CB1A8E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727018833, "uuid": "38c52061-ada2-4a8f-8109-46e494152c1c", "value": "24:Sz2zISLNVLAltrM35BFRDD6n0LY83H0tfhhp5wEliodZYDYc7QW:SyMSLitonmzfvJlBZY6W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727018833, "uuid": "ad594f0a-e031-42dc-aa5b-d97a197493b4", "value": 1594, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727018833, "uuid": "edb03540-8a9c-4526-8017-f59eae401754", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc857a76-6d64-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727019392, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727019392, "uuid": "df87c270-d46c-4ea0-9928-31929ca134aa", "comment": "Malware payload", "value": "2a660303a21f38f487cdbc6b5ba31523", "object_relation": "md5", "Tag": [ { "name": "200", "colour": "#699f99", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727019392, "uuid": "1beb3e0a-909f-4ba7-9300-978b13abaee4", "comment": "Malware payload", "value": "cb24ed3acab8d45db2344856c226674cd89f0dc81a73a8455c90c17b903ecae9", "object_relation": "sha256", "Tag": [ { "name": "200", "colour": "#699f99", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727019392, "uuid": "0180da9c-4baf-498d-aee9-efaeacc06e72", "value": "T184633A55BC819B13C6D012BBFB6E428C372663ACD2EB3207DD269F11378791B0E6B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727019392, "uuid": "75622fcf-616f-411e-a287-2095a3ac276e", "value": "1536:oTmAYBIPMgQIgFqlUnScust5ZQtySv5k+2MxE5vx2:oTCBiwqeZnbZQtySvRgx2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727019392, "uuid": "4beb5e37-f470-4e6f-8d0b-e93a0cde369f", "value": 73012, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727019392, "uuid": "a286e03b-23a6-49e3-b99d-7f59c80214ea", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727019392, "uuid": "14dae60b-9320-4783-bdf5-baa2320f7ca1", "value": "t15a41bda6cf781fdc2bf18358828a562986e435ef17247c93ce1c278f86975c1709d4", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c6d0a9a-78f8-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727019410, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727019410, "uuid": "5e57dca2-167e-4131-a51f-40741be9aa7e", "comment": "Malware payload", "value": "3c894c4bb1ec2059f3df46e8e5538300", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727019410, "uuid": "0795076a-9338-4410-83ee-a3223488d3bc", "comment": "Malware payload", "value": "fbbd0749aaeb8020ed2d0c2d7631853ad9ba2da6c09e01d7a71d36723ab37887", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727019410, "uuid": "6c7cd4b0-7ac8-44e5-9916-2bf0f0d37ca3", "value": "T104535DC6B4119E7DF9CBE7BE41220E0EB821721150931B27BB6BFD93BD731648946E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727019410, "uuid": "57a7760b-d712-4341-bc49-59e4740781bf", "value": "1536:OrR9NwS7XwMwg+PZ06gFutKmZ2XUR2q8fDh8F:E9MAANwQ8rs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727019410, "uuid": "d2d13910-903c-4083-acb5-0851eb82a94b", "value": 66596, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727019410, "uuid": "b9f0972e-6ac7-4ed6-a908-36950d8adf0f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eec7619a-6d4e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727019744, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727019744, "uuid": "cd3182d6-5345-41b8-aa37-e654f487437b", "comment": "Malware payload", "value": "5955e7975a9d4964720c08b3e7f79adf", "object_relation": "md5", "Tag": [ { "name": "200", "colour": "#699f99", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727019744, "uuid": "88eab3af-9176-46d0-b3a3-d0168866fe09", "comment": "Malware payload", "value": "8cf3046e3bac5d131e70706659149179369ecc26d6b2ce1a2f9b5a7a8b1d7b15", "object_relation": "sha256", "Tag": [ { "name": "200", "colour": "#699f99", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727019744, "uuid": "de432088-d7dd-4d51-9ed2-54b8742c36f6", "value": "T17EE32A46EA408B13C4D61776BA9F424533239B6493EB33069928BFF43F86B9E4E635", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727019744, "uuid": "5a3dd1d4-e588-44f9-ab61-ed53e43e8836", "value": "3072:ym7vjPmeqgFGBs3QaMiLRbvLfGlxePIeCO4GSgQM/9TBp:XvJqmG+AaMiLRbvLelZpO4GSfM/9TBp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727019744, "uuid": "7b1645ca-23b1-48f1-8a6b-88f58c6bcf64", "value": 153669, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727019744, "uuid": "cfaa0eef-81e2-4ed8-b011-196500b6586b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727019744, "uuid": "521993f7-c7ca-400f-a462-b2a4a12027bc", "value": "t1f521fe366b35522a2ab1cd60dceda3b2111847126344bf33df22c0cc241e09ae62bc", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70d0edda-78f9-11ef-afe5-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1727019820, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727019820, "uuid": "76f0d491-83d9-4bcd-bd1b-a473dd1373f5", "comment": "Malware payload (Socks5Systemz)", "value": "8650abe1034c2a604cb009c822f379dd", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727019820, "uuid": "f02c157b-95ca-45a7-b414-b4fc573e0224", "comment": "Malware payload (Socks5Systemz)", "value": "1d15be9216a5dbbf7a788197163df2db7124cdd048f0b365e633a53fbb871ad6", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727019820, "uuid": "ce3d46c1-7087-4267-87eb-66b2a5a81a2a", "value": "T137E533475789D1B6F106CDF04B63C76518FB9A71AB395020398898BCDB33287853EB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727019820, "uuid": "075b9e20-72f1-44f1-8533-1a81df973e12", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727019820, "uuid": "10f01da8-0a56-43b4-8ee4-c1e403f9ac45", "value": "49152:C9dDm4qSi9OTogJJI4+vzf8b0FZZSzfsvyRDLN6mwXuh+oIs6tw9GL:MdlJXIf1SzfooHN6doItu4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727019820, "uuid": "27952377-8526-4c7e-8525-856bde133963", "value": 3080196, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727019820, "uuid": "9655b1d0-8a01-4deb-bbfa-1a148195a091", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78b53a39-78fa-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727020263, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727020263, "uuid": "4a9d0d02-e898-428c-a08c-18a06ee5acb2", "comment": "Malware payload", "value": "d052b435681e5ec1b817de6dbbfe1e1e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727020263, "uuid": "e0bf9c9f-56d9-451b-a142-22dde28bf4e7", "comment": "Malware payload", "value": "53e566dcbba330c8ab80171c8088c90db438f499ad613b55070787b2c4bd2121", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727020263, "uuid": "59a37a2e-4fc4-4d0e-a2d9-f5bffa623cf8", "value": "T17435232553A9856BDC6DA7F4E8B9D64117F0AF4AB420C3D82D94F8FE1883FC145213", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727020263, "uuid": "c57aec45-19d3-4436-8c70-4c13fbbd782a", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727020263, "uuid": "8847d594-294f-4c8d-bf93-ae8e96311ba1", "value": "24576:FrVhrEgB3DFw9QwFvslU26864l3tw4Y+2uucgw/:Fr7rEgV8QwFUU26lz5ubx/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727020263, "uuid": "371dc9e3-b859-441e-9907-7e770e84c40f", "value": 1097152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727020263, "uuid": "67a552ba-5716-4982-9702-17c6f207d3a6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "047b9d79-78fa-11ef-afe5-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1727020640, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727020640, "uuid": "dff824a2-8fe3-4ee2-bfbf-fa3d85982642", "comment": "Malware payload (Amadey)", "value": "7356bce1d7c3a478347a3289fbecf275", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727020640, "uuid": "e865204a-3797-45ca-85ce-268484d72020", "comment": "Malware payload (Amadey)", "value": "927dec155580264195f92ad15a97cf8fdc58fc449927dc45b2bb98098f742153", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727020640, "uuid": "718aee31-d5b7-4f0b-b1fe-8d1412972fe8", "value": "T16395336B23BB2190FCDE727054B35A67F12C40381863A3B274418F7D776A99AD2F9C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727020640, "uuid": "afad5153-5fd6-409f-b161-95da9413b2d7", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727020640, "uuid": "2733cef4-6349-4cb2-944c-80399c35356d", "value": "49152:LNsg2Bi3MY6+HmxMoPbRaVOXHmRmgKRhHYQTKi97wII8qm:pEm2++PVhmRmgKjYQF9DY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727020640, "uuid": "8887bc2a-c77b-44e1-aa90-ac01d13161c2", "value": 1922048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727020640, "uuid": "021dd82a-69ad-4ac9-9a72-24921ffa072f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8327a774-78fe-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727021998, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727021998, "uuid": "068ded4b-52dd-478b-aa0b-3caf5ff86315", "comment": "Malware payload", "value": "98e15d7489b6045753f65fa41914c23f", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727021998, "uuid": "c31c30b6-dcd3-44e2-b8af-fa2c8a4939b9", "comment": "Malware payload", "value": "69af802d26795d7845f344272d52b0c760954dcdece0c64da3cd8f482b3aa41a", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727021998, "uuid": "8fa177cd-043e-4b87-a406-ed1e0677a7a2", "value": "T13611BDD2DC2089A48FA342B9E39220CDE15C44CFC406482CB39FC3664F918C2D382B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727021998, "uuid": "f3a4b57b-49d8-4a64-96f3-4cc6284f3828", "value": "24:Eix3TcVBcFTwsoWH1yMG6t5wQJ8yRcfgJhc5lc8cY9RcfJhc5lc8cY2:Eixj0BMwsNH1Zd78/sW5ypxRW5ypb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727021998, "uuid": "7eb75722-284e-4a21-954f-e91146d3090c", "value": 986, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727021998, "uuid": "f927934d-ec57-468c-9cbb-4177dc82031d", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d7d7f51-78ff-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727022472, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727022472, "uuid": "4555b705-dafa-4838-a3f8-97be3992112a", "comment": "Malware payload", "value": "bc1e211635aa753cdb83d9cc256d9bc3", "object_relation": "md5", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727022472, "uuid": "93d6b590-5832-4cec-8008-dfcef13f11b4", "comment": "Malware payload", "value": "f0e6f0124e87468911a87396d7bdf291729eefec7341da17982f51e9a5d452ff", "object_relation": "sha256", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727022472, "uuid": "03b37762-ebd1-4692-863c-e8e249c2fdbc", "value": "TNULL", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727022472, "uuid": "bef7b826-d691-4ada-b25f-91b88dd5e9f2", "value": "3:gABOXf7Ib:7MvMb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727022472, "uuid": "985a285f-ef8e-47ce-8383-7c4dc326f74c", "value": 117819, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727022472, "uuid": "3dd5c791-c3a0-4fa0-b3fb-d072c6dda533", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3309c303-7900-11ef-afe5-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1727022723, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727022723, "uuid": "b66f03b9-7055-40a2-bd57-2d0656990e9d", "comment": "Malware payload (Amadey)", "value": "dd963ea67c52b6beec84d0525c1d13a8", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727022723, "uuid": "db827027-5e72-4bbd-b3da-34289be0afd5", "comment": "Malware payload (Amadey)", "value": "fb4ab8a5161fa9b39d6c132f289ac340d0adbaae27f1d1719d28a505e7cd165c", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727022723, "uuid": "94359e26-e055-4a25-93df-27ea21467ade", "value": "T1F89533559BE8626BDB0B6B34E082BB4DB775386A54F0D96C944FB2BC0B7560F2D03C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727022723, "uuid": "1c961267-62dc-4c72-9696-baf8996cc1f0", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727022723, "uuid": "da25488e-b6e6-42d8-abd4-34d31a69e5ac", "value": "49152:F5LnYaZggKebrIdqPvNXY5zAOur+jO1qhKF/0F/:rLYajQwFC0OufXFMF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727022723, "uuid": "81a74626-a9c3-414e-a9fa-86598f1a42a0", "value": 1952768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727022723, "uuid": "2d1156a7-dc53-4fd5-ac71-37900ed37c59", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07cbad4c-7901-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727023080, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727023080, "uuid": "3a0df0e7-1f8d-4c32-b796-2a19d41a8c2c", "comment": "Malware payload", "value": "fb39af1a29b66f1694169498c4c3132b", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727023080, "uuid": "b29fbbf9-c5f3-402c-a88a-30a25fd0024b", "comment": "Malware payload", "value": "3a9a7d28287176ec6f40b642e2af959e567dcedbe824a90e20f5aac70cf29565", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727023080, "uuid": "ac0367d9-89f2-4cf6-81d3-767ee68a9294", "value": "T1E1159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727023080, "uuid": "8df9a80f-47c1-4349-9203-df4ffd4e0d9e", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727023080, "uuid": "0d382a77-e969-436f-87aa-5625e90d5bb1", "value": "24576:PqDEvCTbMWu7rQYlBQcBiT6rprG8aWTax:PTvC/MTQYxsWR7aWT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727023080, "uuid": "f7f8472c-da04-413f-969a-804e888272e9", "value": 921600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727023080, "uuid": "8218c348-b4c6-4c0c-bd45-0975ada232ed", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "981c8bf1-7901-11ef-afe5-82aee05be84a", "comment": "Malware payload (Tofsee)", "timestamp": 1727023322, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727023322, "uuid": "1ced4f97-e3ec-4524-8b3f-353f0d64627c", "comment": "Malware payload (Tofsee)", "value": "3e46d80bb08adb523bcfb6513303e97e", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "Tofsee", "colour": "#baa077", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727023322, "uuid": "f80ab65e-2808-4475-b8b0-1c6f82708e5c", "comment": "Malware payload (Tofsee)", "value": "56729a5a19331b3ea3106edf767c0ba7eaf6cdbb190572abdde7a73e9024cc7e", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "Tofsee", "colour": "#baa077", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727023322, "uuid": "2ecae174-7937-467d-aabe-51bd14904640", "value": "T1FD44D51661F1BD16EEA607355F39B3D86AAEBC625EF5936D21403A1F0A733B0F5123", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727023322, "uuid": "4e5f2c4b-4e0a-4246-bdfd-24f35d9b2b65", "value": "961bc56325ea858767969d4be856f113", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727023322, "uuid": "3f63ab24-a434-4ab6-993d-1135fb231034", "value": "3072:BUGHLMg57JJiDShUUXVmDMepVkgu51lssAxaxwnLUf7J:yGHLMwlEDSWeCLel", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727023322, "uuid": "8eb71d6c-c8f6-4568-b625-aac7dc040a32", "value": 254464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727023322, "uuid": "f8527f5b-4ec8-4bc8-b4a3-cd6525657aa2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b0064f52-7902-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727023792, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727023792, "uuid": "34576bb0-9b95-4e97-bd0a-7e43516efdb1", "comment": "Malware payload", "value": "523ced1b222d75ab53bd8310d1d91782", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727023792, "uuid": "63eca8d7-b92c-4120-be82-ba219137eb00", "comment": "Malware payload", "value": "d59b247d5a7d0324fe5f50031c44d63d4c2f57cf745e4840803ab755c96dc1bd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727023792, "uuid": "de7bb912-7f01-4cf5-a1e5-2ee2c8f6bb53", "value": "T1E4C2D128F1291FCEEEDEAEB80B4D56D7B7746FF92B639F6170D54F46231822250418", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727023792, "uuid": "b5d7ffdf-3e3b-41db-995f-d860707de05a", "value": "768:sus6neu4wqEQIu6Brhk4uVcqgw0X7JkmWf:sf6neu4wqEM6hhk4u+qgw09e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727023792, "uuid": "6c42f642-5595-4da2-bf73-5c0088edf5c1", "value": 27612, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727023792, "uuid": "d91361e7-16ec-49b3-b8bc-90db16377656", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "facfcaf6-7902-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727023917, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727023917, "uuid": "0b4dd188-0e24-4347-a4f2-fb6faa51009a", "comment": "Malware payload", "value": "552db6579dfe7b86483c2a28c4d0eb8b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727023917, "uuid": "19a2c66f-452e-4899-a7b8-bd47efedd322", "comment": "Malware payload", "value": "8e23891ca7c5c0d31581e58edcdd97cc519d49be4c8fb47174aa776b7d4b9dff", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727023917, "uuid": "17d4eda0-18aa-46e1-94fa-fd69662cc273", "value": "T15064170B21F0BD57EEA607315F7993E876AEBC565F39936D21403A1F1A332B0B5523", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727023917, "uuid": "dec4752d-19e0-4e6a-8909-0e3990648580", "value": "961bc56325ea858767969d4be856f113", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727023917, "uuid": "5971d381-d8b1-4058-bbfc-ca9a72e9680d", "value": "6144:prL+HuuLCJvDPHvVa7HvZocKfFjWhLel:piO6Cvxa7H2c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727023917, "uuid": "2d02db18-a7ba-4200-a1f6-40b434ea7e82", "value": 312832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727023917, "uuid": "f997b76f-adcf-4375-bd53-6c5c331c2f1a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc5535b0-7902-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727023920, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727023920, "uuid": "9bcf6abe-8967-4b09-a95f-df99e32119ed", "comment": "Malware payload", "value": "78df8f1ab1f94f18e88724c948557254", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727023920, "uuid": "37eea6c2-95c9-4986-9d46-2b4add632fcf", "comment": "Malware payload", "value": "32983f0da50665005d357bb8cfea1906c24e80b370aceb56851d3f2fb169bc6f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727023920, "uuid": "882070dd-ba49-48cc-b681-68ba5c02230f", "value": "T108D2D0B2E6409066D3B09DB2E0AFCF590767DBACC44E65525304ABB890C6CC75AFDB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727023920, "uuid": "4237ac8e-24e2-4d5e-917d-b1f59cfec2e9", "value": "768:V4xmT9ZuhKSVq9+IJTlLubjT+R78yio2jE3UL:VczhjY9+IUPi3dgF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727023920, "uuid": "e98d5c49-2330-4bc9-b994-e0d60060e6b6", "value": 28348, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727023920, "uuid": "fa25555f-5c59-405e-a2f9-febd75843c97", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727023920, "uuid": "d72e19ab-f040-4668-aa59-96c194bab5d8", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "943e1eaa-7903-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727024175, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727024175, "uuid": "1b3e5237-0198-4af1-9e49-c82f17a80a91", "comment": "Malware payload", "value": "b41a3950bbefea0a15d0139e6f35ac36", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727024175, "uuid": "237d5a72-e8f5-4119-9deb-8cd9ba5ea441", "comment": "Malware payload", "value": "0cafa6d31cb2431ed1cf5e846cbe54e9af47def9236e63d0cee1a2c7378d82ee", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727024175, "uuid": "a96b664c-4098-4222-be2c-e67bde48810e", "value": "T1A1D2C0BDCD26A098CBBD183DE72D2A921C98F45C26BC538FC7125CD9A746A0F39849", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727024175, "uuid": "5a557966-2afb-45a0-9dc2-bff29c8dfce7", "value": "384:Nuah2LbK942uW44hoHcYs+tRfdiKxyLbRnQtVKWyw3jXknsL+y7nM3CrGRWGVCz6:NuaseuwoLbRFiq6R4RjXkHr3TWTNIQo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727024175, "uuid": "f3c2f155-8e70-4c5b-a734-5fa2043bf7af", "value": 30604, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727024175, "uuid": "22b3c51f-e0f5-4e26-8e73-d4b8762049a0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "992d3373-7903-11ef-afe5-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1727024183, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727024183, "uuid": "4d5bfeb3-68fc-4092-a39d-28bd78efc537", "comment": "Malware payload (Amadey)", "value": "2eb21b645d3122034e6ac9458d012ce4", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727024183, "uuid": "e97445c3-8b0e-4fb0-b091-b773ef6504ed", "comment": "Malware payload (Amadey)", "value": "8ea4cd0dd60acf9aa4423e5da9459fc24753ca024611d0c04005ae680ee14439", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727024183, "uuid": "ecbf287c-d979-47a2-aaf8-eb2c032bcb74", "value": "T1D99533854D18EEE8E0A628339FEF9DD9BC04A8CBAF528FE7203D789D355F46618470", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727024183, "uuid": "a2e9e9f6-4458-47ae-89f5-1b668d91ba49", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727024183, "uuid": "860ed765-7113-439c-adc3-3991c99f04ad", "value": "49152:IeDs8pyrIKSb+er/+IQls1qQp0Pbom/TagqcKtCEgN/a:15+SDSIQsqpTnrvJKYEg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727024183, "uuid": "9eef5481-dde7-48b5-ac31-01ae465773c0", "value": 1891328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727024183, "uuid": "b28f92f9-11fa-4670-a029-8d1b28debd6e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b363bf8e-7903-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727024227, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727024227, "uuid": "52c58362-0516-41a1-ab7c-0068701a9dae", "comment": "Malware payload", "value": "f0e455a0ed4884b550a8167ac255554b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727024227, "uuid": "8f4b4996-796c-475f-8eab-ca950d1e62e4", "comment": "Malware payload", "value": "85e4cd4947bab1d4ba268f17e946443c90c7febba4cca00ae06a33f2348d3708", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727024227, "uuid": "57e3660f-eef7-4063-8c7c-d70bf7aa5d89", "value": "T172D2D03D66138BE0C562547F01960BA168290EFDA90BBC9911E1F7C2C5AF49978DBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727024227, "uuid": "a7fdebf1-d3b6-48f7-9601-00a2381ebbf3", "value": "768:BO3x1YT9jCAeAq7uA00QmoCj5cxjfgPQjJgGlzDpuW3:BOUBeJL0lCmgoZVEW3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727024227, "uuid": "4333ae4d-c77b-4cd0-94ea-dd6d863000db", "value": 29688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727024227, "uuid": "c7752312-8847-4414-9bdf-ee82b5de012a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd2302d5-7904-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727024726, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727024726, "uuid": "70001763-9d3b-4a20-beb5-f02bd0c5c74b", "comment": "Malware payload", "value": "93eeb40a5fccd539963c668c51ee76fc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727024726, "uuid": "8f04066f-1444-4b3e-a910-6742028ea61b", "comment": "Malware payload", "value": "08dbebd08a7f235076c9bb3c5e58812893d9f3d49aecf1b32fcc13d0cd510d3d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727024726, "uuid": "d5c4227e-6b16-474a-96c7-41a871ecfde7", "value": "T1F8D2E0AF139F87F6CC786430B666E090D997B8167B0203AF25D036BDD916618EF11E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727024726, "uuid": "7b75292d-fae4-4b0b-896b-474d8011f053", "value": "384:0vHAOkDeerL4KleS5ggIV4qffgGXPeCUMf6urixWibVLi3FzcUL5f4nUxaVXALsW:0PzjglqfrU+6uCWmQFzFf4u+rq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727024726, "uuid": "1691e428-633f-46da-b2aa-2f65878f5e40", "value": 29776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727024726, "uuid": "b3c7cbd6-aae4-4df0-906b-f0252509fd75", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727024726, "uuid": "4cdc5cc0-4b52-4707-b04f-2a6719afd29f", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51d55eac-7906-11ef-afe5-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1727025352, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025352, "uuid": "56f34c6f-9de9-4e0f-98fa-84729736d5c2", "comment": "Malware payload (GCleaner)", "value": "41c87eea73a4153262709e291be8ef11", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025352, "uuid": "834fd2f5-0aad-408d-90d0-5ee55f26f587", "comment": "Malware payload (GCleaner)", "value": "f4f163411288ad821bae9f1ddadfb9ed333ac998eede882a914ffad3d13b6036", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025352, "uuid": "fc4ef7ee-57ac-4e63-b54d-ea54d63e6466", "value": "T15074491A62F0BD12EEA607364F7D93D866AFBC125E35935E21403A1F5A733B1F9123", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025352, "uuid": "b52e721b-4e77-448f-85ee-204f6ebf8a9e", "value": "889511a72a7bb798cba88774c4aea917", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025352, "uuid": "6124173e-d450-4e89-b9ad-308024de5b71", "value": "3072:0yfwLw65qJnVbHh6FYqXxrqpxqdtQJcHjtaM5xzKKBRYx2bTE1qruWYW5PlssAxc:jwLweeVLh6m2qvqVHcS1i2XE14Ael", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727025352, "uuid": "45967813-0a46-41df-ae59-f83d01a08081", "value": 342528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025352, "uuid": "7f7f9eb1-08ea-44f1-8640-534da7117707", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94f12bdd-7906-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727025464, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025464, "uuid": "285ebc64-3ed6-4b89-9913-ad85890284c0", "comment": "Malware payload", "value": "2aa867a73adb556228e55110b37ebdfb", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025464, "uuid": "18665483-83f0-4715-859b-ba24d3f3232a", "comment": "Malware payload", "value": "3e7cfefe5528f12aad4e1c96e6cbcae6087f79f2351117e4cb0cca717947d36c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025464, "uuid": "f6ea0940-e45b-47fc-911c-b457d5fcf121", "value": "T12AF5336F030EC077E2614AB2CD7D8544652E936513F8D058B5E84BC8BB374A8D9BFB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025464, "uuid": "610eca6f-f872-4fef-ae4b-640c16019826", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025464, "uuid": "2a3be09e-54dd-4a46-a75b-d75ce286388b", "value": "98304:MgB13zTNniS54925VuS9ZTE2DnDnlwRzknKuyG9d/:/B1NnD549I9Zo2DDlB4G9d/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727025464, "uuid": "75ffdc11-bf94-4556-b79a-f723ce030a09", "value": 3426112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025464, "uuid": "ffef6db6-b20c-44fe-a369-9185f6b5817c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11d5c618-a5fe-11ed-af1e-82aee05be84a", "comment": "Malware payload", "timestamp": 1727025727, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025727, "uuid": "8459244d-4b37-413a-862d-d73a7714e4a0", "comment": "Malware payload", "value": "c8fd9be83bc728cc04beffafc2907fe9", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025727, "uuid": "e6ecea6d-a4a2-4b2d-9eab-7509360d72dc", "comment": "Malware payload", "value": "ba06a6ee0b15f5be5c4e67782eec8b521e36c107a329093ec400fe0404eb196a", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025727, "uuid": "7865e59e-9447-4628-895e-06cc9fce9480", "value": "T140D4AE03E9D450F6E95239B2302FEB3E953427368B3488C7C7E46D955B356D2A2BB7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025727, "uuid": "594dafe4-08b6-4433-86d6-26a98d1355e3", "value": "c190cce47c6cbf1ec0a59ffd2965da30", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025727, "uuid": "b5f60111-5da7-4bfe-b2e0-a2eaefbddfd1", "value": "12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727025727, "uuid": "21a560be-4176-4a56-a118-9ffe060168f6", "value": 608080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025727, "uuid": "85e46604-c259-422b-9762-05e41a9b6711", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1147a846-a5fe-11ed-af1e-82aee05be84a", "comment": "Malware payload", "timestamp": 1727025727, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025727, "uuid": "72db6a49-40c7-44d5-8c96-95b98cb65079", "comment": "Malware payload", "value": "550686c0ee48c386dfcb40199bd076ac", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025727, "uuid": "e04d7138-d613-4951-af92-8f4746b1cc62", "comment": "Malware payload", "value": "edd043f2005dbd5902fc421eabb9472a7266950c5cbaca34e2d590b17d12f5fa", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025727, "uuid": "4d520c79-79dd-4a66-8c3a-eaad544c483e", "value": "T1CAE47D26E352B427E48314B5D60D67B74C301F35476198EBEBC17E68AB716D2A238F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025727, "uuid": "eb7b513f-0849-48d1-a7b7-93673b416b77", "value": "f781fa19ee3108d3fcdb3967b70bbdf5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025727, "uuid": "35442d8d-3b73-42d7-bdb5-9f4de5ccc065", "value": "12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727025727, "uuid": "963ccb9d-d4a2-40ab-9d1e-aba8e766393f", "value": 685392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025727, "uuid": "efff5878-9bf2-4da4-9960-f2d86e0bb1e8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d8b0283-604c-11ed-a083-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1727025727, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025727, "uuid": "1d2bc7ff-ddd5-4be6-b580-ddf016377da3", "comment": "Malware payload", "value": "1f44d4d3087c2b202cf9c90ee9d04b0f", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025727, "uuid": "6a9b4f0f-e073-4ed3-93ff-8b27201f1899", "comment": "Malware payload", "value": "4841020c8bd06b08fde6e44cbe2e2ab33439e1c8368e936ec5b00dc0584f7260", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025727, "uuid": "2cadf23c-c312-42e1-b8b4-dc518e3d1c38", "value": "T1FF356D4AEA07AC7BDC5302754617E39B0575DA70A833CB8BEAC81D68DEB3DE116097", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025727, "uuid": "8b10fbc4-9d19-4d01-a67a-2b9df42366f3", "value": "e727d00364cd87d72f56e7ba919d1d40", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025727, "uuid": "2bb0a8f7-7610-4074-b3e0-b7346176e4c3", "value": "12288:dxylSMUMifofI9ayCvcZMBiMjCodEMdo8R66tCWko5+jsbFcoYuprzpGSgGSrz:d4AMB3caSZMijBI1CWkoj5auF5gGSrz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727025727, "uuid": "5db7a0f9-f592-41fd-8bc1-529437025101", "value": 1106998, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025727, "uuid": "5278cde5-f525-416d-955c-ae6212d9914c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11862e3b-a5fe-11ed-af1e-82aee05be84a", "comment": "Malware payload", "timestamp": 1727025727, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025727, "uuid": "f4aa7cc4-1428-425b-bc09-bf23264c7b7f", "comment": "Malware payload", "value": "4e52d739c324db8225bd9ab2695f262f", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025727, "uuid": "40ba6814-d8de-4f9d-ba89-c8c74c07a457", "comment": "Malware payload", "value": "74ebbac956e519e16923abdc5ab8912098a4f64e38ddcb2eae23969f306afe5a", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025727, "uuid": "2dd9631e-44eb-4b2d-8394-7c1214d580fb", "value": "T102445942B581A474E49238B5315DB73A2C3A5621B3E5C8C7EF81AEB01E642D36F3D7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025727, "uuid": "41f03029-8e78-45f9-8928-83c5bee469a6", "value": "32ef7516974ac0c43943c0635266c6fd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025727, "uuid": "534b01c1-da14-4726-be8f-ed9b7ccc339d", "value": "6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727025727, "uuid": "ca7db128-b197-4bae-9599-cf8914aacd9c", "value": 257872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025727, "uuid": "99d6ff73-d60a-4df1-86ef-2db73821e64d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "122c756b-a5fe-11ed-af1e-82aee05be84a", "comment": "Malware payload", "timestamp": 1727025728, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025728, "uuid": "59f8b812-5a6c-4585-9738-3ce2d7b50d9d", "comment": "Malware payload", "value": "1cc453cdf74f31e4d913ff9c10acdde2", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025728, "uuid": "5d7a4ea4-ead7-4144-a14b-ad7fe5b7ce76", "comment": "Malware payload", "value": "ac5c92fe6c51cfa742e475215b83b3e11a4379820043263bf50d4068686c6fa5", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025728, "uuid": "522741d8-79fc-47c2-9260-d7ce5f163134", "value": "T1ED959D52A9C9A0B1E84931B3B89EE7BE1E3053235B26C9C7D7940DD85F556E3133E3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025728, "uuid": "9f63b5a5-afa0-43dc-810a-b78281652682", "value": "91b2deacd206ef373baa926022d03ae2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025728, "uuid": "65d5a337-3a62-4621-b4f0-9f06b3430f00", "value": "49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727025728, "uuid": "bb0a0552-c96d-468c-bd0a-10ee2e075fcc", "value": 2046288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025728, "uuid": "64c79e95-17e1-4917-bafa-5e459bd3f6ee", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "667c2278-7907-11ef-afe5-82aee05be84a", "comment": "Malware payload (Tofsee)", "timestamp": 1727025816, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025816, "uuid": "03e18fd6-eda2-40a2-a1a7-c26a51111034", "comment": "Malware payload (Tofsee)", "value": "23547b75235e33953f71512d3b77db3c", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "Tofsee", "colour": "#baa077", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025816, "uuid": "ebf73a9d-3d3e-41e0-8678-72a1d3c1759b", "comment": "Malware payload (Tofsee)", "value": "f3c0ba5533f668fe44424ac64ea394ee68f2a684525e29237421e4ca27ef94fc", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "Tofsee", "colour": "#baa077", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025816, "uuid": "8e25966a-e100-465f-9fd7-94dda05304f7", "value": "T1FC44E70A61F0BD52EEA607355F79A3D86A6FFC525E36D35D2100BA3F1A732A0F5163", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025816, "uuid": "e050cc42-8a5f-4018-a516-98c17eaa9e36", "value": "889511a72a7bb798cba88774c4aea917", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025816, "uuid": "2c865fa6-2669-4f73-a63b-641d35eff283", "value": "3072:CxGnLR45TJJysRwZDpcJR76dokkaEaRUNeweA3mW54lssAxaxOQwrHWlDYCHSlYy:yGnLR49Es6SgHk6hFB6Ael", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727025816, "uuid": "c988d8ad-ca77-4b43-bcab-3657f73942a0", "value": 254976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025816, "uuid": "1ad0fbad-a683-4d7a-a368-80491bd2aa0e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d7920dd8-6c3a-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727025966, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025966, "uuid": "1509a44c-9d9c-42a7-b916-d913f3f20440", "comment": "Malware payload", "value": "e71c1a5ec391e53bde0d8e9f6d09841d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025966, "uuid": "365fb5fc-82a0-4c6a-b765-80a9d77581d8", "comment": "Malware payload", "value": "e26ec53db69ea3e7e3fdcce0a174c36ec3631de89937a8f299330ae59fee357a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025966, "uuid": "b07a563d-764e-4ad4-ba79-9d8360e110e9", "value": "T12893B709BF610FB7D85BDC3706A91B05248C695B22B47F3AB534D528B64B24F26E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025966, "uuid": "5f1bd63c-b9f3-4ef7-9792-70b3855dc8e2", "value": "1536:IIdgIHlIodXYtFrWbM/eNLNnStqZIzAFS4ZZ1hV6I5GPC8:IIdgIHlIo+OLNStqZPF7ZLI68", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727025966, "uuid": "969b895b-6712-48ca-b1c6-94d86e505704", "value": 97100, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025966, "uuid": "dbd9e793-57c3-4e9d-b9ce-45a069ae85e5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25a226f7-7819-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727025966, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025966, "uuid": "9783eeb8-06a2-4a53-b142-536243f70611", "comment": "Malware payload", "value": "e65e9df813eac9c3836c400fcf3076da", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fuckjewishpeople", "colour": "#A2A3E2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025966, "uuid": "1297eaae-a88c-4f47-8bdf-12b92a64f1d8", "comment": "Malware payload", "value": "88e3276889ca5130eb658ec3927d7b92577618168c716dc47b23cdf7b9f7d3d3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fuckjewishpeople", "colour": "#A2A3E2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025966, "uuid": "a48e3a3e-7ccc-4a79-9991-285a3427f983", "value": "T12AE34B09F6408B53C0D32776B68F534537239BA5A3DB33069928AFF43FC27A94E229", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025966, "uuid": "c5b442d4-4b5e-4d2e-9d83-13a76969f337", "value": "3072:tdntU2haO5H1XacBoGmh9H5Y5hDiGRvEM/9f9T637m5wTsL/Qpyn:ntVhaO5H1qEc9HC5hDiGRcM/9l+7m5wS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727025966, "uuid": "30de9079-3730-4716-8ea3-f1c407e9e0d5", "value": 156296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025966, "uuid": "fa38303b-7969-4171-b737-654fe899c8ef", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025966, "uuid": "caf03229-7721-449c-be2d-c09846ce96ad", "value": "t14511eb13a0b98a282bf34824adbc47f015502a23a782be71bf0ec5c49427002b875d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "844d6fc1-7608-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727025967, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025967, "uuid": "c3ff3373-2b92-415e-bfc8-68d867f09d0c", "comment": "Malware payload", "value": "15f6a606ab74b66e1f7e4a01b4a6b2d7", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025967, "uuid": "72d4d603-327b-4694-a7f0-0ff0194c459b", "comment": "Malware payload", "value": "81c775f9540a66fded643fe4ec53dbbf35742bd3b069d95d689da313fc9b80a9", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025967, "uuid": "1dfc6cd7-f4de-4d3f-a78a-edb855d15e1a", "value": "T10FC33A0269528A13C1C617B9BAAF415D3722AB78C3DB3315D9147FB42F827DE0E3B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025967, "uuid": "d0474d4d-675c-4b9e-a1f0-08f7b6478c21", "value": "3072:Ymv6Z16i0qNNCXVak5C3fPzfDtudHm0WPZQk:9v6ZeECFa1jfMdHYPZT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727025967, "uuid": "4657dfa8-6258-45eb-91e3-efd3d140caa0", "value": 128210, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025967, "uuid": "32e38064-16fe-4208-9b39-c2ed802586c9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025967, "uuid": "6f25d43c-e821-400c-b04a-13b5472adff5", "value": "t12831fb736b75462a6a62d964d8fc97b2111986132345fe73df28c4cc241a01fa52bc", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e408d341-7907-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727026026, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727026026, "uuid": "58e12b9c-610d-4828-a845-37aa8159168c", "comment": "Malware payload", "value": "e7d21962f4cb8912ee96bde64f92f250", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727026026, "uuid": "2d8bdf90-573f-47c8-a637-9a139fe4ad64", "comment": "Malware payload", "value": "1732f4279684c77ccf2b308d7ef22e295f4f0c91d333084538c4e101624a0933", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727026026, "uuid": "1f2ea259-6a3e-4698-9460-fbfa879888b2", "value": "T115D2E1CAA0F6C59FCAA6E9B36A5FF4C68020645050E9779BB24CDC828BF22B0571C4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727026026, "uuid": "106200c3-8409-4221-ad76-f9e12ddd2209", "value": "768:6g81ORH/TatZrXfc1lOzp3mvn7qTMIN+989G:SUlLMfQktWT8My08I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727026026, "uuid": "c7cf6dc2-a28c-4e05-beb1-84fa9a3a53cb", "value": 29720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727026026, "uuid": "a84dadbb-c6ee-4708-988f-3809b5fde07d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727026026, "uuid": "f61a7697-2119-4b24-a05a-15d3d303b343", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be3c9a8c-7908-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727026393, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727026393, "uuid": "1ca02831-e9ae-4944-9fa1-60e775571d99", "comment": "Malware payload", "value": "ebce4ed205e3f2c7a4b5d5d54d9a9050", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727026393, "uuid": "e8301f3e-a8aa-40b1-b518-4f1f9b377a2c", "comment": "Malware payload", "value": "44dede16cb1f10d58d91215c8779c1d11e1898423a1c62ac5f73147d90144cfc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727026393, "uuid": "c06439d5-8f43-4d8a-a5b4-cdd76aaef287", "value": "T1A2D2E02AF605CD6AFA087533113E42EB0A09DD50C39D2303D6C68B518AB776E3376C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727026393, "uuid": "f3538b4f-d2a6-401c-aecf-7d9693588c31", "value": "768:VrsctyqMtB8eaJSnvy9fTtOjs8UlepEq2i2+989D:VrHt5MJaQvy9fkjs8TqXi208l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727026393, "uuid": "9527e52d-41a0-49b1-8053-f6b27d525f0c", "value": 28308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727026393, "uuid": "9ae9a3f1-a3be-4195-a653-29a0d904f21a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727026393, "uuid": "f97327dd-0e1c-4abb-8d45-ec95e6d7e0d3", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89688e70-7906-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727026553, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727026553, "uuid": "fa1ab2ce-d5b6-4cac-a51f-ad543b648a5c", "comment": "Malware payload", "value": "fe6f6ddbc5c6e0682cf3acdafcac36a3", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727026553, "uuid": "a69c7d9d-2b01-4f65-bbfe-1ac81123edac", "comment": "Malware payload", "value": "fd835219d9cfd7d377b5444034c77cd37d349e6124a4f0c5f9bdba7d39857532", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727026553, "uuid": "c7378516-4cf1-494b-9550-d9a40875e081", "value": "T17A8533C60AA21659C4364D33DA532520AFF9C3A7B44C425A3BDC6FB21E136E60BDD7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727026553, "uuid": "d85ff3cb-9f91-4da2-9d30-b598543c115f", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727026553, "uuid": "7c311a03-7941-4548-b91b-b8aa244149f3", "value": "49152:fEOn/G+13j7NWRWxt85Ct8vubMLO3JnJa020S4:fEwnlARK3kIYIJJa0T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727026553, "uuid": "081a9cd8-127b-4ab6-bf0d-92576f005091", "value": 1780224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727026553, "uuid": "b43b8895-99f2-4cf0-945b-cac962f26f86", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f349cbff-7909-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727026911, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727026911, "uuid": "26d098a0-7e0a-4fc7-a9fe-3b56fa5fca73", "comment": "Malware payload", "value": "7c804ebe98645e282e779facf5c3dbd5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727026911, "uuid": "880497a2-b986-439e-9776-8214ed43f9a4", "comment": "Malware payload", "value": "5b34e9e59d2c5c707dafa33411c058ebd103bf3d6098d1bd7dc7a7fc4cf8acf2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727026911, "uuid": "7626ce40-5cdb-4008-aa92-5110bee2e764", "value": "T1F8330256A7A48271D420247BC96A0A0A5B4D09B6D9E97673387B0B74F200CBCD8FF7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727026911, "uuid": "8700d568-f2f2-41af-814d-ac64a6293e99", "value": "768:e/M9a0ddQoA8gml0bGUfgZXtqNRom0rVN/mT+x2ztKFQBJqswsq3UirYWojIfB0k:CyUfFk0H1RohVo+x2nxx8ftt6pubr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727026911, "uuid": "630d4b83-716a-4af1-ad61-418d615a82bf", "value": 52716, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727026911, "uuid": "cf9adde0-cd84-41a0-b96a-185d5769bb3f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727026911, "uuid": "f1339472-3ea8-487d-aee8-090ab86fceb6", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2f79eea5-790b-11ef-afe5-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1727027441, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727027441, "uuid": "00df36ef-1507-4d04-b8d0-bd01c434564e", "comment": "Malware payload (Amadey)", "value": "211e2a18a305834618abddd71045360c", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727027441, "uuid": "2385afd1-ff89-42f2-88c9-d1d5bb7012ae", "comment": "Malware payload (Amadey)", "value": "7efca2633006752b9b024297c43a41310985b59f258dd4b16a7e3084803ce2f7", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727027441, "uuid": "a17cb95a-3786-4b77-be81-6d00db660a53", "value": "T1C79533934CAFDBBCD48961F4C02738D9C51536B638CF85B6B78AF6918C4F222B2065", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727027441, "uuid": "3badab96-2fdd-4e63-aef4-945739c33ff4", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727027441, "uuid": "5b7f0cf9-b188-4d0e-9320-7dc2adbe1b26", "value": "49152:z1xHd56Q2gmMoZaB1lWlE47+Up1pglH70KrxDKy:3HGQ28oWlWeypglHLrxD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727027441, "uuid": "fc627e1a-5ae8-4df8-9008-98ade19c8131", "value": 1893888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727027441, "uuid": "007b4b18-0ba3-430a-bc3f-7dab433ed253", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "22622a7a-790c-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727027849, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727027849, "uuid": "b05ef4da-306f-46d4-ab24-6ff0a826afd1", "comment": "Malware payload", "value": "a7c4866ef568e01661a4a014c8c31d19", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727027849, "uuid": "3dcf743a-832f-4b51-a0e5-7290b3924d9c", "comment": "Malware payload", "value": "c91d42690be125f487db4e6a0c509d02c73fd376eadd843cb3b39fa4c5fd00ad", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727027849, "uuid": "525043ed-aac4-457e-9f64-b83507c1263a", "value": "T163E2E17A10C586B0D3F025B09E31805F61C62DF6D1E17581769A93E938EC36A77F88", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727027849, "uuid": "9f1b2dc5-ca04-4b06-b8db-3ab91a3761a2", "value": "768:1Sf2h/t5J8O0lgI9Mrj9Klpi0poqSTZq3Uirjw:1Syh0lgI9Mrj9Klpi0pox", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727027849, "uuid": "66b76211-a7c3-4da1-b602-5cf178b2fb3c", "value": 33216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727027849, "uuid": "e2a13d99-c4cb-4ed4-95b4-981bc4483379", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727027849, "uuid": "1ddb170a-f6d8-4f63-9ef2-93f3cda3c34a", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e2f8680-790c-11ef-afe5-82aee05be84a", "comment": "Malware payload (UACModuleSmokeLoader)", "timestamp": 1727027869, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727027869, "uuid": "deea6ecd-8306-4bab-b0fe-0f11ffbf29cb", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "61b74b16675c2070a039cbac919bb8a4", "object_relation": "md5", "Tag": [ { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727027869, "uuid": "c707a026-512e-4175-b45d-90fabd0a3805", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "3c431746e1e3e1e6a08adba5a840ef60ff7dee2ec8660d7a9abb3292527e8006", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727027869, "uuid": "d712707e-2d01-491a-9e16-7461bdf13a8b", "value": "T15EC4BE0A65F0BC12EEA647355F3993E8AAEEBC565F35936D31403A1F1A733A1F5023", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727027869, "uuid": "c9d7a2b7-0e45-42b1-b379-917684358694", "value": "889511a72a7bb798cba88774c4aea917", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727027869, "uuid": "fc6db21c-c889-49f0-93bc-7a443cd98416", "value": "12288:Eu2vPKv2grfWdbWpmbHIhalosRjIcIfDpFO/XV4:JAPKu51WpcHSa4pfFQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727027869, "uuid": "fb5b6464-a8b8-4288-9722-b62feeefdc1f", "value": 594432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727027869, "uuid": "efce4159-a75f-4f46-948c-a34459416fe8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "455b2f9e-790c-11ef-afe5-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1727027908, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727027908, "uuid": "02af0f0f-993e-4d06-aca7-a30a1c56c953", "comment": "Malware payload (Amadey)", "value": "cd6a0410ecd498be450d9bc6a93d1bb2", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727027908, "uuid": "95dc4b3d-b458-4973-a1fc-802a374d6979", "comment": "Malware payload (Amadey)", "value": "4d155cbb949bb003af499e7044780760088466a4f1b222579529b938f4bf3617", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727027908, "uuid": "eadea8d7-fbe5-48b6-af78-7bd54005dd3d", "value": "T10F9533155C683A05C174B9F5475BF37C9338B6EA847AC0B0FA8D27A92C7328F99CB5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727027908, "uuid": "1aaf4855-7744-4eb6-b418-0169d92406f6", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727027908, "uuid": "9a50b223-b730-4d0c-8583-58827c54d79e", "value": "49152:kvi+qbLexVr6YEwvI2NiGK3wl1btKRqudNBVf:wXxVr6Y0If1bwRbdNBVf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727027908, "uuid": "5e74332a-4ce0-4f6d-8745-52d8db1d5de6", "value": 1911296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727027908, "uuid": "a9a248e5-ba14-4b5c-96b8-18d46ebb8d11", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78008069-790c-11ef-afe5-82aee05be84a", "comment": "Malware payload (Smoke Loader)", "timestamp": 1727027993, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727027993, "uuid": "81a54cae-a665-4df1-906a-0232788494f8", "comment": "Malware payload (Smoke Loader)", "value": "b4196636f43688052cf29f1a4343599c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727027993, "uuid": "8f5b18b0-c659-40b1-8053-35cf8ee4f5cd", "comment": "Malware payload (Smoke Loader)", "value": "8f195ff7644ce8cb91a8fa466f6c53f49a482da3a1abef092d987d7fcada4f48", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727027993, "uuid": "1400dbaf-f23c-4004-894f-4b3590c69ae1", "value": "T11A44D41A65F0FC52EEA607355F39E3D866AFBC525E75836E21443A1F5A733A0F9023", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727027993, "uuid": "10385155-4030-429b-812d-2324a19c3aac", "value": "889511a72a7bb798cba88774c4aea917", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727027993, "uuid": "481c9d31-7464-4831-bd77-8b1c8a0b064f", "value": "3072:/+nLRo5jJJyOA3ykqt6g4jSrjVnjMvW5flssAxaxtutILmUf7J:2nLRoNEvyL42rjVnQ8sel", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727027993, "uuid": "6394cda7-d97c-4854-9bf1-ac808f876beb", "value": 256512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727027993, "uuid": "b6316288-653b-490d-bd38-1b110247bcc8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "acbcb2fb-790c-11ef-afe5-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1727028081, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028081, "uuid": "5e21b9d0-65b3-48fe-84fd-505bc8cd7385", "comment": "Malware payload (Socks5Systemz)", "value": "1ba0700f406746f1e6f577a02a1f0f96", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028081, "uuid": "b6a46b18-6048-44b6-b81d-8b5d5f9b1479", "comment": "Malware payload (Socks5Systemz)", "value": "ff01b237bb75b36ae06d0d0748f814fc2976bc9380ded1ee916f62f54b76213a", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028081, "uuid": "cc920625-478f-4941-96b7-cb755f89080c", "value": "T155F53347EE3A2A7BE062533C4D7590EA97A77B300DB15569A04D8A3E7F33B0DD41B6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028081, "uuid": "f2a1c16e-bf93-42b1-9663-4c78fd9e8d4f", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028081, "uuid": "1f295da6-815c-4881-b046-583bcffd1240", "value": "49152:C9EiZsfMtPxc55s599Zp8EFRXZ6PxINKQE2XU/HUft0qdFCr6HYIjZPARGzbg:MTsfMJ+c599MEFR0sKQE2XUEtnFK6Hbe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727028081, "uuid": "6716aedc-bc91-4cf4-84b3-35c8e1037bf0", "value": 3452942, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028081, "uuid": "ea1bbaca-2868-429c-9a6b-9636b680610b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6f17415-790c-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727028125, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028125, "uuid": "65252b33-9a3d-42c1-ab78-4b71ebb2b38b", "comment": "Malware payload", "value": "e4342e3935e4379b6025c5aa602e5243", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028125, "uuid": "4d8119b5-2c72-47bb-b72d-65876d75e3f5", "comment": "Malware payload", "value": "75bd5a9d3449436f86b6c1253c35673b70de8932c7e1dd675d5f1a0f77ff320d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028125, "uuid": "416d1582-9b1f-4075-9fc5-e4783767e867", "value": "T1C45171C611D7CB746DFA8F9633E708D8B1F1D0A534DAEF0490EA35A8A84CE54A1D0B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028125, "uuid": "1b399bb0-c4b3-4b56-9451-b763e3168a3d", "value": "24:vpSVeSVl9pS7S0S9pS3CS3F9pSUST9pSZSgY9pSZCSZD9pSTST9pSddSdUG9pSCP:vIrl9B9qVF9u9X9O9J9SG9A9Y9v9z98K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727028125, "uuid": "a3e5824a-2d77-497d-808d-59784b9b9c8f", "value": 2542, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028125, "uuid": "f553855e-518a-47c0-a283-d657d12063cb", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6f46c4b-790c-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727028125, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028125, "uuid": "a06638c9-8128-4c2a-a94f-651f02498471", "comment": "Malware payload", "value": "fb618329cc30bbe557d588dfb268b919", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028125, "uuid": "3c017b02-63d8-460f-b508-ed908d6c99ce", "comment": "Malware payload", "value": "d71101bffee3469755db63dfb6c6bae1cb2e97a25f7336f9e5c75f487cb3a7db", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028125, "uuid": "e7b52413-8b14-4826-9947-cd070ee836d9", "value": "T15D5166CA01C7CB745DFA9A9533E608D871F1D0A534D6EF0998EA34BC688CE54A1D1B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028125, "uuid": "254164c3-b1ac-4112-b99a-45d0b5049c94", "value": "24:vpSVeSVWpS7S0NpS3CS32pSUSYpSZSgnpSZCSZopSTSYpSddSdUppSCSGpS6SMt6:vIrW6qV2RkxCSpvn84Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727028125, "uuid": "534ec561-8590-4aa6-a17f-89492aa10fb3", "value": 2464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028125, "uuid": "f461414f-b131-49cf-a036-d116fe326041", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6f51bd5-790c-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727028125, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028125, "uuid": "4fa2572e-1fbd-4ec6-8b68-768622e6e167", "comment": "Malware payload", "value": "df9d36b5977ab239408d11c6e3453c7b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028125, "uuid": "4da81f7c-80a3-449a-8e06-27cf65f618af", "comment": "Malware payload", "value": "9085afd2289868b0662be095eb5746baa756c7774042867e42381cc3983c0d37", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028125, "uuid": "af44e0d9-cf49-43bf-9a54-1377a4cc5ff1", "value": "T1CD515FC601C7CB756EFA8A9633E708D871F1D0A534D6EF5490EA24AC284CF94B2D4B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028125, "uuid": "016c750a-4396-4d51-9c02-e1e75d5007e4", "value": "24:vpSVeSV6pS7S0ppS3CS3apSUSMpSZSgDpSZCSZcpSTSMpSddSdU9pSCSqpS6SMJ+:vIr6GqVa1AVeS9bDIss", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727028125, "uuid": "b0de3868-5e14-452f-b91c-bf7bda666ee6", "value": 2516, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028125, "uuid": "52aff74a-0e97-4859-9686-f8cc1fb39026", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6f7e6f1-790c-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727028125, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028125, "uuid": "2de0c5c1-326d-48a3-ab13-7746af14f589", "comment": "Malware payload", "value": "240623ef2aea23906546901986f8a1a7", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028125, "uuid": "7568f057-7099-4be8-beb0-ef064a256a09", "comment": "Malware payload", "value": "ad71cf5ccbd0abcd348e9a4e4b7bdca7faccb9dba604a8842178f231c40b50dc", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028125, "uuid": "6f81854b-4ed5-4932-afb6-44a2a1709698", "value": "T1E4515BC611C7CB746DFA9E9633FB08D8B1F1D0A634D6EF0490EA35A8684CE54A1D1B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028125, "uuid": "5536078f-ee41-4120-9825-c7698c6d864b", "value": "24:vpSVeSVuPpS7S0xPpS3CS3OPpSUScPpSZSgfPpSZCSZMPpSTScPpSddSdUVPpSCo:vIruPqPqVOP9PAPdPSPSVPnPfPYP8PzU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727028125, "uuid": "15eacc67-9ab3-443e-bace-0bbc09767773", "value": 2477, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028125, "uuid": "3b50fe43-0cd6-40cc-830e-faf50a285497", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6fb3766-790c-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727028125, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028125, "uuid": "50de86ec-b966-4d13-9624-2d02424fa3c6", "comment": "Malware payload", "value": "684e43be9441cd385ee3a10e64c39e00", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028125, "uuid": "031f5750-4660-4129-b0bd-96682c0ade93", "comment": "Malware payload", "value": "8612a0a2d010cfcbfc97b21b42f4e87b74a59a0970a721fb04c5599292e2f5f5", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028125, "uuid": "a3f5d065-8e0f-44de-af99-fa19dd6549ef", "value": "T1FF517CC601C7CB746DFA9A9633EA08D8B1F1D1A534D6EF5490EA34EC384CE54A1D0B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028125, "uuid": "e5dd93b5-f3c7-41b8-8597-3e820bc9ac17", "value": "24:vpSVeSV8pS7S0fpS3CS3cpSUSGpSZSghpSZCSZWpSTSGpSddSdUTpSCSspS6SM/w:vIr8oqVcba7QSTJhymC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727028125, "uuid": "4ee70388-a763-473f-974f-35f6d278b700", "value": 2490, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028125, "uuid": "0f55dfe8-689c-4524-b99e-49ed03146b09", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6ff3146-790c-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727028125, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028125, "uuid": "c7bf1292-5d6f-41bc-b232-62175dcba30a", "comment": "Malware payload", "value": "1280c74088464e5234ff2e33bb6d1965", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028125, "uuid": "248918c0-ce66-403e-beda-64288e81b987", "comment": "Malware payload", "value": "434bfd7fd9f11ee77f3d71d969fde6b68a7184f3aa7e3c7c1d46202a7077e87e", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028125, "uuid": "9d179da5-2443-4bc7-9085-293b119d0b53", "value": "T1015160C601C7DB746DFA8A9633E608D871F1D0A634D6EF1590EE35AC284CF54A2D0B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028125, "uuid": "71793720-5d73-4e49-9951-1e5eb4145ac3", "value": "24:vpSVeSVvBpS7S0OBpS3CS3PBpSUSFBpSZSgkBpSZCSZ1BpSTSFBpSddSdUqBpSC5:vIrZlqV5OTu9S24AbfH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727028125, "uuid": "f6f05c49-448b-47be-84e4-9ff66c40652a", "value": 2490, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028125, "uuid": "95f60412-f241-431f-80cc-f1876b424fa9", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c70ea53e-790c-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727028125, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028125, "uuid": "0f628d56-f601-4b1e-b864-909060a8e6a1", "comment": "Malware payload", "value": "ef8667ef7c1e91eeb6ada1de24f686b8", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028125, "uuid": "ba292e20-c54a-4191-9876-59da77967898", "comment": "Malware payload", "value": "5819046ed18e64ce79c1addea43fb5bfa471cb15adb853f21ac1f9ad8f6f4fb6", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028125, "uuid": "6c66c3cd-5f3b-4ea1-b759-36d3f0449c04", "value": "T18D5161C611C7CB756DFA8A9633F608D871F1D0A634D6EF0590EA34B8288CE54B1D0B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028125, "uuid": "f338f0f2-0edc-4d24-b806-97a8782a9c22", "value": "24:vpSVeSVypS7S0LpS3CS3SpSUSEpSZSgdpSZCSZ0pSTSEpSddSdUPpSCSCpS6SMrC:vIry+qVS3IXGSPldgkO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727028125, "uuid": "7a5422e9-4965-44a6-a0de-5bacd50464f2", "value": 2529, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028125, "uuid": "d493e079-a08d-4dda-9ff3-4f4327964356", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c717b919-790c-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727028125, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028125, "uuid": "e6245433-3798-4bc1-a335-6c31b5af2535", "comment": "Malware payload", "value": "77c2413801f7ae146294f49b75ee484a", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028125, "uuid": "bae85f96-0c46-4fdb-a0fa-f377144caf00", "comment": "Malware payload", "value": "05459d08cf4569fcd5fc51233098331f95c77341280168d51892fc4b284d8b43", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028125, "uuid": "e48b5c36-d0e7-4694-991e-4e2db86f35a5", "value": "T1D15175C601D7CB755EFA8AA533F748D8B1F1D0A674D6EF0490E934A8284CE54B1E0B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028125, "uuid": "5b2ccdd8-4e9c-4edb-9554-ee76e31ba486", "value": "24:vpSVeSVCpS7S07pS3CS3ipSUScpSZSg1pSZCSZMpSTScpSddSdUHpSCSSpS6SMba:vIrCmqViPIvOSHd1A8u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727028125, "uuid": "03207aeb-d1c1-4eed-b7cf-ebec4ce89bd7", "value": 2529, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028125, "uuid": "9af089d7-7ad8-4f9e-a70b-07f1e5d9e7e3", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7270da2-790c-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727028125, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028125, "uuid": "1a9aebe5-7ec4-4842-b8e6-fe2d68d943a5", "comment": "Malware payload", "value": "83f829bfafdbebdda7fb4862a54c33ed", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028125, "uuid": "2c446a50-af48-4d2c-8efb-606317d32928", "comment": "Malware payload", "value": "e3db4b2133f78e733f0ee4119b7b161fca4db3af7cf4b1a277237ac21bb2232c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028125, "uuid": "8de3f574-b1fe-4720-8a16-b10bd17d8000", "value": "T14B519CC611C7CBB46DFA8E9673EA08D8B1F1D0A534C6EF4080EA35AD284CE54A1D1B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028125, "uuid": "decdb46c-80a2-4976-ad1e-eadf6dcbe76a", "value": "24:vpSVeSVfpS7S0qpS3CS3/pSUS1pSZSgApSZCSZFpSTS1pSddSdU+pSCSPpS6SMKf:vIrfLqV/GZmzS+oARV3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727028125, "uuid": "fefb2c7d-a7a1-4db4-bc3c-fefdcdf7feb1", "value": 2503, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028125, "uuid": "34d1ee4a-53e0-4676-a947-6a13c1b27183", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c729dc4f-790c-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727028125, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028125, "uuid": "7b31dbf4-89fc-410c-a085-bb9a07393f76", "comment": "Malware payload", "value": "9240fc92c9471dd0d7f32c8a3f12bfea", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028125, "uuid": "18a5eecd-7315-4403-bc78-956d431785c1", "comment": "Malware payload", "value": "c69f5bd56fd6c199233759b5d805a924a6cb6095f9798301ea18cf3ae16c7d82", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028125, "uuid": "a2cafc33-a7cd-469f-88aa-6a92250518ed", "value": "T1DE5160C611C7CB746DFA8AA673E708D871F1D0A634D6EF0490EA74BC684CE58A1D0B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028125, "uuid": "ffaa7351-949b-4fe8-a031-eb3b55b3832e", "value": "24:vpSVeSVBpS7S0ApS3CS3hpSUSTpSZSgKpSZCSZDpSTSTpSddSdUkpSCSRpS6SMgF:vIrBNqVhsnMVSkyKfzh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727028125, "uuid": "5b8c3b03-f648-4074-95e1-7bb0841239a8", "value": 2529, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028125, "uuid": "2bf868f1-e5d8-40ad-8095-2b188b6b8f60", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7b0e17a-790c-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727028126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028126, "uuid": "9f6f48e6-cc28-4634-96b9-9e7ca9ae07e8", "comment": "Malware payload", "value": "2d122bd089e06376b0e290604997ed69", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028126, "uuid": "f955eacc-351e-44f7-9ef6-32897a9166c6", "comment": "Malware payload", "value": "0fc7cc351de12d2fc2544604733b05a033c41fbe2d5deaba5cd453315497cfb0", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028126, "uuid": "a6dbc0c5-1cbd-440b-9f27-acacfcea367a", "value": "T1945163C601C7CB746DFA9B9633E608D871F1D0A534D6EF8490EE34AC684CE58A1D1B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028126, "uuid": "0e3c3f1d-66ee-46ae-bd99-cbbda5bae1c7", "value": "24:vpSVeSV0pS7S05pS3CS3UpSUSWpSZSgTpSZCSZGpSTSWpSddSdUFpSCSEpS6SMZE:vIr04qVUtCNgSFbT62k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727028126, "uuid": "6a7b46d9-b12b-46e5-9913-1336112b7ca8", "value": 2477, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028126, "uuid": "56eb1106-1a3e-44f2-9047-912ebfcf3ccb", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec59b4ca-790c-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1727028188, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028188, "uuid": "375a0fed-89af-4d14-a2d8-21df41c0b110", "comment": "Malware payload (Mirai)", "value": "ff316ef5a9639249ca05ba1f4d534b60", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028188, "uuid": "ed4dd78e-b416-4fd8-98c3-82622176f8e8", "comment": "Malware payload (Mirai)", "value": "c3c628fc63347e7cfa34d5a6ccb71f17151bb6421f95730d9e711ae4a1448afb", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028188, "uuid": "bc7af3ea-d8a2-42dc-ad52-2a4bdff11194", "value": "T1C693C609BF610FB7D85BDC3706A91B05248C695B22B47F3AB534D528B64B24F26E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028188, "uuid": "83f6724b-d9ce-4f9a-a7af-270dfb31ff53", "value": "1536:IIdgIHlIodXYt6NeLM/eNLNnCt2ZIzAFy4JZ1BV6I5W/C4:IIdgIHlIo10LNCt2ZPFbJrYK4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727028188, "uuid": "6fedb46f-9c9e-41ac-a949-2fe183579a91", "value": 97100, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028188, "uuid": "f20b8ae2-dda4-4c99-9fa8-14a20a3e539a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec620437-790c-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727028188, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028188, "uuid": "d7aa5511-bfc0-4c2d-b618-3ccb41ba798e", "comment": "Malware payload", "value": "f33f76b30cffb71e3a29b43ba274dec2", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028188, "uuid": "ee3561ec-7d85-46ee-b49e-c0d49da082a5", "comment": "Malware payload", "value": "7b532353c0c70b46b212ec6364e5879648e21d64ad226062e59bf0ffa1f4836c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028188, "uuid": "c7cbe294-18e7-4502-80a1-ae5b8247cfa4", "value": "T1BD41AEC601D3CB74ADFA8E5673EA08D8B1F0C0A534D6EF0590DE38AC684CF64A190B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028188, "uuid": "db8b945b-a173-4562-b45e-784bd2202efa", "value": "24:vpSVeSV7spS7S0MpS3CS3AJpSUSGpSZSg/aLpSZCSZgkspSTSZpSddSdU6pSCSie:vIrwjqVi1qaL9JLS6X13Re", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727028188, "uuid": "509bd16e-073e-4e2f-a92b-875641aa6a1b", "value": 2432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028188, "uuid": "0e418905-6eeb-4319-9fc2-c2b639b8d919", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec6a0420-790c-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727028188, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028188, "uuid": "a36aff55-fe47-41ea-8474-f4760554c3e0", "comment": "Malware payload", "value": "1779631767f7ffe4a4e040585e52bb57", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028188, "uuid": "d4dab132-0357-4d6c-8bf2-13e940de961c", "comment": "Malware payload", "value": "f3ec557476c9c8b103e84ddabbfece52d6ddf6dd72fe1552c0fd1faeb8e513c6", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028188, "uuid": "9f1976a9-9441-49be-b001-1e6a38515c7c", "value": "T1AA330A46B8816A2BC6E0137AB6AE558E332073E4D2CF761BCD242F60379551F1DA7F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028188, "uuid": "bcb001ff-d9fa-402a-bc07-078654b95f72", "value": "768:ST7eaupgBUfBjc4ZNu9C4tP/PjQr+/UIYy8HaNkwr2Vw6AafvoGRS32qN/Ci2ZvB:XpFZI4ZL4tPxYyPkw6/fC3l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727028188, "uuid": "43af3dc6-58a0-4f5f-ba0e-bd9bae81d997", "value": 50552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028188, "uuid": "750df931-da25-401e-8953-824a580a651b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028188, "uuid": "0f094d3a-3a9c-468d-b680-12568b078b02", "value": "t135e06f00ad6a8a1da8eb9a70dccc0bb49401262350aa4b20cf00d7e4883f018e30ce", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec793498-790c-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1727028188, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028188, "uuid": "e8f83297-c978-44a2-8aaa-5f6c0b358b51", "comment": "Malware payload (Mirai)", "value": "62d832dd088aa268124e7be3fd71fdb6", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028188, "uuid": "d1a3ea51-c67a-4647-94e2-9a3297644fa1", "comment": "Malware payload (Mirai)", "value": "3ea9f303b92164ee30e2fdc13a3c02e4257446045b4b72148fd83c61486325ae", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028188, "uuid": "fbd87d25-2011-4cb6-bc79-f7d61bd20da1", "value": "T15E732A9AF801CD3CF80BE2BA44574D09B930A3D556930B2B67A7FDA37C731B54916E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028188, "uuid": "0ea17510-55f5-47cf-95d4-fe24e3c79b7a", "value": "1536:j8gMmXnuI7krF67Hw48CNbKLUMqq/jTXulewjfd:jXXnuIikHwkYUlqrS7d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727028188, "uuid": "e6846b65-7a1c-480b-969c-826fd2aafee5", "value": 76392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028188, "uuid": "246b2a0a-9005-43bb-9bfb-0ca52654d90d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec7a76f2-790c-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1727028188, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028188, "uuid": "f8df5c7e-0970-4750-87fe-2caeeadba5ac", "comment": "Malware payload (Mirai)", "value": "d3d7cebb862354a4b0573c8c972d4433", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028188, "uuid": "ac230e87-69e1-4060-831f-6c3e0a477072", "comment": "Malware payload (Mirai)", "value": "0af7f25cf06c4122965f3fe115fcd62b3901752f989e51f0c48558f28ec8c0db", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028188, "uuid": "44a73d9a-bc6d-4219-8173-0f12f7b353ac", "value": "T134539E76E4266984C5860434B0B88E751FA3B1C0836B6EFB1ADDC6B56047EBCF449F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028188, "uuid": "e055a48a-be06-4eda-8367-9444214291e0", "value": "1536:qBS9N8y/AUC9s/mR/2my25XvdlLWdGKGNpPDyBICZruxc:qBAm8AUC9s/mR/2my25XVlCnGvyBIRxc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727028188, "uuid": "97911f37-9a58-4ba1-8530-b362c0157bfd", "value": 64308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028188, "uuid": "984ecb60-8a07-4ca2-b628-e524990ec055", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec7a9620-790c-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1727028188, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028188, "uuid": "ee856c3f-c233-4f8a-8cf1-fb3409e5fb0a", "comment": "Malware payload (Mirai)", "value": "cf6a4814bcffe14587c352fd38ba6c9a", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028188, "uuid": "701659bf-45ca-4838-b6df-62d2c41c0428", "comment": "Malware payload (Mirai)", "value": "aad921fd92741831d720cc5496d7a209488e3c997b4cbc90df1b1e7c51f09a1f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028188, "uuid": "40953e17-e9db-4773-8a9c-63c07ce9c4ce", "value": "T10C733B21B5361A17C4E4687A21F78B15B2F157DE26E8C61E3E720E9EFF306803543A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028188, "uuid": "aee189d8-5290-4816-8453-6d94a8a1f1b8", "value": "768:uYo9HchQsNzGBYYQT8tC4s+Kl/m+8PB2QceqsRO+75LUvELCD7LG1tjyXm5vhnIJ:uYi5sNzGBYoC4s+K1m4nG75LiHctj5rK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727028188, "uuid": "098ceae3-d92c-4260-b866-1ea1bcacc1b3", "value": 75136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028188, "uuid": "dc463279-6067-4ce1-b83b-f79ceea61e0a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec85997c-790c-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727028188, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028188, "uuid": "ab9533b9-baee-4a72-9e98-43141974cd46", "comment": "Malware payload", "value": "8b3375a49eb37200fe248b88825b9869", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028188, "uuid": "14964d87-6958-4aaa-b034-36ca3c2b723f", "comment": "Malware payload", "value": "52f474deec2b4013dac45e5985252272a51256dba5344327259bcd93efe34787", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028188, "uuid": "e8793aea-d84f-41b5-ab2d-b983ce49cd5c", "value": "T1E9733A45BC815A23C6E1127BFAAE01CD372523E8E3DE7217DE216F21379682F0D67A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028188, "uuid": "39d93de3-68df-4dc7-a6e5-9426630d2df1", "value": "1536:axUKKMs+nJ9C3krGFiDmrdSPmqdsvpWb9vHc:axxiFiDmZSPmpB8Hc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727028188, "uuid": "c9129e22-782a-44a7-b568-1b2932d2e941", "value": 75848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028188, "uuid": "e00e96db-e4b1-45ff-a180-f02c48e64e61", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028188, "uuid": "dfcefc6a-192e-4c63-866f-84486046cbac", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec8f7fb2-790c-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1727028188, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028188, "uuid": "ef6eb0dd-f69a-45ee-a055-60fbce029a72", "comment": "Malware payload (Mirai)", "value": "d9bf5707734d73d5830bb7d12efaf8f4", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028188, "uuid": "211a0e45-ab81-4f94-ac67-38dc3223b51f", "comment": "Malware payload (Mirai)", "value": "ab9538a61fb23447f47a3f426cc7dc348e347df1195473966ce8e5228fb97f37", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028188, "uuid": "e94a83fc-3a3f-4f50-964a-838660675df4", "value": "T1A3634B02B3180D03C5A359B0253F5BE097BEE9D132E0B689291F9B9A8A71E775185F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028188, "uuid": "1d988794-d26b-431e-9c9c-79b187a8968e", "value": "1536:mbxeCDlX+i4eRDBKrEb8dVYw3NplMGV6wR:ODlOoMddpKG8wR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727028188, "uuid": "89f284d0-1173-41bc-b8a7-939eb47d91da", "value": 71128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028188, "uuid": "5f509b01-07ac-4b1c-ae3e-4740a0171015", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed981caf-790c-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1727028190, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028190, "uuid": "a6fc1065-8557-4b57-b6fc-075099897c0b", "comment": "Malware payload (Mirai)", "value": "a86dd8afb8ea43569f6c7ee840ddee5f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028190, "uuid": "bfd992d8-2d58-4e21-b125-e5f1f1341fde", "comment": "Malware payload (Mirai)", "value": "43eb2b46858b8bc40bb4284d9909feb6913a205f3f1e94f1b9935756c88a2e39", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028190, "uuid": "396b8ee1-ba68-45d2-aa8d-9984856c8f05", "value": "T1D7832B56F8814E22C5D5127AFA6E018E332327F8E3DEB3129D206F24378696B0E77D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028190, "uuid": "48364712-d014-45b6-ae3b-c6e576077877", "value": "1536:jCnxOqQgNJkap6jxjgx17+b9w/lkPEaapLhzoI5iUo6Xf56ny5oYvh:UBTk0Ax01ib6yEaaDo6Xf56nyOwh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727028190, "uuid": "8a935c0b-a4c4-4c4c-b1f2-170c63d23bbb", "value": 84184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028190, "uuid": "8f315594-086a-4970-96b6-6a7fbc631ccf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028190, "uuid": "a0033735-53e4-4596-8197-c19cbf61d302", "value": "t10ae0c6bacd0813ccb2e043d57208a07862a0baf82ba104e2dc0da74f8262c00302a8", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee4d9564-790c-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1727028191, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028191, "uuid": "ee63b2c8-2031-4111-bb30-53fad4181be4", "comment": "Malware payload (Mirai)", "value": "6a5691f3f4bc78577d782b1b93119aef", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028191, "uuid": "bc454a4c-86de-4863-a278-5c57624fb66a", "comment": "Malware payload (Mirai)", "value": "68a0377c2c26b68e5e17d07a5fafe7ffb2668b679f30c5200b1c39e3d968515d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028191, "uuid": "5dde813a-5ea5-428b-9544-56ec377d93f2", "value": "T1C1E33C46F6414A13C4D6177AF6EF42453322A7A4E3DB73069924AFF43F8279E0E63A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028191, "uuid": "5254c6e8-9946-4b1e-8f2e-39347edf6d5f", "value": "3072:8mXlse9xVce0MagagEWrhDn7aFfRTWcLgsSO4PFM/9KJBA:8mXlsK0eUga7WrhDnGFE3sS7dM/98y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727028191, "uuid": "c2d91ba2-8436-48bb-8b08-50847399ef59", "value": 155840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028191, "uuid": "4663ade9-b33b-4841-a3b8-2d190e9cda83", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028191, "uuid": "5c3c8641-d6a0-4e0f-a66c-3ce5046d1310", "value": "t10c21ce32576162191aa2cd6499ee57b2152c97172388ef33df25c4cc540a09ee53bc", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee9c923e-790c-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727028192, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028192, "uuid": "ca62d318-02e9-4a65-8ab5-437cd5cac5eb", "comment": "Malware payload", "value": "969ea46f3ad974b6374b6f642c75cba2", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028192, "uuid": "d015e11e-1415-4a57-94ea-5f70dea6298c", "comment": "Malware payload", "value": "7fa7fe79cd64ed91c80fac8cb0d1ff63705e7698c479690884c859bbc0ec5ccf", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028192, "uuid": "7a5a8aa5-f625-4263-8320-2a4b64ab5c96", "value": "T162631907B941C0FDC15AC13847B7B63AD53274BE023DB2E66BD4FE276D46EA02A1D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028192, "uuid": "0d2dcbc5-cd5b-4955-8763-96f2129d751e", "value": "1536:sUbtXpVAY8mTUdKK9TNyBHao5ahB+b9/szBdjl1xKI5jASKJBW8:HtXpVAYDWKKbkHaoGB+b9/SdlKI5JKJD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727028192, "uuid": "2a522855-edd0-411d-8a9b-317bebc6caa3", "value": 69024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028192, "uuid": "a9175f41-ed5e-4848-86a6-304f9a6675d4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028192, "uuid": "b36431f6-1e3c-4c95-bd27-d934d535a4ad", "value": "t1d421366236651850d1f7eb7af302f6181d602c8004da35f1d6336af7db427810c7a4", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eea9755f-790c-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1727028192, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028192, "uuid": "7cede35a-4a89-4f60-9c8b-4fbb545dce8b", "comment": "Malware payload (Mirai)", "value": "f176ebaa00c3e042c27329754913806e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028192, "uuid": "5d05acb7-dc36-4c83-a01e-b089a5a5cc3e", "comment": "Malware payload (Mirai)", "value": "69727bd85cb12bdf0f97a58a82a6f01df3d24d2742a101037890ce0357ac3d01", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028192, "uuid": "c9af47cb-71ea-427f-8592-701f9bb36e15", "value": "T17F535AC4E583DCFAEC5605705133EB368B77F13B1268DA97C7A89923F852B02E5462", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028192, "uuid": "6f6ff92d-945b-4951-b5ad-737785afce9f", "value": "1536:1BGfyT5OGMMt4cesUTeFIv5TzHhSrB04wOIjOepn2N:1caT5OGMMtmaATzBS9RwHKanc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727028192, "uuid": "9b896c0b-ce5b-43bd-9544-3aaf76c6f4b9", "value": 62640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028192, "uuid": "ddef25d1-7f62-4dd9-b208-675b39ad2483", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028192, "uuid": "75f77c79-3654-489a-b677-672eb2d4505c", "value": "t16221c5ff0dbe18f8b7e4a540c32d5ed2192ada77692137b50623d8543393d828578c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eeb727a5-790c-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1727028192, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028192, "uuid": "0a964682-54d9-4deb-8563-df3d974a45a6", "comment": "Malware payload (Mirai)", "value": "6bdf211a3b71e63fae35a785a1e9136c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028192, "uuid": "32ae9eae-30e3-4114-8680-05ea4c91db1f", "comment": "Malware payload (Mirai)", "value": "630cf5f7affd60037007bc24e02d9c6831b7d7af7f65dc6771b4bcec705c5dfb", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028192, "uuid": "acbff49f-fb11-4085-b73d-201ca76c04af", "value": "T1AD93940E7E268F7DFBA9823447B78E22574833D637D0D585D19CE6002E6028E241FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028192, "uuid": "2272016c-0624-42c9-8f7f-e2e8bf240908", "value": "1536:mF4tsbv54o+3bPhXhWxZJstX5Ow5+fyecpeo6XsL1y:mF4tsr54o+rPhkxstX5b5+fyecIXsLw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727028192, "uuid": "03b704de-0e16-4837-9c92-937441752144", "value": 97100, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028192, "uuid": "9be8a53f-867f-4d78-903d-8e0373d2c5b1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028192, "uuid": "92486dff-89dd-4fea-8364-802eb02d161a", "value": "t17b112d088e3822e497711d992becff72e4a170cb4a165e3b8d10ed6e9e2dd424e00c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e705d5cb-790d-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727028608, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028608, "uuid": "17034049-2934-4200-811b-f74c70716d4a", "comment": "Malware payload", "value": "895cd4818ac971d3981c680d933278e6", "object_relation": "md5", "Tag": [ { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "KMSAuto", "colour": "#78A617", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028608, "uuid": "e7f61369-0a94-444f-9704-d1c7718f034a", "comment": "Malware payload", "value": "35cbf4368c9c13faeb7fbb5e64fc95c6b2b49d82b48871b82f2e21566ca3a3d1", "object_relation": "sha256", "Tag": [ { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "KMSAuto", "colour": "#78A617", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028608, "uuid": "bdebcbe9-9e59-4d51-ab27-2a919c11d1ca", "value": "T13E64232C220B115BEDE136669F03058E3CAF859A3D1E0BAE7E35654852BC15C4DB3A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028608, "uuid": "2786f28f-03e5-4fbe-87fa-0e4735ecc5df", "value": "6144:cDp3HPO3ymznEZwqnxm3yg72Nx1Rqw6bKSWwzSHMhvNcN2hejkJPYXuNL0Q:83HsOXnxm3vcxmw6b+wGmvhejk39", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727028608, "uuid": "80fb14a9-8215-4482-84b7-caf42ebee75f", "value": 321653, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028608, "uuid": "e686eaf4-cf46-4229-adce-7d6cc92c5b61", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec8f1239-790d-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727028618, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028618, "uuid": "6852af4e-295d-4dcc-bd7b-2270f38cb0b1", "comment": "Malware payload", "value": "7fe47bdb5330179681299ede0d3a8993", "object_relation": "md5", "Tag": [ { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "iso", "colour": "#f7044c", "exportable": true, "hide_tag": false }, { "name": "KMSAuto", "colour": "#78A617", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028618, "uuid": "2fd7a407-2a0b-44e5-9467-5e53b8b258ed", "comment": "Malware payload", "value": "940715cb76a42e6c0b5098953385b2ea4f9b78b0eb6ea51ade59264f1488aa9d", "object_relation": "sha256", "Tag": [ { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "iso", "colour": "#f7044c", "exportable": true, "hide_tag": false }, { "name": "KMSAuto", "colour": "#78A617", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028618, "uuid": "e74c41f5-5ab4-480a-ad0f-8dacfa40ba04", "value": "T1CA8623226FFD9320CF664132FA6567016E6B6C514164F84B3FC839796B33163066FA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028618, "uuid": "839e76a9-6905-45dc-9829-bd8876ba6b51", "value": "196608:ujUEPapEVlN2zVYhr2uDLyLrqA37pBa8P8:u9VlN2zehrlLy/lp0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727028618, "uuid": "ccdd909b-0c71-425f-a3cd-1223e79a0c48", "value": 8372224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028618, "uuid": "a777b53c-9faf-4d84-a51d-b3c755a69b4d", "value": "application/x-iso9660-image", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed391d82-790d-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727028619, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028619, "uuid": "5c7e2b57-78c7-4a90-8e35-e0bdc7ed5f25", "comment": "Malware payload", "value": "c1354b59133fa89c735c8fe7dda176cd", "object_relation": "md5", "Tag": [ { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "iso", "colour": "#f7044c", "exportable": true, "hide_tag": false }, { "name": "KMSAuto", "colour": "#78A617", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028619, "uuid": "4b745f0e-7a35-4a6c-a6f9-3c5f2a7efe68", "comment": "Malware payload", "value": "26b70863be06fbe828e662cd903c94eb71bf95d1be6b52a65cd64271877003fa", "object_relation": "sha256", "Tag": [ { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "iso", "colour": "#f7044c", "exportable": true, "hide_tag": false }, { "name": "KMSAuto", "colour": "#78A617", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028619, "uuid": "3fe28988-b733-4f09-88d3-8a825e16c72c", "value": "T1A8C6E060B3627037E482657244D2E9324A287D30771616675BCEDD9B3AF61CAEF2C3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028619, "uuid": "7d2ca0e0-18df-42dd-891b-ee700e2afa9d", "value": "196608:pEYP2AnkWOvyjWJHyL1gjhJL1gFE6c3ym53MwHqsKOWQv3yKwxQVCR:xP2AnkWOvyIHEgdJLy+3MwHqs/hvJwxh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727028619, "uuid": "aeeedcbf-0a8d-4367-a342-cdf65d01929b", "value": 11548672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028619, "uuid": "bb5ab33c-b859-47f9-a71b-eb1128502471", "value": "application/x-iso9660-image", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "edd8e608-790d-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727028620, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028620, "uuid": "bef67693-369c-4a30-a600-8a484842b20b", "comment": "Malware payload", "value": "3dfc0aa665eadbded7f7a2322105248f", "object_relation": "md5", "Tag": [ { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "iso", "colour": "#f7044c", "exportable": true, "hide_tag": false }, { "name": "KMSAuto", "colour": "#78A617", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028620, "uuid": "841572e3-0147-4b6a-b1b6-9bfd79ddaa49", "comment": "Malware payload", "value": "fe3a67d30f970f54e17afd764fe54c7d4216b04b748bbcdfb0d95259f993dbd6", "object_relation": "sha256", "Tag": [ { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "iso", "colour": "#f7044c", "exportable": true, "hide_tag": false }, { "name": "KMSAuto", "colour": "#78A617", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028620, "uuid": "d0a9e196-7d35-480c-9e60-fff65f66be68", "value": "T165B6E061F7623033D486657200A6E5325A287D30771A16775BCECC9B3AFA5C9EB2C3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028620, "uuid": "5f6ba3f2-04b9-469f-9003-5d8aaa3a2c4a", "value": "196608:8EYP2AnkWOvyjWJHyL1gjhJL1gFE6c3ym53MwHqsKOWQv3yKwxQV:yP2AnkWOvyIHEgdJLy+3MwHqs/hvJwxo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727028620, "uuid": "e1aa21f1-fca3-4ec1-a005-fdd0834c74f6", "value": 10827776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028620, "uuid": "7529f93b-8f86-4f35-ab8c-2ca9d9dadd40", "value": "application/x-iso9660-image", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ea9bd91-790e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727028675, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028675, "uuid": "886b44d5-1593-471d-9ac6-ab78ca04df56", "comment": "Malware payload", "value": "a1b07d9862b5d7befc80a024e5e438b8", "object_relation": "md5", "Tag": [ { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "KMSAuto", "colour": "#78A617", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028675, "uuid": "b1c01089-279c-420d-a1a6-0591cd4481cd", "comment": "Malware payload", "value": "5e57b7ddb04528ecf9fe4786d4db84bb327dc6cdf6c5f5b6a4474c5ee863d73f", "object_relation": "sha256", "Tag": [ { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "KMSAuto", "colour": "#78A617", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028675, "uuid": "4af808cb-25e1-4253-8877-d87cec2f0a54", "value": "T13776333875DDBA189F9512195A610FCA2CC54E46D2CE7986F31183FA1B3C1834AA7C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028675, "uuid": "c620e240-ee01-4bb8-a884-7bbd41c47a82", "value": "98304:xe3lq2QipCedXrysOcAV4M66GEXcM0W0V8cWlQBQUWiq4hHqELUyYqK7o3PVqokl:xegT+3d7yPl4LBecVdkRrWKJzr7oM9+6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727028675, "uuid": "9233e1f4-4adc-4481-95e0-4690d0b3c2d4", "value": 7640925, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028675, "uuid": "69786f6b-6e24-43e0-a09e-2a24de1cae32", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1630f8fa-6f72-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727028965, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028965, "uuid": "bdd9ffe5-1c2c-47e0-835b-d0899e77fbb3", "comment": "Malware payload", "value": "c77c44e480f5391fa64a3ffa29a55500", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "cats", "colour": "#d9dcc2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028965, "uuid": "fde1c338-6fdf-4eda-9052-24ff4676c8e0", "comment": "Malware payload", "value": "8dce2c7d605b000a824e9063e1a08c32af6c1aaf800fd566e4a42c2231f8a54c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "cats", "colour": "#d9dcc2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028965, "uuid": "15a82075-d2fe-4f52-a4b5-6125b33a1e1a", "value": "T18051D2C990CBC6316CB5E922A2B645983AA0D0D730D9DE54E4DB34E4488CE27F84DE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028965, "uuid": "10f89b26-1764-4ba7-894d-06f9fd5af6e7", "value": "24:vImAsI970xISdSzaRPJIuVIvvh6LI8d8Z8NI+NksItgIbE3IiFIQxRIjGOsIqCuu:vpTPAGD9yILHNJnL3T9DLu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727028965, "uuid": "ebfd15ef-e6a8-485b-a494-31a27dc2646e", "value": 2537, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028965, "uuid": "5656fbbb-c47c-41a0-a9b2-dc1f793f0d27", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83affacf-6b9c-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727029025, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727029025, "uuid": "74d7f2a0-3362-4d5c-b71f-47a75af14a88", "comment": "Malware payload", "value": "8740c6389366954cf690ab4ba1373648", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "cats", "colour": "#d9dcc2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Okiru", "colour": "#E393DA", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727029025, "uuid": "1ec99469-dac5-4fdf-928b-6f0866b48cf1", "comment": "Malware payload", "value": "795f7a17109a749bc7629c80e8011f45c775184ff27c27e2583f5a0ae86893a1", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "cats", "colour": "#d9dcc2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Okiru", "colour": "#E393DA", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727029025, "uuid": "3074ef69-4551-49f5-af92-9aa6ddca9d79", "value": "T1CD634BC4F943C8F6FD160530217BEB775EB2F1B91358EE43D7A89972E862A41E501A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727029025, "uuid": "e02ac625-3478-4ab5-9a6b-45568b228dbc", "value": "1536:bSKRI7C2wEI5Z5268+I/UCCPyiW5/yoxZoYk6xTxbPoui7N1OF9Q+Xj:bSKRI7C2wEI5nxCCqiW5/yoxmYk6xTxL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727029025, "uuid": "1c54dab6-cfcc-4d60-bdae-636d25e3eb98", "value": 70832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727029025, "uuid": "e95631a4-e312-4948-a998-77c7b97a365c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727029025, "uuid": "e0f95199-636d-493d-969d-3ae064607d57", "value": "t1782107fb1dbe4df8f7d86840938f9f912819e6372ab072a046235d1132a7dd150b8c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca379fc0-7910-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727029849, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727029849, "uuid": "a4ca2654-0aaf-47ef-b7ff-d05dfd729eb4", "comment": "Malware payload", "value": "e7365e79cf6fed667ec0e0af10f8f960", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727029849, "uuid": "f431bec3-e49e-4ccc-b0af-252f1db6019c", "comment": "Malware payload", "value": "de3fd279852627f1722f931eea12feff5e747a570ad1fb7180175abd6830d090", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727029849, "uuid": "a858bfd3-d981-4c5c-9726-7f642ee7928e", "value": "T154B2E17194927495DC028872E4390F4773A63BF8C1E9A69EE51CD9A99CE1C87417E0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727029849, "uuid": "eab421af-7adf-41c2-9c96-f1b224664324", "value": "384:sVsRnkovfdN/Tvt05suP2C2eXSHMXsbtjO6gUp0hBMSdDe1uprmdGU57DLF:saBlVVutSsXsZO6gUpBUy1k3UlF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727029849, "uuid": "d2f678b7-91a0-4cd1-ae37-ea5690a254bf", "value": 24692, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727029849, "uuid": "ddff22f0-d9e3-40d5-8cd5-b04d920933b8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727029849, "uuid": "b600c4aa-6deb-4c26-9bc5-cd14810fe1de", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6330638e-7911-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1727030105, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030105, "uuid": "e7c1d807-7e40-4d41-a833-8ba6c00461a9", "comment": "Malware payload (Mirai)", "value": "095009f2c3cd09f7f3b4363ab27b5d1a", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ECHOBOT", "colour": "#30a891", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030105, "uuid": "459c1859-e581-4fe9-b27e-086a7aea00f6", "comment": "Malware payload (Mirai)", "value": "19cf3e8c54542109406c15ea07b3fbc4789eec12fdb699ddfa109d31ebc4b4ac", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ECHOBOT", "colour": "#30a891", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030105, "uuid": "91b75c8a-1a3f-4b79-bc14-a13ea092bb8e", "value": "T13E43D795BC83892AC5D413BABA7E01CD332573E9D1CE7253C8204B547BCAA1F0D67E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030105, "uuid": "41e746a7-a894-41bb-84df-d1742ede18c3", "value": "1536:AjRQwujotrrlezT54BRL9jnnUbyx1glynn:NwuQo4HxjnU2xKY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727030105, "uuid": "692ec126-4840-47b2-ba8c-6f63f3845cdd", "value": 55220, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030105, "uuid": "23457fe2-567a-479a-a7e1-6255c18f2f51", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030105, "uuid": "66e648fb-41da-4794-9ab9-7f034d30565b", "value": "t1bce02600ac659b5888d79a749d9d07b4a9012213546a8b10cf10d6f4d83f458e708e", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63317b20-7911-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1727030105, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030105, "uuid": "1f0eb800-83cc-454f-8f56-98f4ace49662", "comment": "Malware payload (Mirai)", "value": "63c2dbc7825ef94daacc66ecd5d49ad3", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ECHOBOT", "colour": "#30a891", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030105, "uuid": "d7f9ae7a-72b2-474c-a3eb-24e290bd812f", "comment": "Malware payload (Mirai)", "value": "8287feb219f3137fef4c903d2dd65d32de57a0d9fd84f2e6ec933dd97d7c6599", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ECHOBOT", "colour": "#30a891", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030105, "uuid": "1d97fa28-de72-4cc1-9ebf-e5488e218fbb", "value": "T1D7936CCAF441CD7DF84BE67A48164E0CAA3172D11B930F2793A7FE97AD76058394AC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030105, "uuid": "65ffb748-c1cb-4a5e-a54f-6510b458ac6d", "value": "1536:nES/yArnJoQtZR3tThfAY85iaeQeuacWjcW0JcWcBgxf6z+bnyvb+2n/:ESaArnJ1tT3JhIeQeuacWjcW0JcWcBwm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727030105, "uuid": "fecdd340-825f-4601-a19e-f8a1cf336693", "value": 92716, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030105, "uuid": "b9ffb4a5-3152-4c29-863d-198054770dd0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6377e23e-7911-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1727030106, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030106, "uuid": "db5a13a9-ccf5-413b-9c26-ba649b11699e", "comment": "Malware payload (Mirai)", "value": "0a798e78aa8621f1f6db57f66c155402", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ECHOBOT", "colour": "#30a891", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030106, "uuid": "367fdb62-81c1-451e-b860-109fe5c37a67", "comment": "Malware payload (Mirai)", "value": "a344540dff6180baa8158e5334e7bc375bcab639d64993b2f273edc99eb72fb0", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ECHOBOT", "colour": "#30a891", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030106, "uuid": "c76af316-0c57-46ba-bfc8-db7aaba4b1f7", "value": "T120B33B0272294B57D4A78EB0199F5BF047FAECD025F17609E91EAF944733BB21089F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030106, "uuid": "5766dc03-510b-4030-ba0c-d163681b5541", "value": "1536:YD3TbOq89I/ndBtXNVp5BSqsvtDJHyjqMd44eg8OrdJogLzb+9VOMWF157UF7nQe:GDjnX5Tp5By7YcbBOrdJoDBWU+u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727030106, "uuid": "80aa302e-acca-4833-b324-773d150833b1", "value": 113463, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030106, "uuid": "b2d93a17-e58a-4359-a54d-e708aa22a64b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030106, "uuid": "7271ee62-36f1-4db2-9513-dfac4e38e4a6", "value": "t19d31eff14b2ba6285a68cbec89cc73a9022c93155247df33ff2584bca01549df929d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "637bc439-7911-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1727030106, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030106, "uuid": "56161db9-ba1c-4158-b1e8-d3d24b74e918", "comment": "Malware payload (Mirai)", "value": "f7de017412d70de8d6825ee2db7fde8c", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ECHOBOT", "colour": "#30a891", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030106, "uuid": "9336d228-4156-4ad5-b709-d2905a37cc4e", "comment": "Malware payload (Mirai)", "value": "84c18df269aeb11cdc03b99cada9531a59c48eaa9edd74af42a8a894565dcf0a", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ECHOBOT", "colour": "#30a891", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030106, "uuid": "804b190e-cf03-4dea-893c-6eca0f457a4a", "value": "T1C8E32A0ABFB11FFBD85BCE3710EA5B01148CE91A23966B367138DD58B74728E16D38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030106, "uuid": "a8fec6fb-90d9-4ed6-9500-8e14962aa653", "value": "3072:/NgPgHgvgo1TtRtRSR5RtR7fKDzORGJynyxOKPKTksFyQ9nIP:uoAIU5RtRSR5RtRHGlHPKTcsnIP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727030106, "uuid": "5f1615e3-61fd-4897-b5fd-97e816c70ddb", "value": 148395, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030106, "uuid": "9dd93992-8571-4265-97db-baa277176980", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030106, "uuid": "bada50b4-8341-4eb7-a57e-9a910bb59a63", "value": "t18831eff14b2b66285a68cbec89cc73a9022c92155247df33ff2584bca01549df929d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "637c7ffa-7911-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1727030106, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030106, "uuid": "7cd2a374-d149-41c0-ba07-95cb1e9bc5ed", "comment": "Malware payload (Mirai)", "value": "4eb246548fbcdd5cc726d1adfd0349a7", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ECHOBOT", "colour": "#30a891", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030106, "uuid": "bdbb39b3-ccff-4ea2-89d4-bb9b6dc0c4ca", "comment": "Malware payload (Mirai)", "value": "49a12e4c3851ce0762b75265a7c21f5bfbbb82b74769d9e58c1ceb2adf80fd1b", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ECHOBOT", "colour": "#30a891", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030106, "uuid": "5587277c-2aa5-4242-9a94-8091bbf66a3c", "value": "T13BC35B3266792B22C1E5A57900F75B36B3F26BC92AA1820F7E710E8C7F156E030577", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030106, "uuid": "57b871ff-4f1f-4b13-879c-da284ba41dc1", "value": "1536:E0bvmZfyZfJZ1fZ7BZ1ZTpwYt8mZRmW7xN6au8DZEeowbHXqmDMgXBD4u4jxq6MF:NdxrZ8KNFu8PowjX/YABujxr3Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727030106, "uuid": "4d1d1a87-0862-49df-80bc-7fc5b0f2d890", "value": 123216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030106, "uuid": "48ec7842-01d0-4317-a470-a4e9c9f5c990", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030106, "uuid": "be9f9154-9ce2-4df8-82ac-e347f37fde0f", "value": "t19e31fff05b2b66245928cbec88cc77b9022c92115246df33ff2484bca41549df92dd", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63854d6d-7911-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1727030106, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030106, "uuid": "f3854e10-d6da-4423-9fbe-9bc99fbe1e9b", "comment": "Malware payload (Mirai)", "value": "8595ca22025b76adad4432381738bcf7", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ECHOBOT", "colour": "#30a891", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030106, "uuid": "038e1e46-fafc-4fb2-950a-c1051a221bd9", "comment": "Malware payload (Mirai)", "value": "e7da2988caae4cdd91c9ef2582980e607eda565980dc746d671d3c283059b155", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ECHOBOT", "colour": "#30a891", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030106, "uuid": "f9ebc573-7608-4ab6-8e38-633adfc85eb7", "value": "T12BE3C61E7A258F6CF39A863547F78E31466437D22BE2C045E15CEB142E2178E684FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030106, "uuid": "862cdca6-c0dd-4742-9201-4624f27c015d", "value": "3072:jw0VJD/eGdUAHj11b68XD4QJkY7JsDIghs481qLOliNLkU3P:jw0VJD/eGdUAHj11b68XD4QJkY7JFghX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727030106, "uuid": "3a463972-3129-48f8-9a40-0b9964c0dff3", "value": 144299, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030106, "uuid": "b2efa146-2aa7-4c68-9ec8-bb1725d000dd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030106, "uuid": "74b272d4-8a14-4d32-a82c-e3c9d5ad8bdb", "value": "t18831eff14b2b66285a68cbec89cc73a9022c92155247df33ff2584bca01549df929d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63a1d9a1-7911-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1727030106, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030106, "uuid": "77f91196-1d4f-485f-9461-fb0bd69f13c0", "comment": "Malware payload (Mirai)", "value": "e5985a9ae487c2cd1315da735db680ba", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ECHOBOT", "colour": "#30a891", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030106, "uuid": "c71afd0f-8d76-44d2-9671-9a1ee53e3a3d", "comment": "Malware payload (Mirai)", "value": "2c33aa56752517541a99b1f42fc5593bfc25b61eb3ee9e9ad5c132c9ce514b9d", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ECHOBOT", "colour": "#30a891", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030106, "uuid": "b6da6616-fd62-4cf1-a36a-1708946118c1", "value": "T130E35C46FA818B13C4D517BABAAF01493332A79493DB730689285FB43FC6B5F0E679", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030106, "uuid": "04723176-eed6-4615-9f0c-a9b908a4309e", "value": "3072:368rdjoSdeudwaNuiVZdm8Tx2XehVVkqXfMYM/9FjzWe:368ZjoyeCZm8Tx2X6VJXfLM/9ZWe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727030106, "uuid": "7f399188-da89-4889-964f-7cb77cb40868", "value": 153779, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030106, "uuid": "b84d983d-fe8a-44fb-af90-d9204b022226", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030106, "uuid": "fdc1bf13-ab22-45c6-a037-e93bbddf74aa", "value": "t1a931ddf14b2b66285a68cbec89dc73a9022c92155247df33ff2584bca01549df929d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86d128eb-7911-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1727030165, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030165, "uuid": "0c8f02bd-6811-441f-a893-5f1c0f6a8170", "comment": "Malware payload (Mirai)", "value": "a99b5b9bd9c2211089b9ebf8e941d374", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ECHOBOT", "colour": "#30a891", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030165, "uuid": "17fcab0f-e3ec-489f-b390-e50e1d42e09f", "comment": "Malware payload (Mirai)", "value": "465fa52c811318dcb820b5814b23d976e5d49d13b3cc53c1331a90b91f8371ac", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ECHOBOT", "colour": "#30a891", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030165, "uuid": "8e85c33d-a2dd-4f1b-ac52-b9e88eb7f5dc", "value": "T1A4E35C56FA818B13C4D517BABAAF01493332A79493DB730689285FB43FC6B5F0E279", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030165, "uuid": "7b57857a-651c-48be-a013-7327b6924af1", "value": "3072:368rdjoSdeudwaNuiVZdm8Tx2XehVVkqX1iFxVFjzWe:368ZjoyeCZm8Tx2X6VJX1iFxVZWe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727030165, "uuid": "2dd361e7-2884-4d38-b3ff-0ba67116cfb9", "value": 153779, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030165, "uuid": "f8938553-b602-46bf-8c86-4dac70399513", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030165, "uuid": "d15f6022-441e-48c0-a07c-31d02afdbabe", "value": "t1a931ddf14b2b66285a68cbec89dc73a9022c92155247df33ff2584bca01549df929d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86d6804e-7911-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1727030165, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030165, "uuid": "b944784a-f4f3-49c1-b6b9-823d6e491a3c", "comment": "Malware payload (Mirai)", "value": "5b9bb79fa57259c9f09e8048f2da451a", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ECHOBOT", "colour": "#30a891", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030165, "uuid": "43182abc-2eef-4250-84d7-aa047d6d7fa5", "comment": "Malware payload (Mirai)", "value": "58def77c32e06d85e5f746b9e44bd863d2314b657161f91a2c088d638d5eaeb2", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ECHOBOT", "colour": "#30a891", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030165, "uuid": "573282e5-e9db-435a-ab61-b57f8bc1e88d", "value": "T192932A41F8818A16C6D523BBFA6E11CE372567D8A2DB71038E316F6437CA42F0D7BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030165, "uuid": "ff97b5ad-58ac-45f5-8da2-5bae159ad766", "value": "1536:VLYUBU5UqUSxUMUVAqu/cb19iYj7rRdmQdSo1G9owwoS19u/uvZJp0JFFbPg4snJ:VNiaXSSBAEniYP9dm0IZw79lBToFFbPK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727030165, "uuid": "9a53abd0-92df-488a-9762-a9791786918d", "value": 91284, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030165, "uuid": "3e13e893-df54-4e54-b5d1-6b23e4b5250d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030165, "uuid": "96888667-c36d-46a8-94b3-f6054490cbd8", "value": "t13e319be8ef300a9e6bda9148928db12a0fed316a6e081817c649775fd48b7d2711d8", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa5156a6-7911-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1727030225, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030225, "uuid": "b8bbf729-2b37-4210-83f7-3b6c9ab259e1", "comment": "Malware payload (Mirai)", "value": "dcc3ccc1cc4d730f6a3bb70c0b410c69", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ECHOBOT", "colour": "#30a891", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030225, "uuid": "f9d5fce6-3cb1-4215-a8d1-aeb0b8da1249", "comment": "Malware payload (Mirai)", "value": "065207effd020d13cc68ad9160671a7c3f11de716a3b605c2225ba5a317f7552", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ECHOBOT", "colour": "#30a891", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030225, "uuid": "8fc0bae2-44dc-4b52-802c-e4f41790d3a3", "value": "T11DA34CC0A653D5B3CD83377810A7EB364531F9A6276ED607E3ACAEB66D027807047A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030225, "uuid": "b164ee67-5da0-4b61-b1ec-1decf36c5ff1", "value": "1536:ehsPIb+AxMiPDXp16/dq0TXwle4VZpI49Sa0ZdkOgpamj3oXal7CFMI:eOS+AxMyDXm/dq0TXwl3VZTh05gwhoI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727030225, "uuid": "80625f0a-f34e-4017-ba6e-2187775a3cd6", "value": 103089, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030225, "uuid": "32c0dd12-0977-4cff-8283-b92bbbeb1697", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030225, "uuid": "a2db2598-bbf5-4ed2-a8d6-4bafd3e7c3e8", "value": "t1db311ff04b2b66285a28cbec88cc73a9022c92125247df33ff2484bca01449df928d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9699478c-7908-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727030345, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030345, "uuid": "22a8f7ac-9740-44bb-bf59-2bd7d2e49a0c", "comment": "Malware payload", "value": "5c1793984b272d7b5f5099b6ae44e15f", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030345, "uuid": "8ff41e7b-2eae-4cba-b44c-fb702daf91e3", "comment": "Malware payload", "value": "e1d162563ffd50e111d73088d3cc2b150ef3604a6a93bbfa35c4f631c2c9ec21", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030345, "uuid": "0591ad5d-8bf3-4a80-a53a-98df6021105c", "value": "T11274238C351F73D1F5312EB45CB7B6498B42A4C7CDA2FE3A3958B00E01962188DBD6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030345, "uuid": "06b18363-c020-44e2-9331-91564a5cece0", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030345, "uuid": "bcd5b1f6-c025-4738-bc11-a6a876ba560d", "value": "6144:RqCrZaZPiCo78TA4PZ1uFOV/HnT0Jmq0e2Kgzsc4lTnD4ZFxNLGDxMGvvWjnIfre:Vo/TA4OFavT0JP0xsc4lT0lO3Wjng8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727030345, "uuid": "c3acfb75-477b-4ac8-be45-dac5822e735f", "value": 370176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030345, "uuid": "1637fd75-5153-4a79-8ad5-9aa39dc25be2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5cf37f24-7912-11ef-afe5-82aee05be84a", "comment": "Malware payload (Smoke Loader)", "timestamp": 1727030524, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030524, "uuid": "a73f3678-cefc-45ad-9a94-1b51a70a55ca", "comment": "Malware payload (Smoke Loader)", "value": "d56bea8714d3b0d71a4905b3e9103e03", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030524, "uuid": "99468f53-19eb-4a5e-9ee5-cfca835b55bc", "comment": "Malware payload (Smoke Loader)", "value": "c27e2d17cf286c37d3691b278c530c70911950db0c7bbc4e57523ecf325f1547", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030524, "uuid": "122bf8b5-5f0b-432a-9e8d-61954f27aeca", "value": "T17044E606A1F0BD36EE66073A1F3993E87B6EBD565E35935D21003A5F4A732B0F5923", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030524, "uuid": "5ae926ca-8f05-49ea-889c-d9e1a66464fc", "value": "961bc56325ea858767969d4be856f113", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030524, "uuid": "c714ba9f-c8fc-47de-903f-0097edb85840", "value": "3072:/QGHLMg57JJiTFgV5qzHXROliutbzQ9EH12gu5TlssAxaxBAUf7J:oGHLMwlEyViOAIg9EYBAel", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727030524, "uuid": "a7294a40-62ef-40ca-aaff-ea0ed66dc285", "value": 255488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030524, "uuid": "b296c657-5c8d-4cf9-aa5e-476184d24824", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a557c52e-7912-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727030646, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030646, "uuid": "dbf77b93-bf4d-4ed0-bf80-1f755775750d", "comment": "Malware payload", "value": "2f23b04561b5768c07c7fdf1439f68ae", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030646, "uuid": "a5da6e0d-f6a3-46a3-8b3b-074cb8e19687", "comment": "Malware payload", "value": "9ce11b751c108aef4d4d57ae90a5c8ad45643aa47fa89c2888b0f1ac9100bc0a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030646, "uuid": "2b68436b-51ce-4701-abf3-0a8aa804d708", "value": "T1FC64281661F0BD56EE6607315F3993D86AAEBC125EF5939E31483A1F1A333B0F5123", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030646, "uuid": "4056a24d-d0cf-4285-8091-73d4c89de6ed", "value": "889511a72a7bb798cba88774c4aea917", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030646, "uuid": "cf7c3f89-ec8b-4d36-afe8-9c4ccdfc420e", "value": "6144:N7LDfee3MI6j2zXPADqQ5vhiWBssQWBel:lnW3CXP+50dD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727030646, "uuid": "d6986aa4-6f8a-4499-9a6c-e752a9747d24", "value": 312832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030646, "uuid": "f0440422-8886-4afa-a1e6-137a4c6895a0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd747644-7914-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727031545, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727031545, "uuid": "03283877-8ab7-4843-b98a-66295bc9b7f3", "comment": "Malware payload", "value": "da54d8069689603f5470481b87b6f8dd", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "config", "colour": "#10580c", "exportable": true, "hide_tag": false }, { "name": "json", "colour": "#84a2e5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727031545, "uuid": "5f835418-2ac3-4d78-a7b8-80de5e1a9e25", "comment": "Malware payload", "value": "1b4399708c216eeaeb527d4b369053b973e5088a255da2ab6692766d8ba1d703", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "config", "colour": "#10580c", "exportable": true, "hide_tag": false }, { "name": "json", "colour": "#84a2e5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727031545, "uuid": "1697ee3c-fbfd-498c-8e1f-aa07e23ad6ae", "value": "T1C1313520C9680CBA52E850BC88BDA39303588E135F5D3D38B54E5A1C2F4E73E75B2B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727031545, "uuid": "1521a53e-72a8-4c93-acdb-0a16d26fae6e", "value": "24:vIMFTH1oiVyxS5JnwRov1SQ8MGSwr7j0SH8v5i3qTA41vV/Db/2g:vIuTHSiUxS5JRv1SQ8JSwrn0SQA4Xmg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727031545, "uuid": "895d5a35-bbd1-4aed-b299-8ffc66b094fd", "value": 1536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727031545, "uuid": "b0412bc4-607d-44c7-981c-40bf16f00224", "value": "application/json", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf6eb93d-7914-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1727031548, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727031548, "uuid": "123be604-7cdd-4f58-963e-a6d52f16e440", "comment": "Malware payload (Mirai)", "value": "43f595460b2fca77561c63e8a80178dd", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727031548, "uuid": "64a1d18d-4419-43c6-967a-5f625c154beb", "comment": "Malware payload (Mirai)", "value": "7dc50338d476cd0dfdfcf48dc7dbff682d6d04458c6ce2808f35779606576532", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727031548, "uuid": "3bcde6b2-3247-4cd0-ba45-9e7a4daa6f34", "value": "T1D3D5337BB285D466E7B380362204F34AFE971F2799780242D7857B2DDC779A4AC701", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727031548, "uuid": "cee251cb-0df6-44b5-b900-88abb9a0ba97", "value": "17fb7e76da9d0e277bd22cf9f3d5242c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727031548, "uuid": "f4af6cd7-599b-4be9-be5a-01f145dceae8", "value": "49152:Ttx3zeCE99IyWGKUpZTGttu7FfdKRiIsA37SWje3b9VJMsdnee6GrhpIfI9umCzY:TrM9BpYttuBdK4FA3mWMbfN73r0fCulc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727031548, "uuid": "5da34022-7935-4a85-8def-6fcb05339ebe", "value": 2983424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727031548, "uuid": "5b5d4245-18cb-4bfa-87d8-867be0f99392", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "39691154-7916-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727032183, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032183, "uuid": "3225a9ee-7fb3-400c-9efe-035d72c182b9", "comment": "Malware payload", "value": "e3887f66dddef1ddf40db5930b53d9c7", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032183, "uuid": "a70bfcd3-84f0-4856-ae14-790a011c436e", "comment": "Malware payload", "value": "8ebe71c0ad623c42fe69b470ed19870059defb32004d377e954302c38edb4171", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727032183, "uuid": "01f92e95-98dd-4311-b465-a3a1d512a942", "value": "T1F724E0F6E4C60CA11F6AD65CD1EEDC94122C37FEA53915A478E0ECCA54326219F6C3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727032183, "uuid": "6e2a784b-1ac6-4708-85aa-9bb48651d69d", "value": "3072:OFUQkXcHSkamF1nXLEXtv9ZM2nJ7tDr0iVoRHbLl3fWmXYDHXPXd+qbm:uUQImApBr05RHbBv/XYD31Nbm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727032183, "uuid": "40d7e3a6-458f-424c-848d-3ca7d6ae6b34", "value": 211027, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727032183, "uuid": "039d29fa-88bc-4b0b-8273-cdb759a8eeb7", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e879e662-7916-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727032476, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032476, "uuid": "0a0ea1de-a441-4e18-a29a-3ccb248f5d45", "comment": "Malware payload", "value": "09d47273c5d83e6cacd1cc540a0ac328", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032476, "uuid": "db0950e0-240b-450e-9616-240e119cd855", "comment": "Malware payload", "value": "b8068b7ed8178038b7ca45255c1b6aaa28a5de77c2568568623c5356a4be98e6", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727032476, "uuid": "88fd8811-93a7-4ab8-9f46-c4f65dd5fca0", "value": "T10B85338AFFBF3679D3285D710A1D82157E4C117D189A0FFC5AAC47242CEFA0819627", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727032476, "uuid": "6a060ca2-919a-4e84-a1aa-b0b7fbf5a352", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727032476, "uuid": "56e4ba85-e114-4f42-a648-e4eef526eafa", "value": "24576:hvoGN7AtTtYz21LbC4HuTyHQTe/gvClBCbKkeSVXJaP88rWkm2y08G/b84NJ:5oljbLbC4HJsywHhaP88rWOdg6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727032476, "uuid": "f52b461f-accb-4619-9fd9-7ff218159dde", "value": 1762816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727032476, "uuid": "1729bd63-a584-4293-aee3-bc0952f3f696", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "154a440b-7917-11ef-afe5-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1727032552, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032552, "uuid": "9a645373-59f8-4c15-b397-275ef2246461", "comment": "Malware payload (Amadey)", "value": "548b47c05eec0799b5f1c1ce49a4ce21", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032552, "uuid": "2f969f20-1852-4227-a1d7-453a8b6293c9", "comment": "Malware payload (Amadey)", "value": "fcac154d79169679e95cdf051860226eac70460c2b18cae1aff91ecbb9add374", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727032552, "uuid": "7c6af891-75da-4f2b-8e05-90a10457dc3e", "value": "T13795339A2698AB40D0A58131BC3ECB4A52747F119A6D2C5B0D56F73F3A7FEF110A13", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727032552, "uuid": "7917ab35-11fd-4e00-ba68-a4e0e7b16781", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727032552, "uuid": "937e82b9-de0e-4e7c-b0b2-9a0729c9e8ef", "value": "49152:pAm/ydlFe27sVY8rwoBlR6HY54IP/DlnnmdA8H:p1ydlMR3h/R55L5mi8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727032552, "uuid": "d68f85ec-4e20-407f-b6e8-e4eb89ee6649", "value": 1891840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727032552, "uuid": "bcbed2e5-4320-4a0f-8a6a-bf998688a882", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce7c7a54-783e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727032876, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032876, "uuid": "7596699d-e67e-451d-b73f-54d5e874fb97", "comment": "Malware payload", "value": "d2a1e325ed8998dee69cc99e739ba50f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032876, "uuid": "68454957-f9b4-47e8-ab9d-82eeb4e812d8", "comment": "Malware payload", "value": "d95206478135cfd120456758f2ea2355b31a4caffc5c11031e30513d8e688dbc", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727032876, "uuid": "fc55e665-d051-453a-a095-9955e6e5f7c8", "value": "T121635BC4F943C8F6FD160530217BEB775EB2F1B91358EE43D7A89972E862A41E501A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727032876, "uuid": "09fd13bd-77a2-4912-a1aa-c397a95aa424", "value": "1536:VSKRI7C2wEI5Z5268+I/UCCPyiP/e+o9VoMIqWTxfPoui7N1OF9Q+lj:VSKRI7C2wEI5nxCCqiP/e+o9aMIqWTxN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727032876, "uuid": "f6a89734-782a-4924-80c6-d4143049dbff", "value": 70832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727032876, "uuid": "0a3e08c5-a273-4a05-a266-5a1a25805588", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727032876, "uuid": "44be64f4-3deb-4a50-9d28-f89b7253e19c", "value": "t1782107fb1dbe4df8f7d86840938f9f912819e6372ab072a046235d1132a7dd150b8c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79a2734f-7919-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727033579, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727033579, "uuid": "83367c08-05ef-4bd0-bdba-21d3ab0b659d", "comment": "Malware payload", "value": "2ec53cfc24e350a0d029bb5738a01e3b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727033579, "uuid": "9b8ceb04-56cb-4249-b19f-e54fb50d3c3f", "comment": "Malware payload", "value": "5370586d5839ec8d47a075b1f1680405b1811b8605b6bf72dd766c268ab92213", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727033579, "uuid": "b28f4bcd-fa76-4abc-a36d-2a1cb8ab7ad8", "value": "T1F1135BB2CC292D54F56C85B4F4259B3D1B43AE25D9431EF9A06382BA8107ECCFE493", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727033579, "uuid": "0cd941a3-322e-4fb5-982b-015682de3f34", "value": "768:ZgRw2L+Jx20pNEp+UYOYpE6KuCv6oQowEZB1ZxCF:CXL+Jx20pN2+U1YpEHuKQowEZ5xCF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727033579, "uuid": "4ca38580-9a5f-49df-a2af-e276e7e7a58b", "value": 41984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727033579, "uuid": "277e38b8-37f6-4ad1-ae99-5210b21d53ee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2f7974df-791a-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727033884, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727033884, "uuid": "5d042750-d451-4e4c-a0e4-9b81f4ff9178", "comment": "Malware payload", "value": "2a4b0a26e016ef593600f23c986e1c2c", "object_relation": "md5", "Tag": [ { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727033884, "uuid": "3d77f1a6-d18d-4650-9944-3ce672193324", "comment": "Malware payload", "value": "2a05890bd1132e7eaad7c88aaa1b98ce4084f77a3db1e1e98a930c3a68dd776c", "object_relation": "sha256", "Tag": [ { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727033884, "uuid": "9e011878-208d-4728-880a-4bf124b39d7f", "value": "T13271C7FDBC6078684BB9318B678A25CBDC6F784333DE9C18F17081ED3678189A5966", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727033884, "uuid": "fa175e5e-08cd-4e7c-a803-19ab4e5ba2e5", "value": "96:fvj79QK8hpjmRtTkX0ePMX4GZjWte3Mejlz8:T79QuRtTkX0ePMjjwe3Meje", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727033884, "uuid": "a847879a-1f86-4ed7-98f1-0b88ce1d6c14", "value": 3693, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727033884, "uuid": "fce3e3e6-0050-41f3-b08b-1904d359807d", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1904ba2-791a-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727034129, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727034129, "uuid": "deb61948-83ca-4a18-b9b6-ec92179479cb", "comment": "Malware payload", "value": "b66feed308ef12fd53b275ded3baec39", "object_relation": "md5", "Tag": [ { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "KMSAuto", "colour": "#78A617", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727034129, "uuid": "55a1ac4a-b3d6-496e-ab05-fbd35abd65c9", "comment": "Malware payload", "value": "5da750db2ad9ed9e3f84d8b55465214fe7c2c59c980359ae0e9c18cc2436a06c", "object_relation": "sha256", "Tag": [ { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "KMSAuto", "colour": "#78A617", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727034129, "uuid": "7d61f0c0-a139-4c3c-bd54-4e1e9b8a8998", "value": "T1CBF533CF4EDDA0FCCE3ABF0FF6233994C98846E0A7A4F5195C5C11665486682B621B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727034129, "uuid": "3db21491-1e9b-422e-ab68-5d9a2a0b1282", "value": "98304:yAkav5NIlcDFp60g7YUXC1hZ1E+nxFs6Lm9S:ylaBNScDFbAC1Nvw9S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727034129, "uuid": "0e771af4-2b04-4479-9a93-56a72c5359f2", "value": 3518040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727034129, "uuid": "c0c53932-3c0a-45e2-a995-3918f7e9e4b3", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1eb9ca65-791b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727034285, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727034285, "uuid": "7f4e89de-db1d-4f0d-b253-17aed8f93243", "comment": "Malware payload", "value": "9fae01364bbb0df77d39ca20917866ea", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727034285, "uuid": "c18beeb3-2519-4a1d-86de-101dbbe950d5", "comment": "Malware payload", "value": "3da4f28d0b030a57e6481016803519d616a254e39869fe5ac07f0cbc7966b5cd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727034285, "uuid": "96f65d56-abf7-49ca-a0b9-e1c83cdc184e", "value": "T11123F954BD91D907CAD5437BFA0E828E3727A79CE2DE3207ED225F21378B91F096A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727034285, "uuid": "a6a9429e-f139-4796-bc32-a8d4e086b19d", "value": "768:M3bI5L5aIPEOKk9hD9KDrVwgnITd69hw+6OXM+V0+lsOwCidq1ejD:qZIPEMCVxPE+zcl+aCid6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727034285, "uuid": "66cc1338-484d-4836-a782-83ef1dc6ae76", "value": 48092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727034285, "uuid": "be8a1f62-0815-414b-bcbf-db26b3222c74", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727034285, "uuid": "e9167a14-2ac5-4bf5-bcf2-b8b761eb9d3c", "value": "t11ba022bc0c300ecc0be00a0003028320203a0bce300203e02cc8bba80c0f002f0b3a", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "32b15355-791b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727034319, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727034319, "uuid": "95975c3f-0e47-49fb-8ab0-964a5319a01e", "comment": "Malware payload", "value": "0de5b9d3d3c9a1858ca23ea2eddbedc2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727034319, "uuid": "d0f07be1-5674-478f-81f1-e35f19c808f4", "comment": "Malware payload", "value": "435fa41ff14093a8da59ea4c979412af3c7f9199d8e99c8f4190fa3eb5049e24", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727034319, "uuid": "6c62a0cc-f82e-4fe4-a8b9-43e17ed3a633", "value": "T1C5431956F9C1CA15D4D4027EFE0E118E33236B6CE3DE7217AD216F2467CA56B0A7B8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727034319, "uuid": "f4a64f68-de4a-4ed9-85a4-7b6f71e0c22f", "value": "1536:7Sn9xsYtFx6DlDG9HxIzUeHnO7GM9iKCdhfgR:gXtFV2z/4CdhfgR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727034319, "uuid": "cfc93399-6df2-48f4-b048-9b49ed0637cc", "value": 59056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727034319, "uuid": "9159cf99-b86c-4a26-95ba-82c40c2df0b8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727034319, "uuid": "76e76c6a-0117-4543-a8c9-31cf14b37d2e", "value": "t14ca01130888c0088ba80082800c8203aca8a0bfc222aa2220ca82802020a0023ea28", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "39bd2f18-791b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727034331, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727034331, "uuid": "19f06762-9e30-4e38-b452-7f3bd2849ee3", "comment": "Malware payload", "value": "2dcb40c88e9577c2fc59ea210df1fac2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727034331, "uuid": "747407bc-ecb1-412b-b44c-41f8bb597b22", "comment": "Malware payload", "value": "d2b57fb31497e56557572ecfd5d417440aa53127fa7eeb7c968481432d5868e9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727034331, "uuid": "b565211d-cb8f-4446-95cb-5d069d433cd2", "value": "T1AB23E652771C0943D2B25AB4263F46D0D3EBAED122F4F2487A0E9B4AC1B5E376186D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727034331, "uuid": "cefd6985-93d1-4b7d-9bf6-b1ee77150dc0", "value": "768:a4JV3QHKGeb1w5tURElZWDmbjKDqZ4Ai9xAXulHAPMdhoe5VqGHpjIgUx:N2q71w/WDWKoi9x/PdWaqGJjIdx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727034331, "uuid": "bbc20a3f-d6c0-428e-8d57-45a414c2630d", "value": 46184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727034331, "uuid": "c9e21ac3-f7a9-499f-b4f9-dacbdb55ee4b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a3443e62-791b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727034508, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727034508, "uuid": "6e593032-4bb1-42c1-a546-d26a6fa754f3", "comment": "Malware payload", "value": "80317a5e000d8559945fc5473221f693", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727034508, "uuid": "dc8935b2-94b5-4804-8908-5b88ec56c7fd", "comment": "Malware payload", "value": "c4777dcc31bd3e60cd58bc0755183f2ce327dcd23980b03b1f3900388cf1b66e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727034508, "uuid": "df94b64b-58b2-4a51-af79-29629d075da4", "value": "T13B63A509BF514EB7EC6BCD3709E81B0635CD791A21A57F3A7934D918FA1A50B0AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727034508, "uuid": "d6c5cf0d-6e88-40bd-9284-48496ffbd6f0", "value": "768:oYlolU6yYg98+LuuvKjQTg51Cko24rSeCbe2yeVtsp6s58ZENXjeXir/+oLxu28:o7l7mvPg51Fn4ujbvyYtDsqZENXDxq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727034508, "uuid": "1d935724-dd92-41c3-8acb-501a6355e9ad", "value": 67956, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727034508, "uuid": "55e85006-fd73-4d53-9c6e-c2b5ba60258c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9360598-791b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727034625, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727034625, "uuid": "3e6002c6-176a-4c98-be28-1996c9ee9aa9", "comment": "Malware payload", "value": "771b480f8c1e7a106f2bbb2d731b9616", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727034625, "uuid": "a25c3807-c6b6-4546-99af-b38983a22aac", "comment": "Malware payload", "value": "35440e1a92ce579b02599fe88a7a18780f7ff0779c6b12658651bfcd51edb586", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727034625, "uuid": "e5420ce2-6208-48fb-8ff4-d15fbe22095c", "value": "T1A423F954BD91D907CAD5437BFA0E828E3727A79CE2DE3207ED225F21378B91F096A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727034625, "uuid": "3e3ffdd8-feab-47f5-b670-e33a581f777f", "value": "768:O3bI5L5aIPEOKk9hD9KDrVwgnITd69hw+6OXM+V0+lsOwCidq1ejD:AZIPEMCVxPE+zcl+aCid6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727034625, "uuid": "64596ca5-7b8b-46f2-bb1c-ca1579f8bb61", "value": 48092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727034625, "uuid": "72f9b920-aeaf-46b1-936b-7d126494da60", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727034625, "uuid": "bacb8c3a-bf07-49c8-b5b1-d58ed78f579d", "value": "t11ba022bc0c300ecc0be00a0003028320203a0bce300203e02cc8bba80c0f002f0b3a", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7afbd3df-791c-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727034870, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727034870, "uuid": "6427de8d-a98f-4dd0-8e2d-2e9e19b78a12", "comment": "Malware payload", "value": "b03eb00cdb82747bcc3628448cb9e8f5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727034870, "uuid": "d2926ad0-ed08-4610-a024-15c6256e19de", "comment": "Malware payload", "value": "bdc524014a917d976cd5669f21ab13e991585e12835badad385345674a03dab4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727034870, "uuid": "1f490199-06d8-4da5-b90b-d848489d6c22", "value": "T110234AD3B501DD7CF44BE736C4038908B132B75551832A376BA3B977AD3A098597BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727034870, "uuid": "b787b5be-bfa4-41a5-88aa-9d992392f13c", "value": "768:znHrPKh+PSKd9yOeGoQQVSfouVPx5EbP8rocHi0ipBYt5vGGCUACh:DHmh+VZ/QVSQuVPXMP8roc7ipBYtYG7B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727034870, "uuid": "ed0ef0d7-60d5-4263-a3aa-c4ea42634211", "value": 47900, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727034870, "uuid": "46f91252-c130-4c61-80ba-99e5cc6c8563", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91220818-791c-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727034907, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727034907, "uuid": "e191215e-aa97-4dad-a158-db0dc0c9403d", "comment": "Malware payload", "value": "06d5c3c3c249ea51791336557cdc619b", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727034907, "uuid": "97abeaa0-4e55-404a-affe-6d8ebe7b968b", "comment": "Malware payload", "value": "a72d4d0ece553b8140a169f5aca11693f3e411f733f1440ec12b1a30b323f164", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727034907, "uuid": "6f3b9ffd-ac06-4035-9190-72aa5549ad56", "value": "T1F47423A2CF98D282C2FCD5B54C17B720E765EADA27F126DB244630526C2B4373DA31", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727034907, "uuid": "7084bae6-9ef3-4138-9ee8-73e511f45522", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727034907, "uuid": "b6621357-1656-4df3-aa53-8b3529a7db74", "value": "6144:VcL+gGuhnyU5lNlX/YRD7GQ6nQoTnhMWPvleoHVo+8+DTC8AUNNge69+Hex2D:VcLgAnZ5lHYGQ27WWPvlN1o+3nAUDgec", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727034907, "uuid": "f5bb3626-ef1e-44d0-b52a-830a1e210d65", "value": 370176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727034907, "uuid": "68486c31-ba78-4abb-a863-1ceaed7749e6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1383f500-791d-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727035126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727035126, "uuid": "ffd76d5c-1779-4e58-b272-8321c37cf64c", "comment": "Malware payload", "value": "f56669c2db98cfd963e027718f275c8e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727035126, "uuid": "a13ce598-77cd-4f8a-b438-7aec83146b0c", "comment": "Malware payload", "value": "3dcf4ee6cfc5e501b6ea322fd63cf484f75291c45b2ddeb556ec95c6b7ac0b81", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727035126, "uuid": "871bc12e-a4f4-4e08-a7c7-442a01adfcd4", "value": "T15A14A61E6E328F6EF668C73447F74E30976933D626E1D684D2ACD1141F2029E641FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727035126, "uuid": "0eb268dd-a149-4809-8f21-d9eb80ff89a8", "value": "3072:/ciM5Z9Ss0c7o2GYu2jMEC8V5HrIOeux5vT/QXRxLzVMROa:/PMB50n2GYbpGu3L/Q/tOOa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727035126, "uuid": "8ea327ac-c236-4f0d-b498-b6504c03c0d2", "value": 202688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727035126, "uuid": "ca3fb3ef-a707-41fa-82a4-83833b6cde6f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727035126, "uuid": "4f9417c1-af35-458b-ab83-083dddd84ac3", "value": "t17541a1180d7913a0a6296c5d089dff36d6a330db7e1a2c278b51e86ee769f839d10c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2728d3ca-791d-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727035158, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727035158, "uuid": "51ea9742-fe4b-4fde-b2d1-e20327366a34", "comment": "Malware payload", "value": "6216b7bd594cd704d7c550449034f99c", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727035158, "uuid": "f87acae2-8017-473c-b324-88d64170a8f2", "comment": "Malware payload", "value": "d0f5a67822d396c210a5f0685dc551b230dd4469d679204f9d9bbde7bb514026", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727035158, "uuid": "a8a6edf2-af94-4f05-8041-a7763bfc6709", "value": "T17934F1CE13A6ED86E67DB41FA586F5518CE0918B1D5B48767332922C8F360D326DCC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727035158, "uuid": "fc3506a3-00f0-4ccf-ad44-29fcb151540a", "value": "6144:apaSD1vyxvYJ8XlZhRsyU+vjE3jbvxpcQ:eFRvyKJAZDozXpb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727035158, "uuid": "67ab2efc-d2a1-4d19-8225-91878d426b56", "value": 247881, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727035158, "uuid": "58e187d0-4a02-4c76-bfe5-9bd007f8406b", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f66f5c0c-791d-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727035506, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727035506, "uuid": "afd5ec6f-7909-41a0-b066-3a150845fc3c", "comment": "Malware payload", "value": "032ad884c22d3a3f0243c675858817f0", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727035506, "uuid": "997b2220-26e6-418f-b253-d033cac7bc88", "comment": "Malware payload", "value": "c3731c1dccac33f10e9664682853f9de7093923cdd82dafdf9117014bb4d260a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727035506, "uuid": "752e7cf8-2cee-411e-b676-2799f29f463d", "value": "T1638533E9C904C03DECDB0037C2BAC6256F1665F3850A57604D05B5669CBFAAFEEDB2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727035506, "uuid": "1a6bb384-a510-473f-b934-21b06ed0d35c", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727035506, "uuid": "19769d92-0e89-4de4-85f0-cfa8d2bfb646", "value": "49152:QqGeaAhwN9L0Tcy2AoR7D5oFqacUgrn+4:QqxaUI9+moFncUgr+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727035506, "uuid": "307eb6a1-4510-467a-bcee-4ed0b4000b27", "value": 1811456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727035506, "uuid": "ba724b77-091a-4024-99bc-09f96a4ba418", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de7ada77-791e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727035896, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727035896, "uuid": "6f768ce6-7239-49e2-945c-3665662f32c0", "comment": "Malware payload", "value": "7413d06194bcce1138db3565979b213f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727035896, "uuid": "18cd1782-4ae4-4d3c-b707-b66b0633f736", "comment": "Malware payload", "value": "41ff82b0c3b2882225067ebe03251e2fda71da9beaf92f87f2053a6c52b74235", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727035896, "uuid": "0e89dc14-77fb-413f-9a3b-ce24fabc811a", "value": "T11C630859F8829F05D4D412BEFE0E418E33636B6CE3EE7212AD115B2467CAA1F0B775", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727035896, "uuid": "2d6b92b2-aad3-4747-b01c-29a50bc0b1f0", "value": "1536:mdnmIK6dT0S26VllRw8YkVIYS181JotCxmacPlgmi1dihZ6:JkdT0Ss0VVS181JotCdvihI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727035896, "uuid": "2ffc9c01-300e-4ce9-aa6c-6db3d370ed00", "value": 72112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727035896, "uuid": "3ff777d1-3f95-4292-922e-d44b5a71cfd4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727035896, "uuid": "2c21cc6d-6897-4d14-a911-317dd192726c", "value": "t1fca0220f22ac02c8b0e003e8c0cc300300f203b02208a000caafbc03000e0003c808", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f4fee1c8-791e-11ef-afe5-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1727035933, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727035933, "uuid": "c040f1ad-1519-4169-95a6-9dba3ddcc31e", "comment": "Malware payload (Amadey)", "value": "feb3348c32edb90ead650dbb37ca2eb5", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727035933, "uuid": "d22dcba5-8c87-42be-b12f-5e0adccbc33c", "comment": "Malware payload (Amadey)", "value": "ec4bd3c67511a042aa26651f0a7f97aa1fa17343a5f490c892295564144085a8", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727035933, "uuid": "f3d30d83-af9e-4722-ba78-2b7a8aa63e8a", "value": "T1009533AA2BA4630DCE8E89BC02DFDA2677331BDE24C4D856DDC171761D8770A29778", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727035933, "uuid": "f303e76e-9566-4392-aecc-4d570f138cab", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727035933, "uuid": "db3baa8b-4d4b-427a-86fb-dfbe77f76c6b", "value": "49152:dUViajLELw1IdMqs4zSm+VlpyLttSt+sBN3x:QjLEL9MSnksLt6N3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727035933, "uuid": "cc64b048-5ea9-494e-9ccb-ede35003b746", "value": 1910784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727035933, "uuid": "6ca8aca2-a4f5-49b8-9836-5767a0a66752", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04e9bcb9-791f-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727035960, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727035960, "uuid": "a002909e-891a-4905-aa2f-101a56bb1c7e", "comment": "Malware payload", "value": "a555a1ea37a4cbdb43f695611fb12b14", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727035960, "uuid": "1d70390c-7244-4e3b-918d-74234f6bde35", "comment": "Malware payload", "value": "0e1b31979398958de65d6e91520a33e6ded539888b831346464363960d4cc434", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727035960, "uuid": "68913424-1a76-47af-8e8b-9ee8fc60320a", "value": "T1CEF33916B0D084FDC5E9C1784FAEB136D972F42D1234B65F27E4BB222E4EE215B6E6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727035960, "uuid": "14814696-8e5f-4f11-9e9b-d2ef58991831", "value": "3072:YF9CiLASd2Jk3EmDMbf1zeaff2UwgKYNrcRW5gU79Ha90:m9td2aifkyF9cRhZ0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727035960, "uuid": "2e1af303-64b2-4135-b025-de93b1adb2d6", "value": 159944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727035960, "uuid": "7c5da3eb-7201-4e83-9a98-ac299a3bac87", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727035960, "uuid": "9a37ec9f-5238-448f-8be9-863daad2e333", "value": "t10751a9702e9a3c9461e3e776a30bd9e4f872092241f171e1af636ce6ce557800cb64", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5c0ffdf-791f-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727036310, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727036310, "uuid": "a20cbfdf-4c37-48f0-96ae-9656a3850da0", "comment": "Malware payload", "value": "666cf8a81ba6f3c5bb9b61d200584441", "object_relation": "md5", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727036310, "uuid": "b5346168-5dec-440e-bc39-edd936a97e6a", "comment": "Malware payload", "value": "0b14c37c84d89fd4939173c7cdb22f18c76098756fdb90694a63232f68530050", "object_relation": "sha256", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727036310, "uuid": "f0e28eb1-f3ec-454f-980e-56f86cce1bfc", "value": "T14666283A9B4345CAC12FB57ADC837F3FF4286ADC431A492BAD0508BCA755751A8AD3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727036310, "uuid": "829603af-02c6-4d65-bcad-5570c14f282a", "value": "92a00f4d0a4448266e9c638fdb1341b9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727036310, "uuid": "d66a74cb-8df8-4fbc-8d08-31364e75723f", "value": "98304:sTaABZtkq1+EA0yxiqXk/HHX0DvWtEBb/LVyXvR8Ug:ivtkqUp0IQ/3SWtiBy6Ug", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727036310, "uuid": "55bb3928-2624-422c-94cb-66650f7bf5f2", "value": 6683453, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727036310, "uuid": "686d68f9-c6d9-4ac9-b058-62f6e27abfdc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7ef6c3af-7921-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727037024, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727037024, "uuid": "a51803e1-2d5f-4fda-a694-b6e89a26ff26", "comment": "Malware payload", "value": "1b1443822884061b25c1e7eb402ef15b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727037024, "uuid": "0b94a6e3-c53a-4f77-bd51-df08065cfc1c", "comment": "Malware payload", "value": "743c5f40656484a4aee51fcb7452ed32d0123faa4153f42c55eb4d1e4b579f7c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727037024, "uuid": "2f9b1ba8-6198-4806-95ce-1257f3baa45c", "value": "T1B653B60E2E618FADF76DC33487B38F219798379626D1C285E24CDA001EA434D655FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727037024, "uuid": "d99e04f3-6449-4516-bfa2-827ed10675c3", "value": "1536:PsRrXZ0Z7yMiRu/UF6W6otqpVpEdlkPIUvTQfF:PQIkPAv1vTAF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727037024, "uuid": "1bafb3a4-d0f9-4640-85a8-004d92a63718", "value": 65428, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727037024, "uuid": "03f5e796-61da-43df-85e7-a09563dd1cf6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727037024, "uuid": "6ad38ecb-6f0f-45a8-9632-2a22ddf1faad", "value": "t128012148493812f1db645decabedff72e45160df0a165e778d00f9ae9a699468e00c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c22331ee-7922-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727037566, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727037566, "uuid": "0f4495e1-4934-488f-a895-8dbab147cef9", "comment": "Malware payload", "value": "ce7af809f6fe74f1c8615ac9ae5d1dc7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727037566, "uuid": "66a5f787-ff61-487f-b9bf-21527d8b9cbd", "comment": "Malware payload", "value": "e16baad420de5889c72a0c9091743d33641cb568abf08518cda45bfb624ca9d8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727037566, "uuid": "298e8bcd-dcc9-41c3-9083-8161efe97962", "value": "T10A14D61AAF610FBBD86FCD3702A9070635CCA55722A43B793674C528F54A94F4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727037566, "uuid": "4a811d51-e8d3-4fe9-814c-23b08f534624", "value": "3072:xVTIj5eo8hlb+srAs8a631n99E/tzGo/+Bd0ozg/:xVkj5eo8hV+jN3ZzEIlG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727037566, "uuid": "aefaac50-6b3b-4667-83a5-b3c4d7c3242f", "value": 203584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727037566, "uuid": "0292a832-9e0e-4559-86f5-5cf3820aae6a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f90a365-7924-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727038152, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727038152, "uuid": "ab34a91c-3dbb-4d15-98ee-2a069beb0548", "comment": "Malware payload", "value": "fe00d6961e0dc7002c7c86bed9495c79", "object_relation": "md5", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727038152, "uuid": "f406fa4d-6c99-4b66-9f30-7cd3a59d68cc", "comment": "Malware payload", "value": "7756efa9a5914c3141479ab8de889d6aa48f25fed3997cc165fafd4b7ab54ff9", "object_relation": "sha256", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727038152, "uuid": "4465ec94-71dc-49d3-b70a-4a7ba7368162", "value": "T1C766283A9B4345CAC13FB57ADC927F3FF4286ADC4329592B6C0508BCA755791A8AD3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727038152, "uuid": "1762a97a-6005-4e28-b008-476b458b1595", "value": "92a00f4d0a4448266e9c638fdb1341b9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727038152, "uuid": "e0d49fe4-6627-41d8-b72e-aab4d408e394", "value": "98304:/cFVUyzLW9OiI+Iy5/djZQ5I8DMrq4d96dETCtOLZcWhNuRbyQ4:03U2C9K+IOFAI8Dyu01cWyRb74", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727038152, "uuid": "db948e71-6e47-4209-8d75-fa00eb74f5e4", "value": 6669118, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727038152, "uuid": "1bcd9808-fef4-4cfd-80a5-36dffc79f052", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "efa43a16-7924-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727038501, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727038501, "uuid": "5f2def5b-02b4-44e3-b333-9608f9418c91", "comment": "Malware payload", "value": "facb6e28781a69237b81e2833660181a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727038501, "uuid": "6b705c69-724e-4a3e-992d-a00940e1fa95", "comment": "Malware payload", "value": "3bd9d1114e4658dc3ea3c43b026c77fd41ac88bb50171943dfa5b43701cd7e9f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727038501, "uuid": "fbe61750-180e-4d39-b927-f58ccddaf30c", "value": "T1DB333B35B9355E27D8D4AA3A71F34758F1F61B4A24E8CA1E7C720E4EFB6094062173", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727038501, "uuid": "b2bb8daf-4e3d-4fa5-936d-62eafb3ff445", "value": "1536:7su2AzPove8KR2RzCxNOq7t+4lnfY2Jre:7MvQxoYnQure", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727038501, "uuid": "cf264f72-0ea6-43a2-a75c-7ed89ba5ebef", "value": 52152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727038501, "uuid": "8ad5aa5f-f7de-4470-9031-2a143c5b6c7e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "32a9d701-7925-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727038614, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727038614, "uuid": "fede797e-fa03-4023-b328-81f323d5f257", "comment": "Malware payload", "value": "e0fd8c8124c2e55229ae688fd896daf9", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727038614, "uuid": "901bc57e-09bc-4fb3-9663-8db15be05fcb", "comment": "Malware payload", "value": "654f3ce6197318259bc0c515af2bbd7cc6cc593b7f1957a0813191fb9638c343", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727038614, "uuid": "3a5d387a-421b-4a9d-b22e-df45e96f254c", "value": "T177911BED339513B20E90ED1EF369C42E28A3E0D44418EF29F969F5F475BAD429510A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727038614, "uuid": "d66d7edd-d2a0-42a8-adef-9ed417ab98ce", "value": "96:1xuBdxTVZVVcVjVwMBahBtLRJRVgR7RwHLgKVpQwEj4M5:G5BjERwMBahBtLRJRyR7RwHLgK3QwEj/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727038614, "uuid": "7b2d0234-757d-476f-8749-f46b4081f11a", "value": 4427, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727038614, "uuid": "a0a3a5a9-e376-42b8-8aa1-d841db846b47", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79c67b0a-7925-11ef-afe5-82aee05be84a", "comment": "Malware payload (CryptBot)", "timestamp": 1727038733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727038733, "uuid": "7875b4ec-97d7-424a-93b3-618ce67fb6a5", "comment": "Malware payload (CryptBot)", "value": "af196dcc95170ab54860051830a7d587", "object_relation": "md5", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727038733, "uuid": "e9cf2dc5-e54f-434d-9944-39e8430e86ad", "comment": "Malware payload (CryptBot)", "value": "a8a451b18143b192de1f6da327400e4fe0b629386d0c9dbf0d77e002e8ca6610", "object_relation": "sha256", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727038733, "uuid": "0c82ec73-4ae5-4ab8-8a11-03e91d84a7a9", "value": "T14566073B9B4345CAC12FB5BADC927F3FF4186ADC4329892B6C0508BCA755751A8AD3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727038733, "uuid": "81c1d92d-3907-434a-8d70-fc707403ae65", "value": "92a00f4d0a4448266e9c638fdb1341b9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727038733, "uuid": "3cdadc51-d25e-4f9c-8bc7-a06732e0a5f5", "value": "98304:Aevoj/6GK58KRA6t5oHkokMCtQYGDOdA8RcWwlLQmjnAoX:AwojiGK58+A6tyHkokjlb+LnjAoX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727038733, "uuid": "25807f13-b5b4-4ea0-98f6-00f4669424ee", "value": 6674740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727038733, "uuid": "82a3f6b7-4c6d-4f42-b1bb-f336a091e6ba", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5a3238d-7925-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727038833, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727038833, "uuid": "c0a94c4a-9c9c-4130-938c-ac3076a3049b", "comment": "Malware payload", "value": "6a3844f9b1810b956b0cbf19834af963", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727038833, "uuid": "712997d0-51fb-422e-b850-f4b749607ca1", "comment": "Malware payload", "value": "70f32b0ec34876ff89b699f052fd4b68a0516fc8c1687f426d4dea86f688a3cd", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727038833, "uuid": "2342f16f-683d-41da-99dd-489b152ea546", "value": "T136E31945FC518F27C6D251BBFB4E428D772A17A8D2EE720399255F24378B86B0E372", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727038833, "uuid": "27f4d53f-d1f5-4b26-8579-d573a5db75e7", "value": "3072:WijRp0XutfcoiHmOvq4FctbsJSAUTDVCvzn:Bj/tfB0rvq4FcVsJSLVCL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727038833, "uuid": "a31b98cb-d424-4792-a619-50212c5e69dd", "value": 150560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727038833, "uuid": "c601e2c8-af4a-4cab-b3be-b652b080f55d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727038833, "uuid": "bec50f6d-9430-42fd-8f44-75c4138d9c8d", "value": "t15bf0d442c4121ccc6fc98052806775368fed36b473061413f1cd6a8700638c0383dc", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e649725-7929-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727040432, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727040432, "uuid": "45369016-65c3-47f1-9601-26ee0704576e", "comment": "Malware payload", "value": "75664a6b62cb3bde4f26b10e6b72fca9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727040432, "uuid": "4d25fb72-8ee2-4bd0-8fb5-4292f281bd1b", "comment": "Malware payload", "value": "36703c809b6087716616ef55431a459ac24457ed4e594157f92aeece27d44ffa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727040432, "uuid": "e1bc2ba6-0f76-4f55-adcc-b87634fe2816", "value": "T1BEF30856F8819F11D5D156BAFE0E528E33131B78E2DE72029D246B347B8B8BB0E3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727040432, "uuid": "339257ab-0527-4fef-a3fa-0b04f23b6dc9", "value": "3072:vE3eVce69ThvGW3lOnX9T7RtaeN7pvOkU1xetjSIzD:DW9TIW3EXV7za+UkU+tjS8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727040432, "uuid": "ad78c67e-e104-44e3-bb52-f34e0e306c1e", "value": 162268, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727040432, "uuid": "f1e212fc-45e4-4467-8ab4-de347a15d485", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727040432, "uuid": "0c09091f-eff2-41a3-a08e-58d86736cc66", "value": "t159f02734ffa81e9e23c48421d267b4169bda66fd2b02384ac62c574b09677d6a4144", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "248af079-792a-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727040738, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727040738, "uuid": "d5f0c287-31c3-4683-bb33-8e276002d3c1", "comment": "Malware payload", "value": "7066623b440facb463fcec627edb57a7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727040738, "uuid": "44d759f2-a81c-47ca-990d-236b4cf17364", "comment": "Malware payload", "value": "53010605a5e4e06a83414b850e6097888db29856d9173238ebbb7d950aef8ec4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727040738, "uuid": "1a3f9c1d-241c-4808-83ae-2bb7d3c2d0e0", "value": "T1BCF33B46E6818F13C0D22B7ABADF425533239B64D3E763069928AFB43F4779E4E635", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727040738, "uuid": "61dd22f1-4a44-41b5-8e91-09ceaf726a4c", "value": "3072:m6p98wafP44lJ0FPDXa2gazIRHm+OTQpaux1wi2ez4+7FtpxM/9pQSi9:gwCzlJwXgazIRHm+9ph1x2d+7FFM/9pw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727040738, "uuid": "28c25825-20ea-483f-a962-4cd9a77205d2", "value": 170744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727040738, "uuid": "d1f545ad-5181-40e6-89a4-fb54c664b421", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727040738, "uuid": "fd3e99e1-4abf-4eaf-98e7-3e6b119679d1", "value": "t178317814d926d81b69b38ab4deec97f1592553325b903e328f3ec8cc1621041f21bd", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "927a3277-792a-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727040922, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727040922, "uuid": "4d390f80-41b5-495e-9513-f5b08e27ff76", "comment": "Malware payload", "value": "e4a9db49d1a45d283261cb62af499e8b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727040922, "uuid": "86a00932-1208-4c63-a614-b94e5f4968dd", "comment": "Malware payload", "value": "36ec4c1fb2d4c1e3bdc98dac9d8bd1deaf240260e10814c944839df0e0bd5a74", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727040922, "uuid": "90180402-3d0e-41dc-85c9-0f1416186020", "value": "T1B7E31A45FD908B26C5D261BBFB4E428D772A17A8D3EE320399256F21379B85B0F372", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727040922, "uuid": "6987cf7f-580f-4a63-b0c3-cea0431a7a65", "value": "3072:IEjUJGlnyAao4aj4Cr2ju3NTxcrXaUz5Yzn:9jU92lj4CrkSxxJUz5I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727040922, "uuid": "67f0a693-a157-43e6-bf72-c2d9e0ddbf61", "value": 150272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727040922, "uuid": "2147adf9-61d8-4a29-a82e-ed69ef538529", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727040922, "uuid": "50b036b6-d71d-4b76-9cb0-c331fb83ed74", "value": "t1abf02704c9060cec49c44062906e61264ddf70b16741245be5ae5b870123ad47a3cc", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4b2d2c0-792a-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727041060, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727041060, "uuid": "97735d15-6e45-4eb2-829a-78564d61da1e", "comment": "Malware payload", "value": "949f5119c4847d05a1b5069b4113be36", "object_relation": "md5", "Tag": [ { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727041060, "uuid": "cac9b846-456e-4cde-8e3c-b70dc9821d4a", "comment": "Malware payload", "value": "c44d06419d80bb4305ca3704c505947195b13ca76cebb8e016e9a9f889826ee4", "object_relation": "sha256", "Tag": [ { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727041060, "uuid": "fdf27962-9820-4521-8e36-124dd8481ac7", "value": "T14685331825262236CE5DA5B627D5EE5ABBF407924EC12B7284C306126DB75E03CBDC", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727041060, "uuid": "ab29dc07-1891-49a1-8c26-08be81efb1ca", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727041060, "uuid": "aaee114b-964c-4d76-8a8b-b32b4b4e00a5", "value": "49152:zFDniLYTxrI3YVJCXEXdBAGqxKxIexfQ:2O23YVYXWdBnqaIeN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727041060, "uuid": "b0dda579-09e3-4b96-b02e-1c3408577732", "value": 1851392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727041060, "uuid": "d70a2216-6896-4e67-a54c-275c07d2f4f4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "34775ebd-792b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727041194, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727041194, "uuid": "daf83aaa-b27f-41f7-ab81-fbce4f6b2910", "comment": "Malware payload", "value": "d242695dbd063c930802e7b651ffa515", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727041194, "uuid": "9eb68318-0dcc-42c6-bf35-49a8cba2384b", "comment": "Malware payload", "value": "d37f5ada0fe1fcb077bbdb77329ccc6e1976712c88d6108d24923e82e85923b9", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727041194, "uuid": "4874f66f-2028-4720-8368-2ead75b27666", "value": "T186159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727041194, "uuid": "9ce2d020-03c4-40ab-a8ad-ab428d535949", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727041194, "uuid": "a73c4931-5304-4e01-b4a3-43baaad916e3", "value": "24576:bqDEvCTbMWu7rQYlBQcBiT6rprG8aICT:bTvC/MTQYxsWR7aIC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727041194, "uuid": "786fd3dc-fe09-4ec0-bdec-264c572940f9", "value": 921600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727041194, "uuid": "6066fb13-988a-46c9-8610-fa4fb32d5fb3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0296cf10-7932-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727044117, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727044117, "uuid": "88058e33-09b8-46a6-818a-52ecca384527", "comment": "Malware payload", "value": "2647c5d8d03f7b9ecfa64196d1feec1a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727044117, "uuid": "6c12ca25-f839-44f4-a1e8-c179182f1c9d", "comment": "Malware payload", "value": "5df8499b0455da28e7dcad1c2be5fa5f778e864c06b138815588ec33fa28b2c5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727044117, "uuid": "4a9e59f9-4847-4fe6-b0a3-41c8893239a9", "value": "T1D8530A45FC418E53C6C562BBBA1F428D772653E8D2EE3207ED266F243B8A42F0D276", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727044117, "uuid": "5d44dec2-85de-49da-9055-85596e82f61c", "value": "768:pxVVqi4wHcVd4a+okvyu4JfD8ljICSTKNOX7WHD3k+xBjdEhge8/RnQA4wdxrwx3:rVV9gd4Fl4JL+pNCGI+5EhC//O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727044117, "uuid": "a10a2ac7-61ca-464d-87a8-6ad73ee6738e", "value": 63984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727044117, "uuid": "efaabb5f-4225-4d03-bdae-b140c9405d0c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727044117, "uuid": "5b581cdd-1a9c-4c25-8832-b5e7ea2cee10", "value": "t18be0686185980ddc67c40f0ac8ce230f78f9b0ec2f0448f6edbe5b9d04525c034192", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1db9cc07-7932-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727044162, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727044162, "uuid": "f6eeffd2-0056-4447-81fa-f5a01639c526", "comment": "Malware payload", "value": "0ca4cdf35c3b10f0a617206fe50d2813", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727044162, "uuid": "8ef2a299-b78c-4540-b7f9-622d865ff94f", "comment": "Malware payload", "value": "035bb464c26c644208c7aeed4dbe5019327a6830062a6c0328a9115048e06439", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727044162, "uuid": "051b0d79-8669-4ac0-b294-38cf9d53dc1a", "value": "T1FF437CA3CC372E84C06581B065658B785F63E650C65B4FFB6E01CA798087E9CFA1A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727044162, "uuid": "a2324bf3-5fa1-4df0-854c-383a8cd01ce8", "value": "768:Qik31UIwZfplxik7GaCSVhBBGg7kzgQgr1NqKlI7CoB9/1nfhCKEv4:Qi6PqfplxEaCSVgTg67VPtfhCKEQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727044162, "uuid": "e4c77985-d610-4cbb-bcde-75be16121c08", "value": 58800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727044162, "uuid": "7cdd0940-9944-4970-845b-d3320ff418db", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15a4ee47-7934-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727045008, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727045008, "uuid": "a6d7fc2c-3880-46d5-84a5-83aac8c6a209", "comment": "Malware payload", "value": "4b1e09591bab0f31df525fd34c23b491", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727045008, "uuid": "2243c8ee-79f4-475b-a4c9-5c0993e9d3b2", "comment": "Malware payload", "value": "8af355a7266b1694ae968dc0ebe654c978b8f37b851ba511f411c41d7e5e92a7", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727045008, "uuid": "c348fee5-cd5b-4059-8588-2f6cbcee0fd3", "value": "T15C9533844DE207AFD7D900B09FBB8AC02DB9CDB54C8A174BC12C65BB43DEA4A7A75D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727045008, "uuid": "34a33983-820c-4732-be7c-3d8ea260e26e", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727045008, "uuid": "6467fd84-ab66-4ef4-af30-f096793d32c0", "value": "49152:hNFVwU0+ApOqW3y2lV9AoQv5gp0Oba2tE0k1h9pYvA7:h7VP0rbW3XV9AoQBSbat1hfYvA7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727045008, "uuid": "50c26ad8-e59f-4488-8f0f-cdee71ff4278", "value": 1894912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727045008, "uuid": "784a2fe1-0519-4037-8819-9438e11c9df4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc719b00-7935-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727045771, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727045771, "uuid": "b938ec19-b85f-4d94-9056-c7080f49f765", "comment": "Malware payload", "value": "e19a1a74ca269e6ec719d2616481c93b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727045771, "uuid": "01e16f8f-81bc-47b8-a655-6ae6d4645973", "comment": "Malware payload", "value": "9d8a43469f68b11821b4b07e7997df3ff3880f5688b818f56595eeccb72d8a76", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727045771, "uuid": "ddd459cb-57ee-4611-a250-4fd0d73405dd", "value": "T15374391A61F0BD12EEA607355F7D93D86BAFBC525E39936D21403A1F1A732B0F9123", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727045771, "uuid": "c8529092-2a21-44b7-8931-5b7c1f1c190e", "value": "cf87f64d024c19bf2de7c4d8069721fc", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727045771, "uuid": "bd9173f3-852e-4ae7-8e5c-5c995fcdad50", "value": "3072:TSJL7ualeNNnSGUgYAjvOTib+ybHIdKAiniGlK5VaRF0HyMPL+d5RQlssAxaxcqc:eL7FoNfLJvMy7IdKTdK5kRIXFel", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727045771, "uuid": "63cbfce9-e15b-4c75-8ad6-6a264e4aa221", "value": 342528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727045771, "uuid": "c9c791a5-376d-479f-b80b-0367ca21ead7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8e248ad2-7936-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727046069, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727046069, "uuid": "dd1afe45-0d26-4d1f-b935-704873566ed8", "comment": "Malware payload", "value": "ee1dc36e47e41398e166f5d8566ad60e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727046069, "uuid": "162bfbed-d731-4c1c-8e3d-33ffb0f72f8c", "comment": "Malware payload", "value": "f06b04c41a3be3c2fe3705e0f815a754c4fc176529f425ea9aea7b40d15b3f6f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727046069, "uuid": "c0517424-24e0-45db-9454-45952dbf4f4c", "value": "T1EB64390A21F0BD11EE6647355F7997D87AAEBC625F35937D21083A5F0A732B0F5023", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727046069, "uuid": "78317078-a5a1-409b-ba2a-3e4b7f167657", "value": "cf87f64d024c19bf2de7c4d8069721fc", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727046069, "uuid": "b87cbf05-f96b-42f0-acea-97f6a03ba212", "value": "3072:9LFLaRmbF6KKBqAsp7GMX6zTEMVsrEp9YUHOhC1DO9+d5I0lssAxaxyvesUf7J:9LF+cR6PBqD7GMX8E2seyUuhV8y5el", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727046069, "uuid": "4b40cc62-3c56-40bc-9ab1-52f325f6e60c", "value": 312320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727046069, "uuid": "95a0933a-4646-4eef-a8b6-50a081bf214c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52ff4e0d-7937-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727046399, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727046399, "uuid": "a553ed80-5a5b-4e0f-a791-63f8943682bd", "comment": "Malware payload", "value": "22ab8e77d22fb2b386f04f3962e52ffc", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727046399, "uuid": "6f8cd567-24b2-4f19-b74e-390fd9a075e2", "comment": "Malware payload", "value": "9ad78b9de35fadfbc0bda80a40391e2823e3bd31c8a35e1f60e5d8d7c817605c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727046399, "uuid": "9b67a674-f04e-4a88-89e7-67d24db2be2b", "value": "T1628533642F7BC2FBD6294A7205F44CEE6338A91735348A742C210DE5AC536BB706BC", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727046399, "uuid": "96dcf309-eda8-4b87-bb5e-1bba2fbda4bc", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727046399, "uuid": "fd610866-6981-4c6b-8a4a-90f11f2a71e8", "value": "24576:w5+AWdX3pTlqw+rPWO+SOmnOoGNLu7YRzc4BnxCt/AXUyAoJD6WVDgQbwk8rT:e+P3pkwEPUSydNLOecSAt4XT6/J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727046399, "uuid": "5bd15ab1-8100-4924-af68-8a84763ce7b0", "value": 1794048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727046399, "uuid": "b32b38d2-a7c2-41b6-8933-d3cda8557fac", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d19f3586-7933-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727047555, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727047555, "uuid": "a869dec2-f333-4b7b-80fd-c727e1b03cbe", "comment": "Malware payload", "value": "be8baf8802bec87021d9e5431ae8d49f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727047555, "uuid": "dff4513e-e85c-4701-8e7e-65369acdd3e1", "comment": "Malware payload", "value": "b203adb48db947f9e3fd62cb127d3c1ee247793d90f50858155b218ed76606c7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727047555, "uuid": "071e797e-789e-4374-b1d4-1e7c1c358964", "value": "T1FF159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727047555, "uuid": "02785631-25fd-4738-8278-c7db0ea56ff3", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727047555, "uuid": "d8b19bb5-594f-4377-8e30-55a961e528cb", "value": "12288:mqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgaeTq:mqDEvCTbMWu7rQYlBQcBiT6rprG8aGq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727047555, "uuid": "9a1cc5f1-ce9b-49e8-b5a7-1222ab10c04a", "value": 922112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727047555, "uuid": "d1f82994-70d9-432c-a556-bdb55f3afe64", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726963270, "uuid": "c6212407-7875-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.47.208:33274/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726963387, "uuid": "0bd85b81-7876-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.80.57:45585/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726963390, "uuid": "0d9a1450-7876-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.226.219:46686/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726963397, "uuid": "11e9390b-7876-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.105.44:38720/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726963401, "uuid": "14396081-7876-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.115.90:48267/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726963402, "uuid": "14da0be8-7876-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.27.110:56874/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726963446, "uuid": "2ef9b367-7876-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.236.212:53539/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726963446, "uuid": "2f684cd2-7876-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.209.150:50459/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726963448, "uuid": "309a68e4-7876-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.114.212:56016/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726963451, "uuid": "3251dbb0-7876-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.189.152:46490/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726963455, "uuid": "34557ed6-7876-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.126.252:58058/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726963456, "uuid": "3505b49b-7876-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.218.125:47049/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726963464, "uuid": "39e57641-7876-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.203.72.246:56001/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726963479, "uuid": "42fb7c3d-7876-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.112.100.102:46640/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726963481, "uuid": "43dc81b8-7876-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.77.172:48974/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726963520, "uuid": "5b0a2d62-7876-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.85.175:43441/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726963526, "uuid": "5ef21014-7876-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.92.197:56670/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726963567, "uuid": "773e4695-7876-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.2.105.38:44931/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726963685, "uuid": "bda17c1c-7876-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.166.43.214:42242/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726963745, "uuid": "e1a195a8-7876-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.230.190:54253/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726963808, "uuid": "07028ada-7877-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.191.2:57960/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726963865, "uuid": "290e9d3a-7877-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.95.5.15:58190/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726963931, "uuid": "5001e032-7877-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.158.249:42694/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726963931, "uuid": "50298b7f-7877-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.13.68:35062/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726964045, "uuid": "94715341-7877-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.162.142:43650/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726964226, "uuid": "00061e72-7878-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.181.177:39161/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726964286, "uuid": "23f38c97-7878-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.87.24:43077/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726964287, "uuid": "24460f93-7878-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.100.153:48561/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726964346, "uuid": "47898f43-7878-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.19.221:39114/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726964465, "uuid": "8edb913d-7878-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.179.246:47356/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726964466, "uuid": "8ef44a81-7878-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.101.215:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726964466, "uuid": "8f4d5c47-7878-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.89.29:56978/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726964466, "uuid": "8f6871ae-7878-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.223.90:40506/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726964536, "uuid": "b920e274-7878-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.203.34:40103/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726964766, "uuid": "41def0d3-7879-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.37.217:48714/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726964945, "uuid": "aca7d73f-7879-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.47.208:33274/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726964959, "uuid": "b4e6d3c1-7879-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.149.178:42347/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726965012, "uuid": "d4aec246-7879-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.172.53:35965/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726965039, "uuid": "e4e7ac6f-7879-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.141.219:35654/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726965188, "uuid": "3d9736b4-787a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.92.197:56670/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726965252, "uuid": "635e69f6-787a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.115.100:34156/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726965544, "uuid": "11ce9532-787b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.162.142:43650/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726965606, "uuid": "36f13012-787b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.166.47:54870/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726965665, "uuid": "59d88c66-787b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.100.153:48561/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726965859, "uuid": "cda0e047-787b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.157.146:46368/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726965914, "uuid": "ee5b07c9-787b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.122.212:52658/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726966025, "uuid": "30390ba3-787c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.223.90:40506/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726966149, "uuid": "7a60549a-787c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.167.219:34128/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726966207, "uuid": "9d253255-787c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.141.219:35654/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726966265, "uuid": "bf700289-787c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.236.37:38737/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726966265, "uuid": "bfbdca17-787c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.173.128:53462/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726966506, "uuid": "4f497c7b-787d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.157.146:46368/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726966565, "uuid": "722ba225-787d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.37.217:48714/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726966640, "uuid": "9edefbea-787d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.133.90:52573/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726966668, "uuid": "af668f63-787d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.23.73:49229/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726966686, "uuid": "ba29760c-787d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.254.179:38788/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726967046, "uuid": "91066883-787e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.123.101.156:48112/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726967046, "uuid": "910bf961-787e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.101.27:53217/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726967357, "uuid": "4a8b215d-787f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.168.25:44462/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726967466, "uuid": "8b416e97-787f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.114.23:42563/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726967646, "uuid": "f6a6f1f8-787f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.113.205:50731/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726967765, "uuid": "3d9a1dfe-7880-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.100.78:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726967766, "uuid": "3e5225e9-7880-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.186.181:55020/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726967825, "uuid": "6182b480-7880-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.236.37:38737/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726967826, "uuid": "61c0fb45-7880-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.98.196.58:59949/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726967886, "uuid": "85b726ca-7880-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.25.28:52727/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726967945, "uuid": "a8cf1921-7880-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.173.128:53462/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726968076, "uuid": "f6b5bbe3-7880-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.86.123:36082/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726968135, "uuid": "1a2dccba-7881-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.30.176:52630/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726968186, "uuid": "38384e53-7881-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.23.73:49229/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726968266, "uuid": "685aa726-7881-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.75.39:46467/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726968309, "uuid": "81c5ceac-7881-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.132.164.78:33200/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726968545, "uuid": "0e51de39-7882-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.132.72.222:48681/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726968545, "uuid": "0eb11ed2-7882-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.79.77:46705/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726968611, "uuid": "358b0597-7882-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.22.145:60598/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726968727, "uuid": "7aa34a58-7882-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.123.101.156:48112/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726968847, "uuid": "c289ea12-7882-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.168.25:44462/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726968965, "uuid": "0906782c-7883-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.116.199:52583/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726969206, "uuid": "988e03fc-7883-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.114.23:42563/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726969206, "uuid": "98934c14-7883-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.25.28:52727/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726969335, "uuid": "e532ffdc-7883-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.124.186:33402/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726969386, "uuid": "03cd2055-7884-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.22.145:60598/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726969507, "uuid": "4c0b62fb-7884-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.255.47.159:40004/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726969508, "uuid": "4c2c4a0f-7884-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.116.83:40607/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726969686, "uuid": "b63e3761-7884-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.100.214:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726969745, "uuid": "d9aad30b-7884-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.132.164.78:33200/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726969807, "uuid": "fe845647-7884-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.220.181.232:39148/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726969865, "uuid": "211cc441-7885-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.79.77:46705/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726969866, "uuid": "21947ad4-7885-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.41.119:52985/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726969883, "uuid": "2bd774a8-7885-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.60.225.34:33014/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726969925, "uuid": "4536e206-7885-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.202.92.145:53779/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726970110, "uuid": "b389a269-7885-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.230.45:50195/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726970409, "uuid": "65931013-7886-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.252.43:55417/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726970524, "uuid": "a9f03e3f-7886-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.236.150:48263/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726970586, "uuid": "ceb0691d-7886-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.225.124.6:39001/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726970649, "uuid": "f47e42c6-7886-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.17.225:39564/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726970785, "uuid": "455df0eb-7887-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.138.197:45071/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726970946, "uuid": "a57480b6-7887-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.99.66.177:33042/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726970947, "uuid": "a5e421f5-7887-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.90.166:51261/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726971008, "uuid": "cab3e5f2-7887-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.124.186:33402/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726971009, "uuid": "caf3f4dd-7887-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.165.83:37955/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726971011, "uuid": "cc21105a-7887-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.165.227:50010/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726971308, "uuid": "7d1c615a-7888-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.41.52:38767/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726971425, "uuid": "c3554062-7888-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.230.45:50195/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726971426, "uuid": "c382bb59-7888-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.110.168:47569/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726971546, "uuid": "0aefee90-7889-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.108.16:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726971726, "uuid": "76a48dc1-7889-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.131.190:56568/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726971727, "uuid": "76c768f8-7889-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.233.136:52670/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726971739, "uuid": "7e575375-7889-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.138.40:46263/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726971862, "uuid": "c79cfe0d-7889-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.225.5:54144/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726971967, "uuid": "05dd23b4-788a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.187.146:49856/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726971967, "uuid": "05ffcc90-788a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.98.185:48637/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726971980, "uuid": "0e25fb41-788a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.26.219:38907/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726972103, "uuid": "56ed3869-788a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.68.205:38244/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726972210, "uuid": "970916e4-788a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.184.55:34549/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726972213, "uuid": "98ca58a3-788a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.14.24:58929/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726972269, "uuid": "b9db0946-788a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.17.225:39564/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726972502, "uuid": "44c93940-788b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.170.148:39990/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726972583, "uuid": "754371ba-788b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.62.63:35086/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726972625, "uuid": "8e8ce55f-788b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.34.235:50792/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726972687, "uuid": "b2fc77bd-788b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.202.64.9:41033/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726972746, "uuid": "d685f90a-788b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.33.157:58237/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726972926, "uuid": "41aae5ed-788c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.89.140:43610/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726972926, "uuid": "41e1ae85-788c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.80.152:34917/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726972985, "uuid": "6528c8bc-788c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.90.166:51261/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726972986, "uuid": "653d5397-788c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.110.168:47569/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726973107, "uuid": "ad90dfad-788c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.48.3:51169/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726973108, "uuid": "ae506b88-788c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.41.254:53197/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726973166, "uuid": "d08aaf9d-788c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.129.19:45293/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726973225, "uuid": "f428b509-788c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.164.134:42458/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726973345, "uuid": "3bad2e83-788d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.54.65:37939/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726973466, "uuid": "836ff825-788d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.131.190:56568/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726973466, "uuid": "83b5bd43-788d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.26.219:38907/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726973466, "uuid": "83bdf5df-788d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.211.120:51333/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726973526, "uuid": "a777f95c-788d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.142.178:50307/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726973585, "uuid": "ca4e8e86-788d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.161.147:36466/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726973599, "uuid": "d2e6a3f5-788d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.119.152:56643/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726973645, "uuid": "ee595526-788d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.252.218:54592/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726973706, "uuid": "12c53761-788e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.99.201.105:37082/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726973765, "uuid": "359c43ff-788e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.98.185:48637/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726973765, "uuid": "35d9f70c-788e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.13.18:50642/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726973826, "uuid": "59dc45b2-788e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.138.40:46263/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726973948, "uuid": "a2f46a28-788e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.97.235:34748/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726974008, "uuid": "c6be9eed-788e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.99.66.177:33042/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726974065, "uuid": "e8a1774c-788e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.34.235:50792/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726974185, "uuid": "30645d65-788f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.99.65:37578/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726974201, "uuid": "39cc27bd-788f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.22.231:39910/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726974218, "uuid": "43fcf4c4-788f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.79.50:47197/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726974219, "uuid": "4448b993-788f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.33.134.111:53634/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726974219, "uuid": "4455d8d9-788f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.208.233.212:60808/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726974246, "uuid": "54381d3b-788f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.33.157:58237/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726974247, "uuid": "55386fe0-788f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://67.214.245.59:45002/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726974307, "uuid": "790bd9a7-788f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.164.134:42458/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726974307, "uuid": "791292f2-788f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.62.63:35086/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726974312, "uuid": "7bb72a2d-788f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.85.65:40523/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726974367, "uuid": "9c737777-788f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.252.138:41094/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726974426, "uuid": "c0113190-788f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.230.67:35781/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726974486, "uuid": "e3b29682-788f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.41.254:53197/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726974487, "uuid": "e3f327df-788f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.62.77.33:38719/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726974545, "uuid": "06f81ff1-7890-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.91.213:41143/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726974548, "uuid": "08a8ceb4-7890-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.80.152:34917/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726974608, "uuid": "2c28ec8c-7890-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.19.229:48284/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726974608, "uuid": "2c469b29-7890-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.14.24:58929/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726974666, "uuid": "4ee73365-7890-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.127.168:58475/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726974847, "uuid": "bb010809-7890-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.179.150.140:59280/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726974907, "uuid": "de8abdc9-7890-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.119.152:56643/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726974907, "uuid": "de95fe92-7890-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.129.19:45293/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726974990, "uuid": "0ffed279-7891-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.247.229:60649/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726975086, "uuid": "4948b0d6-7891-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.208.123:40559/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726975090, "uuid": "4b5a79f3-7891-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.142.178:50307/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726975146, "uuid": "6ca8b8a7-7891-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.161.147:36466/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726975146, "uuid": "6d140747-7891-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.222.198:38910/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726975207, "uuid": "912b60a2-7891-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.13.18:50642/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726975208, "uuid": "91bebd09-7891-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.27.171:36956/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726975326, "uuid": "d81d0c5f-7891-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.99.201.105:37082/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726975507, "uuid": "445add46-7892-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.90.236:38322/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726975565, "uuid": "66cea8b7-7892-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.230.67:35781/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726975567, "uuid": "6820d385-7892-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.109.251.10:48394/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726975625, "uuid": "8a6d848f-7892-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.85.65:40523/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726975685, "uuid": "ae259154-7892-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.93.196:58612/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726975686, "uuid": "ae956132-7892-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.97.235:34748/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726975813, "uuid": "fa39aed3-7892-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.252.138:41094/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726975813, "uuid": "fa6aa582-7892-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.20.227:57767/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726975868, "uuid": "1b814891-7893-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.19.62:37409/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726975929, "uuid": "3fca2254-7893-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://67.214.245.59:45002/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726976108, "uuid": "aa5171a0-7893-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.91.213:41143/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726976167, "uuid": "cd816334-7893-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.46.89:41814/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726976526, "uuid": "a32ee175-7894-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.179.150.140:59280/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726976585, "uuid": "c6bc9d50-7894-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.101.209:45786/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726976645, "uuid": "ea9df360-7894-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.247.229:60649/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726976825, "uuid": "55a85562-7895-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.222.198:38910/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726976886, "uuid": "7a05df94-7895-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.163.4:48493/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726976945, "uuid": "9d31d39d-7895-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.89.85:54433/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726976945, "uuid": "9d3c2ef1-7895-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.93.196:58612/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726976957, "uuid": "a45f26c0-7895-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.59.94:48497/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726977007, "uuid": "c1e9f414-7895-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.27.171:36956/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726977011, "uuid": "c475b344-7895-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.109.251.10:48394/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726977016, "uuid": "c78751b0-7895-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.27.159:44162/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726977035, "uuid": "d299d40c-7895-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.90.236:38322/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726977185, "uuid": "2c732ad9-7896-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.135.114:47889/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726977185, "uuid": "2c8b747a-7896-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.186.100:38172/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726977285, "uuid": "68164cfd-7896-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.115.65:55013/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726977366, "uuid": "984272a5-7896-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.182.126:45633/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726977366, "uuid": "9853fc57-7896-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.166.24:46508/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726977370, "uuid": "9a9a3ef5-7896-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.123.113:43706/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726977485, "uuid": "df1caa54-7896-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.19.62:37409/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726977621, "uuid": "30567403-7897-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.98.255:38351/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726977726, "uuid": "6e77aae7-7897-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.40.159:55230/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726977966, "uuid": "fdbd1edb-7897-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.152.89:40532/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726978086, "uuid": "4570be59-7898-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.236.117:44420/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726978173, "uuid": "79773924-7898-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.65.210:58178/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726978179, "uuid": "7cb8e3d7-7898-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.201.223:39862/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726978207, "uuid": "8d81a5e9-7898-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.101.209:45786/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726978265, "uuid": "afff9804-7898-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.64.37:36367/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726978386, "uuid": "f7e46704-7898-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.59.94:48497/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726978445, "uuid": "1b2177da-7899-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.230.65:47450/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726978445, "uuid": "1b68c454-7899-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.154.127:53154/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726978452, "uuid": "1fb7c10b-7899-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.60.95:37067/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726978506, "uuid": "3fc6ada9-7899-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.46.89:41814/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726978506, "uuid": "3fe24b31-7899-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.193.54:38708/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726978506, "uuid": "3fe69225-7899-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.186.100:38172/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726978512, "uuid": "43164ca3-7899-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.116.242:60327/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726978625, "uuid": "867b509d-7899-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.103.224:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726978625, "uuid": "86a9eca3-7899-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.135.114:47889/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726978625, "uuid": "86c7428b-7899-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.163.4:48493/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726978625, "uuid": "86d3aded-7899-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.29.8:57992/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726978746, "uuid": "cea26baa-7899-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.9.1:37472/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726978877, "uuid": "1c890051-789a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.119.193:48009/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726978925, "uuid": "397adea9-789a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.115.65:55013/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726979046, "uuid": "81392842-789a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.54.10:51109/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726979060, "uuid": "8a1bb582-789a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.123.113:43706/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726979165, "uuid": "c88bbb99-789a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.179.232.47:53664/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726979165, "uuid": "c88eb1a1-789a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.62.151:38683/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726979182, "uuid": "d28104e7-789a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.2.108.109:58195/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726979229, "uuid": "ee8b31f7-789a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.119.24:39655/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726979409, "uuid": "59a472c0-789b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.233.102:42731/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726979409, "uuid": "59b325ed-789b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.164.239:39294/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726979525, "uuid": "9f200315-789b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.64.37:36367/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726979525, "uuid": "9f49f5c4-789b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.240.31:59659/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726979528, "uuid": "a0d46e19-789b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.213.58:59245/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726979646, "uuid": "e75efc16-789b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.14.145:33171/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726979766, "uuid": "2e6e8cd8-789c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.236.117:44420/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726979767, "uuid": "2f0b1700-789c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.40.159:55230/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726979826, "uuid": "5273cd34-789c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.65.210:58178/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726980006, "uuid": "bdb5b02a-789c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.230.65:47450/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726980006, "uuid": "bdd2b476-789c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.193.54:38708/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726980006, "uuid": "bdd65d0b-789c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.29.8:57992/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726980185, "uuid": "285b09a5-789d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.95.4.250:38668/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726980306, "uuid": "70ae0efa-789d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.182.185:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726980306, "uuid": "70bb4936-789d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.116.242:60327/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726980426, "uuid": "b847b7ae-789d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.98.255:38351/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726980606, "uuid": "23151ac1-789e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.54.10:51109/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726980607, "uuid": "23d13515-789e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.20.227:57767/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726980634, "uuid": "345030e1-789e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.179.232.47:53664/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726980665, "uuid": "46c8e3ab-789e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.119.193:48009/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726980724, "uuid": "69eb4ed9-789e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.228.179:58644/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726980845, "uuid": "b1f20a94-789e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.120.62:47781/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726980846, "uuid": "b25d4983-789e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.213.58:59245/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726980907, "uuid": "d6f26493-789e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.25.234:45120/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726980929, "uuid": "e3c5a866-789e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.31.251:59730/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726980966, "uuid": "f9b55a7f-789e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.62.151:38683/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726980966, "uuid": "f9b87dee-789e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://betrothrow.art/files/file.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726980966, "uuid": "f9edbf3b-789e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://saras.freehost.io/wget.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "Tsunami", "colour": "#cb6771", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726980966, "uuid": "f9f7c6d3-789e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.158.102.191:1432/1.txt", "Tag": [ { "name": "downloader", "colour": "#9d9bda", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726980967, "uuid": "fab555f6-789e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.158.102.191:1432/svchost.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726980969, "uuid": "fbd85c9d-789e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.160.162:48634/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981023, "uuid": "1c290260-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://blathertom.info/files/file.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981025, "uuid": "1d33d176-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.14.148:43320/bin.sh", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981025, "uuid": "1d573f40-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.informacionoportuna.com/wp-content/uploads/2024/09/dllskyfal.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981025, "uuid": "1d581f51-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.informacionoportuna.com/wp-content/uploads/2024/07/Facvremcof-i-r-m-a764638479850494399.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981026, "uuid": "1d66257f-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.informacionoportuna.com/wp-content/uploads/2024/09/7777.txt", "Tag": [ { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981026, "uuid": "1d738b71-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.202.233.169/Tak/Reg/Marz/SH/J1.txt", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981026, "uuid": "1d971175-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.202.233.169/Tak/Reg/Marz/SH/RTJ.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981026, "uuid": "1da30375-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.202.233.169/Tak/Reg/Marz/SH/RRTT.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981026, "uuid": "1da7188e-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.informacionoportuna.com/wp-content/uploads/2024/09/66azul.txt", "Tag": [ { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981026, "uuid": "1ddea83f-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.202.233.169/Tak/Reg/Marz/SGRH/K1R.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981026, "uuid": "1deb289f-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://8.130.82.167/qq-1950222243-x%e2%80%aexcod.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981027, "uuid": "1e0fb6ed-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.202.233.169/Tak/Reg/Marz/ENVS/DS1.txt", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981027, "uuid": "1e2bbfd0-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.202.233.169/Tak/Reg/Marz/SH/RF.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981027, "uuid": "1e4532ae-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.202.233.169/Tak/Reg/Marz/SH/RS.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981054, "uuid": "2e35c307-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.176.49:45924/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981065, "uuid": "34a472fe-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.105.248.135/sostener.vbs", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981084, "uuid": "408b7114-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.informacionoportuna.com/wp-content/uploads/2024/07/555555-2.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981085, "uuid": "409baafa-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.informacionoportuna.com/wp-content/uploads/2024/06/skyfall-Dll.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981085, "uuid": "40ac736e-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.informacionoportuna.com/wp-content/uploads/2024/08/hbmAkIo.txt", "Tag": [ { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981085, "uuid": "40c263aa-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.informacionoportuna.com/wp-content/uploads/2024/07/7puro.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981085, "uuid": "40c7d508-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.informacionoportuna.com/wp-content/uploads/2024/08/test11.txt", "Tag": [ { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981085, "uuid": "40d03115-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.informacionoportuna.com/wp-content/uploads/2024/08/rreemmccoosspro.txt", "Tag": [ { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981085, "uuid": "40d4a433-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.informacionoportuna.com/wp-content/uploads/2024/07/555555.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981085, "uuid": "40e6e30b-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.informacionoportuna.com/wp-content/uploads/2024/08/mmmkpdr.txt", "Tag": [ { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981085, "uuid": "40e6e74d-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.informacionoportuna.com/wp-content/uploads/2024/08/INFORREMCOS.txt", "Tag": [ { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981085, "uuid": "40e6f5b1-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.informacionoportuna.com/wp-content/uploads/2024/07/remcos.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981085, "uuid": "40e7a2d8-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.informacionoportuna.com/wp-content/uploads/2024/08/PORFINES.txt", "Tag": [ { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981085, "uuid": "40e7ae83-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.informacionoportuna.com/wp-content/uploads/2024/08/jiohdaA.txt", "Tag": [ { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981085, "uuid": "40e7f849-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.informacionoportuna.com/wp-content/uploads/2024/06/SkyFall-Pe.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981085, "uuid": "40e805f7-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.informacionoportuna.com/wp-content/uploads/2024/08/ansy.txt", "Tag": [ { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981085, "uuid": "40ed2855-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.informacionoportuna.com/wp-content/uploads/2024/08/4.txt", "Tag": [ { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981085, "uuid": "40efff7c-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.informacionoportuna.com/wp-content/uploads/2024/09/pesky.txt", "Tag": [ { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981085, "uuid": "40f29ba9-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.informacionoportuna.com/wp-content/uploads/2024/08/COMANDO.txt", "Tag": [ { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981085, "uuid": "40fb191c-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.informacionoportuna.com/wp-content/uploads/2024/08/NOCHEDC.txt", "Tag": [ { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981085, "uuid": "40fb36ee-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.informacionoportuna.com/wp-content/uploads/2024/07/555555-1.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981085, "uuid": "40fbe6e4-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.informacionoportuna.com/wp-content/uploads/2024/08/ckFSSaS.txt", "Tag": [ { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981085, "uuid": "40fc0337-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.informacionoportuna.com/wp-content/uploads/2024/07/qqaass.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981085, "uuid": "40fd22a3-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.informacionoportuna.com/wp-content/uploads/2024/06/777TE.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981085, "uuid": "40fd8733-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.informacionoportuna.com/wp-content/uploads/2024/07/RRREMCOS.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981085, "uuid": "40fda5a0-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.informacionoportuna.com/wp-content/uploads/2024/08/666666.txt", "Tag": [ { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981085, "uuid": "41049891-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.informacionoportuna.com/wp-content/uploads/2024/08/oIdrdda.txt", "Tag": [ { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981085, "uuid": "410886d3-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.informacionoportuna.com/wp-content/uploads/2024/08/remcosserver.txt", "Tag": [ { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981085, "uuid": "410bd162-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.informacionoportuna.com/wp-content/uploads/2024/08/RUSOREMCOS.txt", "Tag": [ { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981085, "uuid": "410c0676-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.informacionoportuna.com/wp-content/uploads/2024/08/dc.txt", "Tag": [ { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981085, "uuid": "410ec25b-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.informacionoportuna.com/wp-content/uploads/2024/08/TOMAS7788.txt", "Tag": [ { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981085, "uuid": "410ecf9f-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.informacionoportuna.com/wp-content/uploads/2024/08/yar.txt", "Tag": [ { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981087, "uuid": "4209ba01-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.informacionoportuna.com/wp-content/uploads/2024/08/dIkocoe.txt", "Tag": [ { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981095, "uuid": "468f499e-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.178.171:35110/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981146, "uuid": "657d1178-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.242.51:40477/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981208, "uuid": "8a03d0ec-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.205.8:52994/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981267, "uuid": "ad893d27-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.90.104:46725/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981329, "uuid": "d2105f5d-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.165.125.214:38808/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981385, "uuid": "f3cd0f90-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.240.31:59659/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981385, "uuid": "f3d66a2e-789f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.164.239:39294/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981508, "uuid": "3cccebc7-78a0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.43.37:57228/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981565, "uuid": "5eb995ff-78a0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.165.125.214:38808/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981565, "uuid": "5edb80b0-78a0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.25.234:45120/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981627, "uuid": "83fdf3ec-78a0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.42.208:60850/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981686, "uuid": "a7237202-78a0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.142.165:40368/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981820, "uuid": "f71424e6-78a0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.220.250:43573/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981925, "uuid": "35afd56b-78a1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.119.24:39655/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726981991, "uuid": "5d217486-78a1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.38.219:46527/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726982046, "uuid": "7d8b5f02-78a1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.192.175:52769/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726982108, "uuid": "a2c668e6-78a1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.83.73:47568/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726982165, "uuid": "c470fb26-78a1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.9.1:37472/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726982224, "uuid": "e7f43c3b-78a1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-26ee9be236b54d0cb1b570a203543b93.r2.dev/obana.txt", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726982226, "uuid": "e9016965-78a1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.176.49:45924/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726982227, "uuid": "e9420426-78a1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.33.63:59035/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726982347, "uuid": "30d66d67-78a2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.178.171:35110/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726982374, "uuid": "411687ed-78a2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.22.231:39910/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726982407, "uuid": "548ef6b2-78a2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.239.77.159:58339/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726982466, "uuid": "77e36b64-78a2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.120.62:47781/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726982466, "uuid": "780b267a-78a2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.90.104:46725/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726982526, "uuid": "9b88f194-78a2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.101.28:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726982585, "uuid": "bee0d21c-78a2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.14.148:43320/i", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726982585, "uuid": "bf26eb1e-78a2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.94.25:60590/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726982766, "uuid": "2a85433f-78a3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.164.183:33801/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726982826, "uuid": "4e794834-78a3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.86.163:35434/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726982885, "uuid": "718ee5ef-78a3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.228.179:58644/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726982901, "uuid": "7b3e7083-78a3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.61.80:52864/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726983128, "uuid": "024e443b-78a4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.70.196:36632/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726983186, "uuid": "2571bb2d-78a4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.84.200:40224/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726983313, "uuid": "7095195f-78a4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.184.221:47836/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726983365, "uuid": "8fd3ddde-78a4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.132.72.222:48681/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726983607, "uuid": "1fec0abf-78a5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.83.73:47568/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726983666, "uuid": "43555651-78a5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.252.203.229:45898/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726983786, "uuid": "8b012d6c-78a5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.93.50:48425/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726983845, "uuid": "ae396023-78a5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.22.231:39910/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726983908, "uuid": "d38eaa68-78a5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.68.130.226:55469/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726984214, "uuid": "89d4a428-78a6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.136.214:59007/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726984266, "uuid": "a8aaec2b-78a6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.164.183:33801/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726984266, "uuid": "a8ac0aa1-78a6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.61.80:52864/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726984414, "uuid": "0114682b-78a7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.77.245:53824/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726984445, "uuid": "1368f0c2-78a7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.100.79:58437/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726984445, "uuid": "13d7c234-78a7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.33.63:59035/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726984454, "uuid": "1901a71f-78a7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.85.10:56527/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726984506, "uuid": "381eb42d-78a7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.70.196:36632/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726984507, "uuid": "387f507f-78a7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.46.7:59462/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726984686, "uuid": "a31414eb-78a7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.112.36:51175/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726984808, "uuid": "ebc20cd3-78a7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.189.231:37038/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726984867, "uuid": "0ee06467-78a8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.229.174.152:50866/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726984869, "uuid": "10542271-78a8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.93.150:35074/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726984926, "uuid": "321e7b45-78a8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.36.99:41269/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726984983, "uuid": "546ac43c-78a8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.43.205:57879/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726984986, "uuid": "55e979e8-78a8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.161.215:44542/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726984990, "uuid": "58495fcd-78a8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.247.24.46:48490/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726984991, "uuid": "5941f631-78a8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.247.54.125:58473/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726985005, "uuid": "61778511-78a8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.197.112.246:51842/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726985013, "uuid": "6636b7c2-78a8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.15.254.184:48794/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726985018, "uuid": "68ec7924-78a8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.102.180.162:36517/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726985020, "uuid": "6a2701fe-78a8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.77.75.249:47815/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726985023, "uuid": "6bce1ac0-78a8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.204.42:44172/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726985180, "uuid": "c9c3602a-78a8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.150.152:42450/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726985225, "uuid": "e466aeaf-78a8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.177.131:38149/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726985286, "uuid": "08f05e65-78a9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.39.85:56147/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726985586, "uuid": "bbefff1d-78a9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.252.203.229:45898/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726985646, "uuid": "df5cd683-78a9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.84.200:40224/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726985647, "uuid": "dfdb27ab-78a9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.140.48:53881/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726985708, "uuid": "044f5a2c-78aa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.181.250:33482/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726985713, "uuid": "077f1169-78aa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.39.82:59733/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726985765, "uuid": "2698de0c-78aa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.46.7:59462/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726985773, "uuid": "2afad3ff-78aa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.63.77:53063/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726985826, "uuid": "4a97b11a-78aa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.118.135.222:58154/i", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726986008, "uuid": "b738fe5a-78aa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.192.132:56290/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726986065, "uuid": "d943574f-78aa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.142.14:40214/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726986065, "uuid": "d94e160b-78aa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.50.153:37114/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726986066, "uuid": "d9821690-78aa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.168.254:58228/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726986187, "uuid": "21b11479-78ab-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.85.10:56527/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726986246, "uuid": "44d6d9b9-78ab-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.212.100.250:51187/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726986246, "uuid": "44e615ad-78ab-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.119.152:35087/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726986307, "uuid": "697c7f78-78ab-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.187.152:41946/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726986307, "uuid": "69842160-78ab-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.36.126:37829/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726986323, "uuid": "72cc4f71-78ab-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.177.242:51585/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726986425, "uuid": "affadbf7-78ab-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.112.36:51175/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726986470, "uuid": "ca56466a-78ab-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.29.246:43941/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726986485, "uuid": "d3a689cc-78ab-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.177.131:38149/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726986486, "uuid": "d3d3a215-78ab-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.231.118:44210/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726986486, "uuid": "d432ab65-78ab-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.8.231:53640/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726986545, "uuid": "f7337030-78ab-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://saras.freehost.io/bins/Tsunami.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Tsunami", "colour": "#cb6771", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726986545, "uuid": "f736e348-78ab-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.229.174.152:50866/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726986545, "uuid": "f783c15e-78ab-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.93.150:35074/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726986546, "uuid": "f7e32205-78ab-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://saras.freehost.io/bins/Tsunami.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Tsunami", "colour": "#cb6771", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726986547, "uuid": "f87b5f29-78ab-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://saras.freehost.io/bins/Tsunami.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Tsunami", "colour": "#cb6771", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726986609, "uuid": "1d99a25a-78ac-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://saras.freehost.io/bins/Tsunami.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Tsunami", "colour": "#cb6771", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726986612, "uuid": "1efb3ffa-78ac-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://saras.freehost.io/bins/Tsunami.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Tsunami", "colour": "#cb6771", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726986736, "uuid": "694dbf0b-78ac-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.211.250:39547/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726986847, "uuid": "aafafb62-78ac-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.39.85:56147/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726986850, "uuid": "ad0b2e55-78ac-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.150.152:42450/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726986908, "uuid": "cfaf9829-78ac-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.64.101:52284/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726987086, "uuid": "39850cc4-78ad-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.19.229:48284/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726987208, "uuid": "8236f32b-78ad-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.45.250:53530/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726987266, "uuid": "a4c2613d-78ad-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.192.132:56290/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726987325, "uuid": "c8492d73-78ad-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.77.245:53824/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726987387, "uuid": "ecf2defd-78ad-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.140.48:53881/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726987397, "uuid": "f352f855-78ad-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.248.8:47875/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726987510, "uuid": "3653e78b-78ae-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.130.8:52873/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726987567, "uuid": "5836ff8c-78ae-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.192.34.156:37147/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726987626, "uuid": "7b556c7a-78ae-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.63.77:53063/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726987626, "uuid": "7b932712-78ae-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.39.82:59733/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726987685, "uuid": "9ef264b4-78ae-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.136.214:59007/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726987685, "uuid": "9f047e5c-78ae-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.248.248:39106/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726987686, "uuid": "9f14ae11-78ae-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.102.167:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726987746, "uuid": "c2d77691-78ae-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.187.152:41946/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726987840, "uuid": "fb55a9e0-78ae-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.83.2:38119/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726987925, "uuid": "2e0ef60e-78af-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.85.199:45056/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726987986, "uuid": "526a93ca-78af-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.53.83:43234/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988046, "uuid": "75b97adf-78af-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.50.153:37114/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988049, "uuid": "77805378-78af-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.185.46:56884/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988107, "uuid": "9a568842-78af-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.29.246:43941/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988225, "uuid": "e0885764-78af-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.241.228:54264/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988226, "uuid": "e1524a55-78af-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.17.178:52430/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988285, "uuid": "04263a31-78b0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.254.179:38788/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988287, "uuid": "055a0d6c-78b0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.11.242:49727/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988351, "uuid": "2bf6322e-78b0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.63.125:55839/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988408, "uuid": "4dda46c9-78b0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.182.34:40517/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988584, "uuid": "b6e32ef7-78b0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.85.133/hoho.sh", "Tag": [ { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988646, "uuid": "db5dc4af-78b0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.85.133/bins/hoho.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988646, "uuid": "db5dd0c5-78b0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.85.133/bins/hoho.powerpc-440fp", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988646, "uuid": "db5ea65a-78b0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.85.133/bins/hoho.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988646, "uuid": "db6e397d-78b0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.85.133/bins/hoho.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988646, "uuid": "db6e9039-78b0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.85.133/bins/hoho.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988646, "uuid": "db79fa23-78b0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.85.133/bins/hoho.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988647, "uuid": "dc1baa20-78b0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.85.133/bins/hoho.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988647, "uuid": "dc308b11-78b0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.93.4:55997/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988647, "uuid": "dc339381-78b0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.85.133/bins/hoho.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988647, "uuid": "dc61e345-78b0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.85.133/bins/hoho.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988648, "uuid": "dcabb2f7-78b0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.85.133/bins/hoho.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988648, "uuid": "dcc9f601-78b0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.85.133/bins/hoho.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988648, "uuid": "dcd816b4-78b0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.85.133/bins/hoho.i586", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988648, "uuid": "dcd88d09-78b0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.85.133/bins/hoho.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988648, "uuid": "dcddaf73-78b0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.85.133/bins/hoho.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988648, "uuid": "dcef2505-78b0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.85.133/bins/hoho.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988706, "uuid": "ff5d02be-78b0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.85.133/bins/hoho.sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988767, "uuid": "23f6e0d6-78b1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.54.17:35885/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988825, "uuid": "4641c6cf-78b1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.45.250:53530/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988885, "uuid": "6a18142b-78b1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.249.210/bins/jade.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988885, "uuid": "6a19d9da-78b1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.249.210/bins/jade.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988885, "uuid": "6a345ec9-78b1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.249.210/bins/jade.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988886, "uuid": "6a8a3658-78b1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.249.210/bins/jade.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988886, "uuid": "6a94a70a-78b1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.249.210/bins/jade.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988945, "uuid": "8ddaa9a3-78b1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.249.210/bins/jade.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988945, "uuid": "8de2047b-78b1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.249.210/bins/jade.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988945, "uuid": "8deb1c2f-78b1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.249.210/bins/jade.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988945, "uuid": "8df8d9fa-78b1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.249.210/bins/jade.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988946, "uuid": "8e559f99-78b1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.54.69:34383/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726988953, "uuid": "92a1837e-78b1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.185.146:36640/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726989262, "uuid": "4aa63ba6-78b2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.120.22:48618/mozi.a", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726989366, "uuid": "88e30008-78b2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.53.83:43234/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726989441, "uuid": "b58fd9fd-78b2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.46.68:50057/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726989503, "uuid": "da57c0ba-78b2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.60.238.166:36925/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726989669, "uuid": "3d815696-78b3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.164.197:35840/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726989726, "uuid": "5f060e78-78b3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.150.236:42725/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726989726, "uuid": "5f500498-78b3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.89.141:36634/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726989786, "uuid": "82d224fa-78b3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.19.154.124:55129/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726989803, "uuid": "8d5e09cb-78b3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.53.183:51511/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726989848, "uuid": "a7f3d45d-78b3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.185.46:56884/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726989907, "uuid": "cb1b2e75-78b3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.3.171:42709/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726989966, "uuid": "ee894a29-78b3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.168.219:55097/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726989982, "uuid": "f7b35afe-78b3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.182.34:40517/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726990026, "uuid": "11d3601b-78b4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.125.111:43889/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726990027, "uuid": "12837774-78b4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.93.4:55997/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726990146, "uuid": "5979ee34-78b4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.216.192:56166/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726990402, "uuid": "f20a305f-78b4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.4.194:37450/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726990447, "uuid": "0d21a463-78b5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.136.251:55436/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726990537, "uuid": "42e1b38f-78b5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.40.240:43886/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726990567, "uuid": "5468d128-78b5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.65.116:41306/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726990685, "uuid": "9b1fee91-78b5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.125.111:43889/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726990810, "uuid": "e56a54c8-78b5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.230.5:34692/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726990868, "uuid": "0823fe45-78b6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.35.249:43305/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726990987, "uuid": "4ed6b382-78b6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.189.248:35923/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726991046, "uuid": "71f0e2fd-78b6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.215.48:45656/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726991122, "uuid": "9f2686a3-78b6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.108.19:51674/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726991136, "uuid": "a76faef8-78b6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.46.68:50057/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726991138, "uuid": "a8ecc61c-78b6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.33.152:44879/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726991225, "uuid": "dcb80ef4-78b6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.19.154.124:55129/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726991229, "uuid": "df46c0a2-78b6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.4.174.148:54636/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726991347, "uuid": "25a7a7f8-78b7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.150.236:42725/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726991465, "uuid": "6be05425-78b7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.89.141:36634/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726991466, "uuid": "6c314b24-78b7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.118.194:37545/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726991466, "uuid": "6c8735a2-78b7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.173.1:39161/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726991468, "uuid": "6dcc3e13-78b7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.140.164:50652/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726991765, "uuid": "1edb6bf5-78b8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.103.238:36737/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726991766, "uuid": "1f35c318-78b8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.26.23:56320/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726991825, "uuid": "424971e0-78b8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.230.8:43578/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726991825, "uuid": "424ed4b5-78b8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.44.104/revada/66efcc2ab2731_setup3.exe#lyla", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726991827, "uuid": "43b41c4e-78b8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.118.15.132:52517/bin.sh", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726991828, "uuid": "440c41c4-78b8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.165.44:49300/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726991832, "uuid": "467e4afe-78b8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.248.207:50575/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726991887, "uuid": "6737e35a-78b8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.32.130:44632/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726992009, "uuid": "afc80d26-78b8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.212.100.250:51187/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726992250, "uuid": "3f736c5b-78b9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.22.242.80:46245/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726992307, "uuid": "61a7c62c-78b9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.33.164:43292/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726992309, "uuid": "62df9616-78b9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.166.145:38341/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726992310, "uuid": "63bb924e-78b9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.189.248:35923/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726992371, "uuid": "87f25584-78b9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.116.144.56:36472/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726992485, "uuid": "cbf3f958-78b9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.1.10:54310/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726992486, "uuid": "cc189646-78b9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.137.47:56029/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726992726, "uuid": "5b5ecf36-78ba-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.108.19:51674/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726992726, "uuid": "5b60170d-78ba-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.215.48:45656/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726992726, "uuid": "5b7e2f64-78ba-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.4.174.148:54636/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726992913, "uuid": "caa5c761-78ba-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.252.165.77:60015/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726992913, "uuid": "cada08fc-78ba-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.243.152.20:41859/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726992966, "uuid": "ea8d631a-78ba-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.29.103:54000/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726993025, "uuid": "0d8046b6-78bb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.64.101:52284/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726993095, "uuid": "376e05f2-78bb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.248.207:50575/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726993101, "uuid": "3b32117b-78bb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.118.194:37545/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726993146, "uuid": "55abacf2-78bb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.118.15.132:52517/i", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726993207, "uuid": "79e4fe99-78bb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.125.241.86:33267/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726993208, "uuid": "7aa23fa0-78bb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.92.179:40701/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726993266, "uuid": "9d10ffdb-78bb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.26.23:56320/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726993364, "uuid": "d78a249e-78bb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.88.66:35351/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726993385, "uuid": "e47f5229-78bb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.24.208:57264/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726993394, "uuid": "e9a25177-78bb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.135.239:36711/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726993402, "uuid": "ee6e6872-78bb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.32.130:44632/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726993448, "uuid": "09f41614-78bc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.252.173.126:39342/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726993506, "uuid": "2c41bb80-78bc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.103.238:36737/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726993566, "uuid": "504dd8ad-78bc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.22.242.80:46245/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726993567, "uuid": "508c3533-78bc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.146.59:55638/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726993633, "uuid": "78276577-78bc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.177.106.19:51644/mysqld", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Ganiw", "colour": "#70338d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Setag", "colour": "#086622", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726993685, "uuid": "96ef9007-78bc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.32.119:44883/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726993685, "uuid": "9745ba5c-78bc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.30.28:47336/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726993937, "uuid": "2d869b1f-78bd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.134.235:58400/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726993987, "uuid": "4adcf7d0-78bd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.112.27:52031/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726994047, "uuid": "6ea0e79f-78bd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.30.28:47336/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726994051, "uuid": "710c0a54-78bd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.116.144.56:36472/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726994109, "uuid": "9394e68b-78bd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.1.10:54310/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726994111, "uuid": "951a5111-78bd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.120.180:46521/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726994168, "uuid": "b6c38045-78bd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.33.164:43292/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726994465, "uuid": "6835fcf9-78be-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.10.67:55782/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726994476, "uuid": "6e60fbd1-78be-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.125.14:56546/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726994586, "uuid": "affd957a-78be-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.243.152.20:41859/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726994646, "uuid": "d3ce4b8d-78be-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.29.103:54000/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726994708, "uuid": "f9009602-78be-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.93.193:38975/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726994825, "uuid": "3e7af0d3-78bf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.24.208:57264/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726994886, "uuid": "630e65bc-78bf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.175.56:33820/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726995007, "uuid": "aaee0e26-78bf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.44.118:53098/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726995022, "uuid": "b40b45e0-78bf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.88.66:35351/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726995023, "uuid": "b495dcaf-78bf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.146.59:55638/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726995245, "uuid": "38fdcf84-78c0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://47.238.84.157:8000/mysqld.sh", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "supershell", "colour": "#85bddc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726995248, "uuid": "3aa163b7-78c0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://47.238.84.157:8000/mysqld", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ReverseSSH", "colour": "#032A55", "exportable": true, "hide_tag": false }, { "name": "supershell", "colour": "#85bddc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726995365, "uuid": "802a684b-78c0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.112.27:52031/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726995367, "uuid": "8172a476-78c0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.252.173.126:39342/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726995367, "uuid": "81b3e6aa-78c0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.66.164:58137/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726995489, "uuid": "ca83e2ce-78c0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.121.85:42677/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726995547, "uuid": "ecaeb56e-78c0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.33.241:41729/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726995608, "uuid": "113f7c51-78c1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.120.180:46521/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726995636, "uuid": "21e04dd4-78c1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.134.235:58400/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726995666, "uuid": "33b45415-78c1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.71.146:46697/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726995667, "uuid": "3480e8fd-78c1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.187.178:35634/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726995788, "uuid": "7cb115bf-78c1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.6.19:43883/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726995801, "uuid": "8492a927-78c1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.115.89.161:34401/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726995819, "uuid": "8ec4a3ad-78c1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.197.115.144:54732/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726995819, "uuid": "8eca731d-78c1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.208.233.172:46300/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726995819, "uuid": "8eccda2a-78c1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.208.233.155:43075/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726995907, "uuid": "c3811d93-78c1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.125.14:56546/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726996567, "uuid": "4ca064ef-78c3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.169.102:57771/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726996629, "uuid": "71bc62fd-78c3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.45.250:35281/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726996688, "uuid": "94c41ddd-78c3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.18.60:32946/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726996690, "uuid": "9640b9d2-78c3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.173.44:50788/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726996746, "uuid": "b777df73-78c3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.238.109:48608/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726996927, "uuid": "23972a91-78c4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.240.104:58749/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726996954, "uuid": "339a4305-78c4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.126.90:35881/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726996985, "uuid": "45f4f16b-78c4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.66.164:58137/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726996985, "uuid": "4639ba76-78c4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.41.222:40844/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726996986, "uuid": "46bee6ae-78c4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.234.166:50489/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726997286, "uuid": "f92a9e34-78c4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.121.85:42677/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726997534, "uuid": "8d5d78a4-78c5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.243.22:39023/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726997689, "uuid": "e9a92453-78c5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.99.249:40085/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726997765, "uuid": "16f8920b-78c6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.121.218:43507/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726997843, "uuid": "458369bf-78c6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.134.139:39336/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726998126, "uuid": "ee1caaaf-78c6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.126.90:35881/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726998127, "uuid": "eeb248d0-78c6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.237.159:42625/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726998133, "uuid": "f269973d-78c6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.198.28:42212/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726998246, "uuid": "3555cdde-78c7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.169.102:57771/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726998485, "uuid": "c449ac29-78c7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.7.33:59272/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726998545, "uuid": "e7d0b79c-78c7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.109.144:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726998545, "uuid": "e8086c27-78c7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.41.222:40844/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726998608, "uuid": "0d4807ac-78c8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.139.166:46082/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726998666, "uuid": "2fbc20e1-78c8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.158.249:42694/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726998666, "uuid": "2fc3b6f7-78c8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.79.70:51426/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726998667, "uuid": "308561c3-78c8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.234.166:50489/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726998691, "uuid": "3f0b604a-78c8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.60.235.159:38519/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726998846, "uuid": "9af564fd-78c8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.240.104:58749/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726998849, "uuid": "9cfcc954-78c8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.43.134:36169/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726998859, "uuid": "a32419a8-78c8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.123.107:55182/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726998909, "uuid": "c0eaef66-78c8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.124.140:45631/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726998922, "uuid": "c8c81951-78c8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.45.206:46692/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999209, "uuid": "7360255e-78c9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.225.85.223:55932/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999266, "uuid": "95d8797e-78c9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.181.193:41252/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999325, "uuid": "b8fd12c5-78c9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.134.139:39336/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999386, "uuid": "dd55a2d1-78c9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.197.154.116//Excel.zip", "Tag": [ { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999386, "uuid": "dd5a7395-78c9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.197.154.116//Icon.exe", "Tag": [ { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999386, "uuid": "dd63d79b-78c9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.197.154.116//Extension2.exe", "Tag": [ { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999387, "uuid": "dd806c6a-78c9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.197.154.116//Tracker.exe", "Tag": [ { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999387, "uuid": "dd807439-78c9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.197.154.116//Extension.zip", "Tag": [ { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999387, "uuid": "dd80c332-78c9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.197.154.116//Organiser.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999387, "uuid": "dd9d0e77-78c9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.254.175:47624/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999387, "uuid": "dd9ff37e-78c9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.197.154.116//Charter.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999387, "uuid": "dda47bd9-78c9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.197.154.116//Accounts.zip", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999387, "uuid": "ddb47717-78c9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.197.154.116//Journal.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999387, "uuid": "ddf4c533-78c9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.197.154.116//Uploader.exe", "Tag": [ { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999389, "uuid": "dec0213a-78c9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.197.154.116//Prototype.zip", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999390, "uuid": "df431040-78c9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.153.23:40690/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999390, "uuid": "df9d8b5f-78c9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.197.154.116//Meeting.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999392, "uuid": "e0f63f2f-78c9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.197.154.116//Uploader.elf", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999393, "uuid": "e17aa5ba-78c9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.197.154.116//Excel.exe", "Tag": [ { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999394, "uuid": "e1d799be-78c9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.197.154.116//Organiser2.zip", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999394, "uuid": "e1db0937-78c9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.197.154.116//service.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999394, "uuid": "e1ef460b-78c9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.197.154.116//Launcher.elf", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999394, "uuid": "e2095439-78c9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.197.154.116//Utility2.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999394, "uuid": "e20f8bfa-78c9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.197.154.116//Utility.zip", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999394, "uuid": "e211633b-78c9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.197.154.116//Setup.zip", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999395, "uuid": "e25ed708-78c9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.197.154.116//Organiser3.zip", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999396, "uuid": "e2d740a3-78c9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.197.154.116//Monitor.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999396, "uuid": "e2d742eb-78c9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.197.154.116//Utility3.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999396, "uuid": "e34508f0-78c9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.197.154.116//Trial.zip", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999397, "uuid": "e383e568-78c9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.197.154.116//Prototype.exe", "Tag": [ { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999397, "uuid": "e38403e8-78c9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.197.154.116//Prototype2.zip", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999397, "uuid": "e3841b52-78c9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.197.154.116//Journal.zip", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999397, "uuid": "e3d5ea6a-78c9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.197.154.116//Tracker.zip", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999397, "uuid": "e3d6c90a-78c9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.197.154.116//Extension2.zip", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999399, "uuid": "e48ea4a6-78c9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.197.154.116//Beta2.zip", "Tag": [ { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999400, "uuid": "e5551d00-78c9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.197.154.116//uBOLite_0.1.23.6055.chromium.mv3.zip", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999506, "uuid": "24e26b73-78ca-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.197.154.116//Macro.vbs", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999517, "uuid": "2b1b0040-78ca-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.111.158:56915/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999599, "uuid": "5be1cc8d-78ca-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.46.59:41186/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999747, "uuid": "b4184db4-78ca-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.237.159:42625/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726999986, "uuid": "42b009e8-78cb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.201.161:41500/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000051, "uuid": "69ab51d7-78cb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.117.208.101//TripVPN.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000052, "uuid": "69e98627-78cb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.117.208.101//CovidPass.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000053, "uuid": "6aa5d23f-78cb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.117.208.101//sample.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000113, "uuid": "8e277680-78cb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.109.102:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000165, "uuid": "ad395afc-78cb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.117.208.101//Cloudshare.zip", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000165, "uuid": "ad3ad9e4-78cb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.117.208.101//Windows11.zip", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000165, "uuid": "ad3e278a-78cb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.117.208.101//sample.zip", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000224, "uuid": "d0c74df1-78cb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.117.208.101//TripVPN.txt.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000300, "uuid": "fdd3f1f2-78cb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.216.192.2:37352/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000406, "uuid": "3d35c0af-78cc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.117.208.101//Cloudshare.vbs", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000407, "uuid": "3d8b9c45-78cc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.124.140:45631/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000407, "uuid": "3db9f1e1-78cc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.139.166:46082/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000427, "uuid": "49dd7f1c-78cc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.66.73:40771/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000466, "uuid": "609b5563-78cc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.225.85.223:55932/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000467, "uuid": "61b638b4-78cc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.43.134:36169/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000526, "uuid": "84d09c64-78cc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.190.93:38288/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000586, "uuid": "a8a40aa9-78cc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.44.23:59113/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000661, "uuid": "d54b410a-78cc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.217.190:54814/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000707, "uuid": "f0bb9cb0-78cc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.45.206:46692/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000708, "uuid": "f13d0a3e-78cc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.181.193:41252/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000781, "uuid": "1c927def-78cd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://186.94.250.185:38779/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000824, "uuid": "3619e346-78cd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.117.208.101/Trial.bat", "Tag": [ { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000825, "uuid": "36abfbd6-78cd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.117.208.101/Organiser.zip_bak", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000826, "uuid": "37780999-78cd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.20.176:46884/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000885, "uuid": "5a99dabd-78cd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.229.178.26:33427/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000945, "uuid": "7e108699-78cd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.44.104/yuop/66efe93a74999_crypted.exe#111", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000945, "uuid": "7e16312f-78cd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.117.208.101//TripVPN.zip", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727000945, "uuid": "7e5073eb-78cd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.238.109:48608/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727001009, "uuid": "a4545aa6-78cd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.153.23:40690/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727001126, "uuid": "ea16766a-78cd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.174.88:56874/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727001127, "uuid": "eac28496-78cd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.143.240:44414/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727001128, "uuid": "eb90cc48-78cd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.24.25.246:60812/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727001133, "uuid": "ee1be195-78cd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.95.87:34014/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727001246, "uuid": "31e7dca4-78ce-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.117.208.101/Organiser.zip", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727001261, "uuid": "3af22711-78ce-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.150.126:34432/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727001545, "uuid": "e3fae547-78ce-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.134.47.11:34519/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727001667, "uuid": "2c7d6cc9-78cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.187.135:47078/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727001726, "uuid": "4fa877e2-78cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.44.23:59113/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727001726, "uuid": "4fd53d35-78cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.251.121:46366/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727001785, "uuid": "730822a9-78cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.41.166:42483/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727001845, "uuid": "970230eb-78cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.187.174.58/thebig/getlab.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727002041, "uuid": "0b864164-78d0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.247.85.28:39703/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727002145, "uuid": "49bc3433-78d0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://alsadekllc.com/funnol/2.jpg", "Tag": [ { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727002158, "uuid": "5131a608-78d0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://oneip.com.my/wp-content/images/pic2.jpg", "Tag": [ { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727002208, "uuid": "6ee77a46-78d0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.150.126:34432/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727002296, "uuid": "a34db137-78d0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://186.94.250.185:38779/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727002338, "uuid": "bc846e21-78d0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://oneip.com.my/wp-content/images/pic1.jpg", "Tag": [ { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727002385, "uuid": "d8c4cb3a-78d0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.229.178.26:33427/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727002446, "uuid": "fcbd1211-78d0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.232.139:59535/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727002474, "uuid": "0d9b805e-78d1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.174.90.216:59459/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727002507, "uuid": "2164ab8e-78d1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.174.142:54856/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727002508, "uuid": "21c87ab5-78d1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.185.85:33785/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727002626, "uuid": "681277dc-78d1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.143.240:44414/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727002686, "uuid": "8c392746-78d1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.104.220:58669/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727002747, "uuid": "b04a99ed-78d1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.189.67:45421/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727002809, "uuid": "d53ffae1-78d1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.24.25.246:60812/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727002929, "uuid": "1cddbf50-78d2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://paste.ee/d/ovjFg", "Tag": [ { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727003165, "uuid": "a97e66ea-78d2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.134.47.11:34519/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727003226, "uuid": "cdd59333-78d2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.31.167:53073/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727003228, "uuid": "cf376ff8-78d2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://oneip.com.my/wp-content/images/pic3.jpg", "Tag": [ { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727003229, "uuid": "cf951fe0-78d2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://oneip.com.my/wp-content/images/pic4.jpg", "Tag": [ { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727003286, "uuid": "f163c6db-78d2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.187.135:47078/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727003345, "uuid": "14c81a58-78d3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.44.104/yuop/66eff9f890580_appSetup.exe#xin", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727003350, "uuid": "17bf4bb4-78d3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.177.219:41999/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727003408, "uuid": "3a4d9583-78d3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.41.166:42483/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727003524, "uuid": "7fba093d-78d3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://alsadekllc.com/funnol/2.jpg", "Tag": [ { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727003525, "uuid": "805b3c40-78d3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.11.242:49727/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727003914, "uuid": "67d33d24-78d4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.174.142:54856/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727003947, "uuid": "7b72f0fa-78d4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.232.139:59535/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727004007, "uuid": "9f859714-78d4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.152.89:40532/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727004008, "uuid": "9fdd7c60-78d4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.20.176:46884/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727004126, "uuid": "e671b090-78d4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.185.85:33785/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727004140, "uuid": "eebe1550-78d4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.189.226:52030/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727004186, "uuid": "0a370b79-78d5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.189.67:45421/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727004196, "uuid": "100d7c9a-78d5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.147.245:33499/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727004379, "uuid": "7d2feef9-78d5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.124.14:45079/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727004391, "uuid": "840e8bad-78d5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.241.205:51781/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727004426, "uuid": "9906e2dd-78d5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.142.149:45557/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727004485, "uuid": "bc2fd5dd-78d5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.31.167:53073/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727004489, "uuid": "bef2618a-78d5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.245.12.52:50068/bin.sh", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727004556, "uuid": "e66f3c31-78d5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.60.239.134:42367/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727004967, "uuid": "dbee3e3a-78d6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.174.90.216:59459/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727005146, "uuid": "465cad81-78d7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.217.231:58945/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727005745, "uuid": "ab4a7741-78d8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.111.158:56915/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727005750, "uuid": "ae77356d-78d8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.2.129.153:52612/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727005807, "uuid": "d0717c6d-78d8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.147.245:33499/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727005808, "uuid": "d09fa407-78d8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.245.12.52:50068/i", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727005821, "uuid": "d8a2d7e0-78d8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.130.47:34987/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727005866, "uuid": "f3aec48b-78d8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.219.181:39862/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727005925, "uuid": "16ac2b3c-78d9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.32.201:49611/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727005926, "uuid": "1719747f-78d9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.135.120.135:47590/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727005986, "uuid": "3b0ff54e-78d9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.68.130.226:55469/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727005995, "uuid": "4030857a-78d9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.29.146:50789/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727006108, "uuid": "83c986fc-78d9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.4.170:57165/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727006114, "uuid": "8734822f-78d9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.211.28:47276/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727006226, "uuid": "ca2bee79-78d9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.95.22:55035/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727006345, "uuid": "1139e19f-78da-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.218.111:57827/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727006346, "uuid": "114b8a5f-78da-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.46.228:60178/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727006346, "uuid": "117bfd07-78da-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.93.158:44935/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727006408, "uuid": "365916a3-78da-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.123.38:40002/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727006591, "uuid": "a3a3d735-78da-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.101.68:37715/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727006597, "uuid": "a7422e2a-78da-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.102.255:44979/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727006614, "uuid": "b10c90a4-78da-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.185.39:55304/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727006647, "uuid": "c4c6fb0b-78da-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.250.48:58292/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727006674, "uuid": "d51957f7-78da-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.101.52:58695/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727006826, "uuid": "2f889b49-78db-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.59.220:33609/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727007071, "uuid": "c1d8bc45-78db-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.98.84:36574/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727007080, "uuid": "c72853f8-78db-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.211.55:44636/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727007246, "uuid": "29d56bb4-78dc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.220.162.38:45277/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727007256, "uuid": "2ff3ef4b-78dc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.212.247.102:49910/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727007310, "uuid": "500b0898-78dc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.101.101:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727007470, "uuid": "afd2c7f5-78dc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.100.123:45932/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727007607, "uuid": "0131e040-78dd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.4.170:57165/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727007607, "uuid": "015e4aeb-78dd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.29.146:50789/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727007607, "uuid": "0166cf64-78dd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.50.91.55/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727007607, "uuid": "0167ce4d-78dd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.50.91.55/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727007607, "uuid": "01685df6-78dd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.50.91.55/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727007607, "uuid": "01698c12-78dd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.211.28:47276/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727007607, "uuid": "01736337-78dd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.50.91.55/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727007665, "uuid": "23be18bc-78dd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.50.91.55/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727007666, "uuid": "246346e5-78dd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.186.63:60982/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727007667, "uuid": "2516570e-78dd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastebin.com/raw/E0rY26ni", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "link", "colour": "#E25206", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727007727, "uuid": "48d19e8f-78dd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.218.111:57827/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727007787, "uuid": "6ca2d52b-78dd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.147.211/Files/inst_4WKY_x.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727007853, "uuid": "93d9343c-78dd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.darkviolet-alpaca-923878.hostingersite.com/Coin.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727007906, "uuid": "b37f312c-78dd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://sylhetvoice.com/ehgbrhbrerer/2.jpg", "Tag": [ { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727007906, "uuid": "b38e261c-78dd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.182.12:42808/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727007907, "uuid": "b3d6ed64-78dd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.123.38:40002/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727007993, "uuid": "e756878b-78dd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.95.22:55035/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727008025, "uuid": "fa9de351-78dd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.46.228:60178/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727008282, "uuid": "9396f621-78de-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.136.159:49014/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727008510, "uuid": "1b5d3faf-78df-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.135.216:45055/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727008511, "uuid": "1bc5bd37-78df-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.192.39.50:40474/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727008625, "uuid": "6042e7c2-78df-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.100.123:45932/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727008807, "uuid": "cca6ace3-78df-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.212.247.102:49910/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727008866, "uuid": "ef587198-78df-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.168.114:47691/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727008986, "uuid": "36f60115-78e0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.82.121:51558/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727008986, "uuid": "3742ca7a-78e0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.114.92:41659/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727008990, "uuid": "3949bb95-78e0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.36.126:37829/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727009045, "uuid": "5a21b3b4-78e0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.36.99:41269/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727009107, "uuid": "7f52a5e6-78e0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.44.104/revada/66f01072d72ba_appSetup.exe#xin", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727009286, "uuid": "e9b5dedc-78e0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.44.104/revada/66f0115e28dc4_crypted.exe#1", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727009288, "uuid": "eaed2c8f-78e0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.192.232.124:48754/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727009297, "uuid": "f0b2b112-78e0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.114.39:45943/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727009344, "uuid": "0cbd663c-78e1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.127.34.106/arc", "Tag": [ { "name": "200", "colour": "#699f99", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727009344, "uuid": "0cbdd76d-78e1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.127.34.106/arm6", "Tag": [ { "name": "200", "colour": "#699f99", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727009344, "uuid": "0cc700fa-78e1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.127.34.106/arm5", "Tag": [ { "name": "200", "colour": "#699f99", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727009345, "uuid": "0cd4950c-78e1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.127.34.106/arm7", "Tag": [ { "name": "200", "colour": "#699f99", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727009345, "uuid": "0cd64029-78e1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.127.34.106/arm", "Tag": [ { "name": "200", "colour": "#699f99", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727009407, "uuid": "32133fb2-78e1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.108.8:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727009466, "uuid": "551ec25e-78e1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.33.146:50160/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727009645, "uuid": "bff4854c-78e1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.82.121:51558/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727009646, "uuid": "c084530c-78e1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.38.52:56360/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727009766, "uuid": "07e15b0b-78e2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.228.38.151:51492/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727009825, "uuid": "2b709ffc-78e2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.158.32:38185/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727009886, "uuid": "4f4e9708-78e2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.136.127:49451/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727009946, "uuid": "732ae734-78e2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.44.104/revada/66f01434b5b1a_crypted.exe#1", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727010007, "uuid": "97cb015d-78e2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.136.159:49014/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727010125, "uuid": "de319c92-78e2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.127.34.106/i686", "Tag": [ { "name": "200", "colour": "#699f99", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727010154, "uuid": "ef20e1f7-78e2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.135.216:45055/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727010246, "uuid": "2616c8c6-78e3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.168.114:47691/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727010545, "uuid": "d853eb80-78e3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.127.34.106/sh4", "Tag": [ { "name": "200", "colour": "#699f99", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727010545, "uuid": "d854b60f-78e3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.127.34.106/ppc", "Tag": [ { "name": "200", "colour": "#699f99", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727010545, "uuid": "d85e7291-78e3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.127.34.106/mpsl", "Tag": [ { "name": "200", "colour": "#699f99", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727010545, "uuid": "d863c859-78e3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.127.34.106/m68k", "Tag": [ { "name": "200", "colour": "#699f99", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727010546, "uuid": "d8b4d561-78e3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.127.34.106/x86_64", "Tag": [ { "name": "200", "colour": "#699f99", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727010546, "uuid": "d8c28e7d-78e3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.127.34.106/x86", "Tag": [ { "name": "200", "colour": "#699f99", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727010546, "uuid": "d8c3a47e-78e3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.127.34.106/mips", "Tag": [ { "name": "200", "colour": "#699f99", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727010611, "uuid": "ffdc5e4b-78e3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.44.104/revada/66f00ee5b1ba6_cry.exe#kiscryptovidar", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727010680, "uuid": "291b0172-78e4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.67.172:36577/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727010792, "uuid": "6b779c11-78e4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.66.35:54733/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727010847, "uuid": "8c626c2d-78e4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.192.39.50:40474/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727010910, "uuid": "b1cb4d17-78e4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.194.191:51100/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727011086, "uuid": "1af75823-78e5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.192.232.124:48754/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727011385, "uuid": "cd4debad-78e5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.38.52:56360/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727011386, "uuid": "cd62a6e8-78e5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.136.127:49451/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727011507, "uuid": "16015876-78e6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.239.137:48824/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727011521, "uuid": "1e63a1a8-78e6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.246.239:48067/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727011630, "uuid": "5ef52541-78e6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.120.22:48618/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727012107, "uuid": "7b6b09f8-78e7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.33.74:46129/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727012528, "uuid": "764ac751-78e8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.67.172:36577/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727012826, "uuid": "2804d877-78e9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.247.21:48950/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727012836, "uuid": "2dad292a-78e9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.229.252:48532/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727012892, "uuid": "4f5c0bd7-78e9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.214.102:46314/mozi.m", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727012946, "uuid": "6f77fd01-78e9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.75.92:51987/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727013247, "uuid": "22f4425a-78ea-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.225.100:50912/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727013546, "uuid": "d5315410-78ea-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.239.232:36111/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727014027, "uuid": "f391f80b-78eb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.16.114:47596/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727014265, "uuid": "81dffe19-78ec-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.75.92:51987/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727014326, "uuid": "a6549e4b-78ec-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.229.252:48532/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727014445, "uuid": "ecb833a9-78ec-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.44.104/yuop/66f011901da27_crypted.exe#111", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727014450, "uuid": "efa9d40c-78ec-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.44.104/yuop/66f00f515201d_otr.exe#kisotrvidar", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727014566, "uuid": "3505fbfa-78ed-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.164.180:48703/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727014745, "uuid": "9fce76ec-78ed-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.44.104/yuop/66ee79315857f_setup33333.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727014745, "uuid": "9fd813d6-78ed-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.44.104/yuop/66eea6336b153_app16540406983468141987.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727014745, "uuid": "9ffc7fba-78ed-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.225.100:50912/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727014751, "uuid": "a3966326-78ed-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.225.250.227:2138/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727014873, "uuid": "ec583791-78ed-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.175.56:33820/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727015110, "uuid": "79544600-78ee-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1EnM8GOCjgl_bDxtuyCHqVfNNgLyGaAWF", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727015115, "uuid": "7c88e67e-78ee-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1lI7SoYb_aBEmRmJJI-u31JgwtXJMn_Qm", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727015166, "uuid": "9abbcf40-78ee-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.239.232:36111/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727015167, "uuid": "9b04e0d3-78ee-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.0.159:39856/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727015167, "uuid": "9b1f8f32-78ee-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.120.22:48618/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727015229, "uuid": "c036e222-78ee-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.152.101:60725/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727015346, "uuid": "063e3b48-78ef-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.219.55:54146/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727015423, "uuid": "33ae2737-78ef-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.178.249:45706/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727015709, "uuid": "de4c7340-78ef-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.67.140:50298/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727015885, "uuid": "476a296c-78f0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://69.117.23.50:44458/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727016246, "uuid": "1e308715-78f1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.164.180:48703/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727016246, "uuid": "1e4f8aa4-78f1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.53.30.129:39056/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727016366, "uuid": "65c68416-78f1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.183.215:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727016427, "uuid": "8a9365ae-78f1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.237.70:53557/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727016486, "uuid": "adb89a08-78f1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.100.79:58437/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727016487, "uuid": "ae084596-78f1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.122.98:34185/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727016487, "uuid": "ae300540-78f1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.225.250.227:2138/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727016790, "uuid": "626b4a24-78f2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1y27x--kKqVWgvw_VMM_dLdLVEqxyWG8Q", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727016790, "uuid": "629c97f8-78f2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://firebasestorage.googleapis.com/v0/b/cyber-city-53e23.appspot.com/o/Bin.txt?alt=media&token=f669fb62-20e2-401e-b607-ee18190cab55", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727016791, "uuid": "63691570-78f2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1k3-MlUArq4HAXGsMz5H4dCbXICd0CWli", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727016847, "uuid": "8466dff9-78f2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://papeleriaveneplast.com/sWgiokoty/wcxoplwq.exe", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727016874, "uuid": "94c726bc-78f2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://papeleriaveneplast.com/nigx/notebyx.exe", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727016965, "uuid": "cb3bccce-78f2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.118.66:46139/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727016966, "uuid": "cb6d642d-78f2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.219.55:54146/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727016966, "uuid": "cb9b9ff9-78f2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.118.155:52325/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727017026, "uuid": "ef4b4ad7-78f2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.118.234:42637/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727017086, "uuid": "12d67ac6-78f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.18.159:39180/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727017086, "uuid": "12d96261-78f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.3.35:59275/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727017386, "uuid": "c5c04311-78f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.223.82:41266/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727017447, "uuid": "ea3eba82-78f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.80.46:57811/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727017449, "uuid": "eb947e05-78f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.66.103:41117/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727017450, "uuid": "ec03a606-78f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.199.200.210:45250/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727017454, "uuid": "ee3db35a-78f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.191.45:33571/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727017454, "uuid": "ee5bba42-78f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.184.192:54279/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727017457, "uuid": "f046274a-78f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.243.136:45501/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727017461, "uuid": "f27fd485-78f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.23.117:34542/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727017473, "uuid": "fa118a50-78f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.215.143:47515/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727017485, "uuid": "01386634-78f4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.253.46:57588/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727017568, "uuid": "327693b4-78f4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.147.79:51605/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727017691, "uuid": "7b80d94c-78f4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.229.136:37025/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727017809, "uuid": "c23586c5-78f4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.216.202:54333/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727018108, "uuid": "74723461-78f5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.122.232:40955/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727018165, "uuid": "966ec000-78f5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.7.44/bins/x86", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727018166, "uuid": "96d9fea7-78f5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.53.30.129:39056/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727018586, "uuid": "90f5f110-78f6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.118.234:42637/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727018645, "uuid": "b48e7521-78f6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.148.232:45705/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727018645, "uuid": "b498fdce-78f6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.137.78:54501/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727018710, "uuid": "db4dd67c-78f6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.170.143:52949/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727018712, "uuid": "dc92b44b-78f6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.57.81:45527/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727018765, "uuid": "fbef8af9-78f6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.3.35:59275/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727018826, "uuid": "201a06a8-78f7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.57.223.187:58885/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727018837, "uuid": "268efa6a-78f7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.147.5:41976/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727018946, "uuid": "67ce7559-78f7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.229.136:37025/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727019189, "uuid": "f8c2ab6a-78f7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.49.44:43185/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727019246, "uuid": "1ad5a383-78f8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.216.202:54333/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727019246, "uuid": "1add4eaf-78f8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.147.79:51605/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727019309, "uuid": "4037c073-78f8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.59.153.109:59087/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727019607, "uuid": "f20ab26c-78f8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.119.69:45642/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727019608, "uuid": "f29d9b0f-78f8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.122.232:40955/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727019666, "uuid": "14e756b7-78f9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.153.215.21:60552/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727019908, "uuid": "a4e31481-78f9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.176.125:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727019913, "uuid": "a834771a-78f9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.213.177:47596/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727020325, "uuid": "9df34cf6-78fa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.0.159:39856/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727020326, "uuid": "9e052a80-78fa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.57.223.187:58885/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727020326, "uuid": "9e774563-78fa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.169.22:35011/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727020385, "uuid": "c1b168df-78fa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.154.209:48965/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727020448, "uuid": "e714f0b0-78fa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.91.255:38031/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727020507, "uuid": "09eb38bf-78fb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.57.81:45527/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727020522, "uuid": "12f87670-78fb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.147.5:41976/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727020567, "uuid": "2de2e052-78fb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.181.11:43905/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727020686, "uuid": "751cb476-78fb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.49.44:43185/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727020809, "uuid": "be38519d-78fb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.151.233:42469/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727020867, "uuid": "e0841f10-78fb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.4.228:46394/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727021226, "uuid": "b69a456d-78fc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.210.215:34128/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727021408, "uuid": "236e0140-78fd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.153.215.21:60552/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727021531, "uuid": "6c64ce9e-78fd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.49.130:38127/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727021590, "uuid": "8f8c888e-78fd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.229.156:56613/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727021591, "uuid": "90264d03-78fd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.116.32:47992/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727021662, "uuid": "ba8b3e8f-78fd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.12.156:38690/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727021826, "uuid": "1c7606be-78fe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.154.209:48965/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727021826, "uuid": "1c82c36d-78fe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.91.255:38031/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727022126, "uuid": "cf31de41-78fe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.169.22:35011/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727022127, "uuid": "cf991df2-78fe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.181.11:43905/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727022186, "uuid": "f2e9e221-78fe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.151.233:42469/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727022306, "uuid": "3a5d4187-78ff-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.165.221.158/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mpsl", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727022307, "uuid": "3b455349-78ff-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.165.221.158/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.arm7", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727022307, "uuid": "3b459bc2-78ff-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.165.221.158/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.arm6", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727022307, "uuid": "3b4788bb-78ff-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.165.221.158/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.sh4", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727022307, "uuid": "3b4ad1db-78ff-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.165.221.158/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.m68k", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727022307, "uuid": "3b4e8911-78ff-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.165.221.158/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.i686", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727022307, "uuid": "3b519312-78ff-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.165.221.158/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.ppc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727022309, "uuid": "3c75c195-78ff-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.165.221.158/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.arc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727022309, "uuid": "3c76054d-78ff-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.165.221.158/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.spc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727022309, "uuid": "3c7802ab-78ff-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.165.221.158/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.arm", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727022309, "uuid": "3c797d81-78ff-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.165.221.158/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.arm5", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727022309, "uuid": "3c7e1b41-78ff-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.165.221.158/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727022309, "uuid": "3c7e59fd-78ff-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.165.221.158/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.x86", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727022335, "uuid": "4beb869e-78ff-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.50.91.55/test", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727022335, "uuid": "4beb869a-78ff-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.50.91.55/arm4", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727022335, "uuid": "4bede1dc-78ff-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.50.91.55/mpsl", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727022335, "uuid": "4bef45ed-78ff-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.50.91.55/x86_64", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727022335, "uuid": "4befc987-78ff-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.50.91.55/ppc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727022365, "uuid": "5ddf3594-78ff-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.60.235.159:38519/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727022428, "uuid": "834593be-78ff-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.51.123:45276/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727022485, "uuid": "a566039b-78ff-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.4.228:46394/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727022546, "uuid": "c9b4d6a0-78ff-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.208.119:34679/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727022849, "uuid": "7e477b5c-7900-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.12.156:38690/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727022917, "uuid": "a67c5b2f-7900-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.2.206:49640/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727023266, "uuid": "768013bb-7901-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.49.130:38127/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727023266, "uuid": "76a7e002-7901-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.116.32:47992/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727023565, "uuid": "29252aef-7902-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.181.46:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727023808, "uuid": "b9825feb-7902-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.94.135:33549/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727023866, "uuid": "dc4732a2-7902-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.205.8:52994/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727023926, "uuid": "0060df04-7903-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.211.188.138:54704/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727023927, "uuid": "00c0b819-7903-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.imety.edu.co/wp-content/cry.bmp", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727023986, "uuid": "2419a75e-7903-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.240.134:55351/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727024109, "uuid": "6ce9b4b9-7903-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.232.86:55448/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727024109, "uuid": "6cea611b-7903-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.10.83:48571/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727024166, "uuid": "8f341bde-7903-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.110.43:58056/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727024167, "uuid": "8f7a3e11-7903-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.183.182:48885/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727024167, "uuid": "8f96dd24-7903-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.170.174:49942/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727024168, "uuid": "90904bac-7903-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.143.247:51778/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727024225, "uuid": "b25fc7e1-7903-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.208.119:34679/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727024226, "uuid": "b2ae1a29-7903-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.125.86:47237/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727024237, "uuid": "b9a2f99d-7903-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.152.112:60818/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727024285, "uuid": "d60463b6-7903-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.114.92:41659/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727024345, "uuid": "f9a8de4c-7903-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.2.206:49640/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727024476, "uuid": "47ca2828-7904-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.18.52:45162/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727024526, "uuid": "65aff3bf-7904-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.139.223:33051/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727024707, "uuid": "d1a23706-7904-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.167.229.220:58287/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727024827, "uuid": "190c6a8b-7905-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.92.23:59343/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727024888, "uuid": "3dc4b779-7905-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.221.131:35885/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025130, "uuid": "cdfb0ba7-7905-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.33.17:43292/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025191, "uuid": "f1ded6e9-7905-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.99.148.27:41526/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025311, "uuid": "39d3848d-7906-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.177.253:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025367, "uuid": "5b478c37-7906-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.232.86:55448/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025486, "uuid": "a2152647-7906-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://197.94.193.35:47655/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025487, "uuid": "a24bb630-7906-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.10.83:48571/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025547, "uuid": "c5f9e200-7906-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.183.182:48885/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025727, "uuid": "316e06c6-7907-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.200.149.45/9e16d717fbeceda0/msvcp140.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025727, "uuid": "316fea01-7907-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.200.149.45/9e16d717fbeceda0/vcruntime140.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025727, "uuid": "319c2e87-7907-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.200.149.45/9e16d717fbeceda0/mozglue.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025727, "uuid": "31a65017-7907-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.200.149.45/9e16d717fbeceda0/freebl3.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025727, "uuid": "31b50744-7907-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.200.149.45/9e16d717fbeceda0/sqlite3.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025727, "uuid": "31d6ff00-7907-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.200.149.45/9e16d717fbeceda0/softokn3.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025728, "uuid": "31f01f28-7907-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.200.149.45/9e16d717fbeceda0/nss3.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025786, "uuid": "54f06ecc-7907-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.117.236:47244/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025858, "uuid": "7fe949e6-7907-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.156.128:35551/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025966, "uuid": "bfefa92c-7907-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.127.34.110/custom.spc", "Tag": [ { "name": "custom", "colour": "#b86c1f", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025966, "uuid": "c0030f20-7907-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.127.34.110/updates.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025966, "uuid": "c0031654-7907-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.127.34.110/bin.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025966, "uuid": "c041c991-7907-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.127.34.110/fuckjewishpeople.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025966, "uuid": "c04e78d2-7907-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.183.29.86:37665/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025967, "uuid": "c053b6f8-7907-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.127.34.110/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025967, "uuid": "c07b5be8-7907-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.127.34.110/arm6.nn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727025968, "uuid": "c0fe2d22-7907-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.127.34.110/bins/custom.spc", "Tag": [ { "name": "custom", "colour": "#b86c1f", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727026027, "uuid": "e47bebd7-7907-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.200.149.43/9e16d717fbeceda0/sqlite3.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727026027, "uuid": "e48cf914-7907-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.200.149.43/9e16d717fbeceda0/freebl3.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727026027, "uuid": "e490765c-7907-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.200.149.43/9e16d717fbeceda0/softokn3.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727026027, "uuid": "e4a0dff3-7907-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.200.149.43/9e16d717fbeceda0/vcruntime140.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727026028, "uuid": "e4af548f-7907-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.237.143:57655/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727026028, "uuid": "e4c77d7d-7907-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.152.112:60818/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727026028, "uuid": "e4cb5e68-7907-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.200.149.43/9e16d717fbeceda0/mozglue.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727026028, "uuid": "e4e8cfa0-7907-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.200.149.43/9e16d717fbeceda0/msvcp140.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727026028, "uuid": "e4fdc5dd-7907-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.127.140:38212/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727026028, "uuid": "e52b2fad-7907-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.200.149.43/9e16d717fbeceda0/nss3.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727026030, "uuid": "e63f9560-7907-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.17.215:47057/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727026086, "uuid": "07afd45f-7908-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.167.229.220:58287/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727026087, "uuid": "07fb97c1-7908-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.119.225:44613/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727026268, "uuid": "7400e815-7908-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.92.23:59343/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727026326, "uuid": "96a74d0f-7908-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://transfer.adminforge.de/get/Uo8AkyGUGr/crypted.exe", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727026343, "uuid": "a09ac815-7908-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.70.130:39105/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727026986, "uuid": "1fd52ee5-790a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.86.218:58393/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727027109, "uuid": "6961e4c8-790a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.58.41:35279/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727027225, "uuid": "ae6b0904-790a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.71.153:57515/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727027363, "uuid": "008afa8f-790b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.101.1:42859/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727027466, "uuid": "3e03ae49-790b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.156.128:35551/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727027586, "uuid": "85799c4e-790b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.183.29.86:37665/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727027586, "uuid": "858ae289-790b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.237.143:57655/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727027586, "uuid": "858bcd1a-790b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.234.236:60479/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727027616, "uuid": "97b3e601-790b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.180.222.120:44072/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727027654, "uuid": "ae3ad6c4-790b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.10.190:54601/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727027709, "uuid": "cebc030a-790b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.17.215:47057/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727027886, "uuid": "387e9639-790c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.211.241:41086/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727027945, "uuid": "5b73dc68-790c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.119.225:44613/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028125, "uuid": "c6f7f4ea-790c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230/thinkphp", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028125, "uuid": "c6f8621f-790c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230/lg", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028125, "uuid": "c6fba2dc-790c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230/huawei", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028125, "uuid": "c6fc9eb5-790c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230/zte", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028125, "uuid": "c6fdd18d-790c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230/jaws", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028125, "uuid": "c7023e3d-790c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230/yarn", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028125, "uuid": "c7204591-790c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230/goahead", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028125, "uuid": "c72495cc-790c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230/gpon443", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028125, "uuid": "c729f960-790c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230/zyxel", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028125, "uuid": "c72caaf8-790c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230/realtek", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028126, "uuid": "c7b579d5-790c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230/aws", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028188, "uuid": "eca93ce7-790c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230:85/zmap.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028188, "uuid": "eca9b0af-790c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230/zmap.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028188, "uuid": "ecab37f6-790c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230:85/zmap.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028188, "uuid": "ecaba9dc-790c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230/zeros6x.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028188, "uuid": "ecabb3d5-790c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230:85/zmap.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028188, "uuid": "ecabb647-790c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230:85/zmap.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028188, "uuid": "ecabeb8d-790c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230:85/zmap.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028188, "uuid": "ecade4c1-790c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230/zmap.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028188, "uuid": "ecaf6bb4-790c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230/zmap.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028189, "uuid": "ecbdebcf-790c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.82.65:43415/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028189, "uuid": "ecd06cf3-790c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230/zmap.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028189, "uuid": "ecd08496-790c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230:85/zmap.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028189, "uuid": "ecd4c6c3-790c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230:85/zmap.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028189, "uuid": "ece1439f-790c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.174.178:40932/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028189, "uuid": "ed3644e6-790c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230/zmap.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028189, "uuid": "ed382a98-790c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.184.197:38018/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028189, "uuid": "ed4ef445-790c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.176.187:49421/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028190, "uuid": "ed6b0e07-790c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.173.201:42019/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028190, "uuid": "ed7a7b33-790c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.27.73:55108/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028190, "uuid": "ed7a7da6-790c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.141.186:47858/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028190, "uuid": "edcca9e2-790c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230/zmap.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028190, "uuid": "edccddc3-790c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230:85/zmap.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028191, "uuid": "ee52399a-790c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230:85/zmap.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028192, "uuid": "ee88527c-790c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230/zmap.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028192, "uuid": "ee9f4942-790c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230/zmap.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028192, "uuid": "eead08f5-790c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230:85/zmap.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028192, "uuid": "eeb9cac5-790c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230:85/zmap.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028192, "uuid": "eec007c8-790c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230/zmap.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028192, "uuid": "eed23f53-790c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230/zmap.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028201, "uuid": "f423e5c9-790c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.191.13:36925/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028202, "uuid": "f4c4eaab-790c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.113.246:40402/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028245, "uuid": "0e1f4579-790d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230/zmap.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028245, "uuid": "0e2be5b5-790d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230/zmap.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028246, "uuid": "0efb45c0-790d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.107.82:50451/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028364, "uuid": "5589717b-790d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230:8080/zmap.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028364, "uuid": "5589947c-790d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230:8080/zmap.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028364, "uuid": "5589abbb-790d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230:8080/zmap.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028364, "uuid": "559ddb6b-790d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230:8080/zmap.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028364, "uuid": "55a0469c-790d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230:8080/zmap.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028365, "uuid": "55ae5b3d-790d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230:8080/zmap.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028365, "uuid": "55ae5df9-790d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230:8080/zmap.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028365, "uuid": "55c80a3c-790d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230:8080/zmap.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028365, "uuid": "5633759d-790d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230:8080/zmap.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028366, "uuid": "563bc256-790d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230:8080/zmap.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028366, "uuid": "564178d8-790d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230:8080/zmap.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028366, "uuid": "564c3f1e-790d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230:8080/zmap.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028487, "uuid": "9e6d57e3-790d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.0.152:45916/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028499, "uuid": "a60dfcff-790d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.117.138:40104/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028618, "uuid": "ecab6cae-790d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.243.129.2/1_DXL_WindowsPort.zip", "Tag": [ { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "KMSAuto", "colour": "#78A617", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028618, "uuid": "ecb53492-790d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.243.129.2/DXL_Win_Tool_V9.6.iso", "Tag": [ { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "iso", "colour": "#f7044c", "exportable": true, "hide_tag": false }, { "name": "KMSAuto", "colour": "#78A617", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028618, "uuid": "ecb674f6-790d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://down.fwqlt.com/1_DXL_WindowsPort.zip", "Tag": [ { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "KMSAuto", "colour": "#78A617", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028619, "uuid": "ed469ed4-790d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.243.129.2/DXL_Win_Tool_v9.4.iso", "Tag": [ { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "iso", "colour": "#f7044c", "exportable": true, "hide_tag": false }, { "name": "KMSAuto", "colour": "#78A617", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028620, "uuid": "ee2c86d8-790d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://down.fwqlt.com/1-%E4%BF%AE%E6%94%B9%E7%AB%AF%E5%8F%A3.zip", "Tag": [ { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "iso", "colour": "#f7044c", "exportable": true, "hide_tag": false }, { "name": "KMSAuto", "colour": "#78A617", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028621, "uuid": "eec4a808-790d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.243.129.2/1-%E4%BF%AE%E6%94%B9%E7%AB%AF%E5%8F%A3.zip", "Tag": [ { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "iso", "colour": "#f7044c", "exportable": true, "hide_tag": false }, { "name": "KMSAuto", "colour": "#78A617", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028622, "uuid": "ef3fc9ca-790d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.243.129.2/1-%E4%BF%AE%E6%94%B9%E7%AB%AF%E5%8F%A3.iso", "Tag": [ { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "iso", "colour": "#f7044c", "exportable": true, "hide_tag": false }, { "name": "KMSAuto", "colour": "#78A617", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028675, "uuid": "0eaf4792-790e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.243.129.2/1_DXL_Win_Tool_V9.6.zip", "Tag": [ { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "KMSAuto", "colour": "#78A617", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028683, "uuid": "136f66d1-790e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://down.fwqlt.com/1_DXL_Win_Tool_V9.6.zip", "Tag": [ { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "KMSAuto", "colour": "#78A617", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028683, "uuid": "137ef790-790e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.249.231:36617/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028727, "uuid": "2df98b0b-790e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.20.155:47268/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028845, "uuid": "7445f1a4-790e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.71.153:57515/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028856, "uuid": "7ad405d5-790e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://down.fwqlt.com/DXL_Win_Tool_v9.4.iso", "Tag": [ { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "iso", "colour": "#f7044c", "exportable": true, "hide_tag": false }, { "name": "KMSAuto", "colour": "#78A617", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028857, "uuid": "7b75b57f-790e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://down.fwqlt.com/1-%E4%BF%AE%E6%94%B9%E7%AB%AF%E5%8F%A3.iso", "Tag": [ { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "iso", "colour": "#f7044c", "exportable": true, "hide_tag": false }, { "name": "KMSAuto", "colour": "#78A617", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028858, "uuid": "7bb00ed9-790e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://down.fwqlt.com/DXL_Win_Tool_V9.6.iso", "Tag": [ { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "iso", "colour": "#f7044c", "exportable": true, "hide_tag": false }, { "name": "KMSAuto", "colour": "#78A617", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028909, "uuid": "9a4347d0-790e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.101.19:49640/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727028965, "uuid": "bbb0aed7-790e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230:85/dx.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727029025, "uuid": "df4553cd-790e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.230:85/debug.dbg", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727029025, "uuid": "df94b2d1-790e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.117.236:47244/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727029093, "uuid": "07948d06-790f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://dfgdfgfhgjfggedfgdfhvh.xyz/server/new/otr.exe", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727029146, "uuid": "275d0fa5-790f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.234.236:60479/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727029208, "uuid": "4c528efa-790f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.101.1:42859/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727029626, "uuid": "4564e898-7910-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.211.241:41086/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727029685, "uuid": "68f8024f-7910-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.107.82:50451/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727029690, "uuid": "6bd3ccad-7910-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.165.81:60874/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727029708, "uuid": "765b6537-7910-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.16.60:56283/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727029825, "uuid": "bc45e8b4-7910-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://69.117.23.50:44458/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727029867, "uuid": "d560d660-7910-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.117.138:40104/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030106, "uuid": "63947295-7911-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.249.236/bins/jade.mpsl", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ECHOBOT", "colour": "#30a891", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030106, "uuid": "63a560be-7911-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.249.236/bins/jade.arm7", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ECHOBOT", "colour": "#30a891", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030108, "uuid": "64bbf32d-7911-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.249.236/bins/jade.mips", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ECHOBOT", "colour": "#30a891", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030109, "uuid": "659a2145-7911-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.249.236/bins/jade.arm5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ECHOBOT", "colour": "#30a891", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030110, "uuid": "65e0503b-7911-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.249.236/bins/jade.ppc", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ECHOBOT", "colour": "#30a891", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030110, "uuid": "65e6188f-7911-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.249.236/bins/jade.spc", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ECHOBOT", "colour": "#30a891", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030114, "uuid": "682f3e32-7911-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.249.236/bins/jade.m68k", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ECHOBOT", "colour": "#30a891", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030165, "uuid": "86f10a3b-7911-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.249.236/bins/jade.arm6", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ECHOBOT", "colour": "#30a891", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030165, "uuid": "86f1b19b-7911-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.249.236/bins/jade.arm", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ECHOBOT", "colour": "#30a891", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030165, "uuid": "86fdb4ac-7911-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.180.222.120:44072/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030166, "uuid": "8734e270-7911-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.163.106:41850/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030169, "uuid": "88fb9fa3-7911-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://dfgdfgfhgjfggedfgdfhvh.xyz/server/new/cry.exe", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030225, "uuid": "aa5438eb-7911-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.249.236/bins/jade.x86", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ECHOBOT", "colour": "#30a891", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030225, "uuid": "aac726d7-7911-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.20.155:47268/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030294, "uuid": "d36fe3d6-7911-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.139.56:54415/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030345, "uuid": "f22ae828-7911-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.101.19:49640/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030345, "uuid": "f2538175-7911-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.44.104/prog/66f063cce5470_crypted.exe#xin", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030468, "uuid": "3b7c6d8c-7912-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.87.221:57959/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030524, "uuid": "5cf6d9fb-7912-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.44.104/lopsa/66f064675abb3_lyla3.exe", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030525, "uuid": "5d1bd051-7912-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.103.91:40751/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030590, "uuid": "84608721-7912-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.134.106:48940/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030650, "uuid": "a8098f44-7912-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.47.10:33377/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030828, "uuid": "1246ef8c-7913-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.8.198:49926/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030948, "uuid": "5965f8d8-7913-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.253.246.137/roze.mips", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "dayzddos", "colour": "#CC1FA5", "exportable": true, "hide_tag": false }, { "name": "dedsec", "colour": "#EBC62B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "kaiten", "colour": "#6e04b0", "exportable": true, "hide_tag": false }, { "name": "roze", "colour": "#b8cdc0", "exportable": true, "hide_tag": false }, { "name": "RyM", "colour": "#1A24D4", "exportable": true, "hide_tag": false }, { "name": "unknown", "colour": "#e83c34", "exportable": true, "hide_tag": false }, { "name": "Vixaati", "colour": "#128FB0", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030948, "uuid": "596bd690-7913-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.253.246.137/roze.mipsel", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "dayzddos", "colour": "#CC1FA5", "exportable": true, "hide_tag": false }, { "name": "dedsec", "colour": "#EBC62B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "kaiten", "colour": "#6e04b0", "exportable": true, "hide_tag": false }, { "name": "roze", "colour": "#b8cdc0", "exportable": true, "hide_tag": false }, { "name": "RyM", "colour": "#1A24D4", "exportable": true, "hide_tag": false }, { "name": "unknown", "colour": "#e83c34", "exportable": true, "hide_tag": false }, { "name": "Vixaati", "colour": "#128FB0", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030948, "uuid": "59742170-7913-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.253.246.137/roze.armv6", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "dayzddos", "colour": "#CC1FA5", "exportable": true, "hide_tag": false }, { "name": "dedsec", "colour": "#EBC62B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "kaiten", "colour": "#6e04b0", "exportable": true, "hide_tag": false }, { "name": "roze", "colour": "#b8cdc0", "exportable": true, "hide_tag": false }, { "name": "RyM", "colour": "#1A24D4", "exportable": true, "hide_tag": false }, { "name": "unknown", "colour": "#e83c34", "exportable": true, "hide_tag": false }, { "name": "Vixaati", "colour": "#128FB0", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030948, "uuid": "59747583-7913-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.253.246.137/roze.armv4", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "dayzddos", "colour": "#CC1FA5", "exportable": true, "hide_tag": false }, { "name": "dedsec", "colour": "#EBC62B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "kaiten", "colour": "#6e04b0", "exportable": true, "hide_tag": false }, { "name": "roze", "colour": "#b8cdc0", "exportable": true, "hide_tag": false }, { "name": "RyM", "colour": "#1A24D4", "exportable": true, "hide_tag": false }, { "name": "unknown", "colour": "#e83c34", "exportable": true, "hide_tag": false }, { "name": "Vixaati", "colour": "#128FB0", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030948, "uuid": "59842382-7913-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.253.246.137/roze.armv5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "dayzddos", "colour": "#CC1FA5", "exportable": true, "hide_tag": false }, { "name": "dedsec", "colour": "#EBC62B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "kaiten", "colour": "#6e04b0", "exportable": true, "hide_tag": false }, { "name": "roze", "colour": "#b8cdc0", "exportable": true, "hide_tag": false }, { "name": "RyM", "colour": "#1A24D4", "exportable": true, "hide_tag": false }, { "name": "unknown", "colour": "#e83c34", "exportable": true, "hide_tag": false }, { "name": "Vixaati", "colour": "#128FB0", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030949, "uuid": "5a5c3e7e-7913-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.253.246.137/roze.ppc", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "dayzddos", "colour": "#CC1FA5", "exportable": true, "hide_tag": false }, { "name": "dedsec", "colour": "#EBC62B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "kaiten", "colour": "#6e04b0", "exportable": true, "hide_tag": false }, { "name": "roze", "colour": "#b8cdc0", "exportable": true, "hide_tag": false }, { "name": "RyM", "colour": "#1A24D4", "exportable": true, "hide_tag": false }, { "name": "unknown", "colour": "#e83c34", "exportable": true, "hide_tag": false }, { "name": "Vixaati", "colour": "#128FB0", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030949, "uuid": "5a69cc0c-7913-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.253.246.137/roze.x86", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "dayzddos", "colour": "#CC1FA5", "exportable": true, "hide_tag": false }, { "name": "dedsec", "colour": "#EBC62B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "kaiten", "colour": "#6e04b0", "exportable": true, "hide_tag": false }, { "name": "roze", "colour": "#b8cdc0", "exportable": true, "hide_tag": false }, { "name": "RyM", "colour": "#1A24D4", "exportable": true, "hide_tag": false }, { "name": "unknown", "colour": "#e83c34", "exportable": true, "hide_tag": false }, { "name": "Vixaati", "colour": "#128FB0", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030950, "uuid": "5a69da42-7913-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.253.246.137/roze.m68k", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "dayzddos", "colour": "#CC1FA5", "exportable": true, "hide_tag": false }, { "name": "dedsec", "colour": "#EBC62B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "kaiten", "colour": "#6e04b0", "exportable": true, "hide_tag": false }, { "name": "roze", "colour": "#b8cdc0", "exportable": true, "hide_tag": false }, { "name": "RyM", "colour": "#1A24D4", "exportable": true, "hide_tag": false }, { "name": "unknown", "colour": "#e83c34", "exportable": true, "hide_tag": false }, { "name": "Vixaati", "colour": "#128FB0", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030950, "uuid": "5a70060f-7913-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.253.246.137/roze.i586", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "dayzddos", "colour": "#CC1FA5", "exportable": true, "hide_tag": false }, { "name": "dedsec", "colour": "#EBC62B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "kaiten", "colour": "#6e04b0", "exportable": true, "hide_tag": false }, { "name": "roze", "colour": "#b8cdc0", "exportable": true, "hide_tag": false }, { "name": "RyM", "colour": "#1A24D4", "exportable": true, "hide_tag": false }, { "name": "unknown", "colour": "#e83c34", "exportable": true, "hide_tag": false }, { "name": "Vixaati", "colour": "#128FB0", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030950, "uuid": "5a84e7c2-7913-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.253.246.137/roze.sh4", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "dayzddos", "colour": "#CC1FA5", "exportable": true, "hide_tag": false }, { "name": "dedsec", "colour": "#EBC62B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "kaiten", "colour": "#6e04b0", "exportable": true, "hide_tag": false }, { "name": "roze", "colour": "#b8cdc0", "exportable": true, "hide_tag": false }, { "name": "RyM", "colour": "#1A24D4", "exportable": true, "hide_tag": false }, { "name": "unknown", "colour": "#e83c34", "exportable": true, "hide_tag": false }, { "name": "Vixaati", "colour": "#128FB0", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030950, "uuid": "5a948965-7913-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.253.246.137/roze.i686", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "dayzddos", "colour": "#CC1FA5", "exportable": true, "hide_tag": false }, { "name": "dedsec", "colour": "#EBC62B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "kaiten", "colour": "#6e04b0", "exportable": true, "hide_tag": false }, { "name": "roze", "colour": "#b8cdc0", "exportable": true, "hide_tag": false }, { "name": "RyM", "colour": "#1A24D4", "exportable": true, "hide_tag": false }, { "name": "unknown", "colour": "#e83c34", "exportable": true, "hide_tag": false }, { "name": "Vixaati", "colour": "#128FB0", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727030952, "uuid": "5bb68cd6-7913-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.253.246.137/roze.sparc", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "dayzddos", "colour": "#CC1FA5", "exportable": true, "hide_tag": false }, { "name": "dedsec", "colour": "#EBC62B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "kaiten", "colour": "#6e04b0", "exportable": true, "hide_tag": false }, { "name": "roze", "colour": "#b8cdc0", "exportable": true, "hide_tag": false }, { "name": "RyM", "colour": "#1A24D4", "exportable": true, "hide_tag": false }, { "name": "unknown", "colour": "#e83c34", "exportable": true, "hide_tag": false }, { "name": "Vixaati", "colour": "#128FB0", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727031185, "uuid": "e6ecd03e-7913-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.190.37:52740/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727031195, "uuid": "ecae0dbc-7913-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.120.188:39734/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727031246, "uuid": "0b138c89-7914-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.136.45:34035/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727031307, "uuid": "2f7a7203-7914-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.35.240:47799/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727031457, "uuid": "88c83e54-7914-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.193.120:59662/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727031505, "uuid": "a5bf8557-7914-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.211.86:53957/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727031549, "uuid": "bf94e86d-7914-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.206.76.183/xmrig.exe", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727031550, "uuid": "c01245e7-7914-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.206.76.183/wconfig.json", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "config", "colour": "#10580c", "exportable": true, "hide_tag": false }, { "name": "json", "colour": "#84a2e5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727031551, "uuid": "c0dec332-7914-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.145.30:59792/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727031725, "uuid": "28e3ec00-7915-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.8.198:49926/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727031791, "uuid": "50173a65-7915-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.220.208.22:55513/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727031909, "uuid": "967140d9-7915-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.122.191:58623/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727031966, "uuid": "b820141f-7915-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.103.91:40751/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032025, "uuid": "dbc1ec26-7915-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.250.165:36059/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032086, "uuid": "ffab0453-7915-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.126.119:45997/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032270, "uuid": "6d8b87c2-7916-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.116.42:55294/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032451, "uuid": "d997facf-7916-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.235.230:44580/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032565, "uuid": "1d862466-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.84.35:53502/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032625, "uuid": "412d8d0a-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.122.191:58623/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032625, "uuid": "413e0405-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.47.10:33377/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032686, "uuid": "65534b65-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.233.136:52670/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032701, "uuid": "6e47109d-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.101.176:39471/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032869, "uuid": "d26e9ff5-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com/goahead", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032869, "uuid": "d282b23f-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com/zmap.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032869, "uuid": "d287162d-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com:8080/zmap.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032869, "uuid": "d28ed13e-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com:85/zmap.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032869, "uuid": "d29203b8-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com/aws", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032869, "uuid": "d2933a7f-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com/zyxel", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032869, "uuid": "d2939d6e-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com:8080/zmap.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032869, "uuid": "d29b86a7-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com/zmap.spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032869, "uuid": "d29c5af6-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com/zmap.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032869, "uuid": "d2a08d5c-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com/zte", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032869, "uuid": "d2a22d58-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com:85/zmap.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032869, "uuid": "d2a2dc1f-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com/yarn", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032869, "uuid": "d2a51366-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.136.45:34035/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032869, "uuid": "d2b5c961-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com:85/zmap.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032869, "uuid": "d2ba1177-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com/lg", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032869, "uuid": "d2bd5d07-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com/jaws", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032869, "uuid": "d2bef3e9-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com:8080/zmap.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032869, "uuid": "d2bf82e9-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com/zmap.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032869, "uuid": "d2c040ab-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com/zeros6x.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032869, "uuid": "d2c12758-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com/realtek", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032869, "uuid": "d2c387c8-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com:85/zmap.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032869, "uuid": "d2c4d977-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com:8080/zmap.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032869, "uuid": "d2cea47e-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com/zmap.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032870, "uuid": "d2d7cda9-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com/zmap.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032870, "uuid": "d2f086a4-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com:8080/zmap.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032870, "uuid": "d2ffd18a-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com:85/zmap.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032870, "uuid": "d3123130-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com:8080/zmap.spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032870, "uuid": "d314ff2b-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com/gpon443", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032870, "uuid": "d315a3cc-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com/zmap.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032873, "uuid": "d4b1c347-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com/thinkphp", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032873, "uuid": "d4b203f4-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com:85/dx.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032873, "uuid": "d4b6c827-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com:85/zmap.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032873, "uuid": "d4c19ba0-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com:85/zmap.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032873, "uuid": "d4c5ebea-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com:85/zmap.spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032873, "uuid": "d4cb4891-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com/huawei", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032873, "uuid": "d51612df-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com/zmap.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032874, "uuid": "d5a1ca64-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com/zmap.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032875, "uuid": "d5d2fbcb-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com:8080/zmap.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032875, "uuid": "d6173b6a-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com:85/zmap.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032876, "uuid": "d67e7cac-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com/zmap.x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032876, "uuid": "d69f5822-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com/zmap.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032876, "uuid": "d6a2e321-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com:8080/zmap.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032876, "uuid": "d6b87454-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com/debug.dbg", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032876, "uuid": "d6c4ba50-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com:8080/zmap.x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032876, "uuid": "d6d1dec8-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com/zmap.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032876, "uuid": "d6d9b5ec-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com:8080/zmap.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032876, "uuid": "d6e3487a-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com:85/zmap.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032876, "uuid": "d6ec9f1c-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com:85/debug.dbg", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032876, "uuid": "d6f2efbf-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com:85/zmap.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032925, "uuid": "f39c7efa-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com:8080/zmap.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032925, "uuid": "f40df347-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.183.140:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032927, "uuid": "f541f670-7917-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fgwe.myvnc.com:8080/zmap.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zmap", "colour": "#76410a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727032986, "uuid": "183865d8-7918-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.41.242:54615/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727033074, "uuid": "4cd1fad5-7918-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.193.120:59662/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727033109, "uuid": "61a67675-7918-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.211.86:53957/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727033242, "uuid": "b091e1e5-7918-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.84.245:38767/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727033286, "uuid": "cb2e4d52-7918-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.145.30:59792/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727033347, "uuid": "ef7b5054-7918-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.187.68:37237/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727033645, "uuid": "a1141d62-7919-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.126.119:45997/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727033884, "uuid": "2fb9bac4-791a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.217.231:58945/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727033885, "uuid": "2fee8949-791a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.114.116.68:37699/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727033886, "uuid": "30d4c32b-791a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.58/p1.html", "Tag": [ { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727034007, "uuid": "78da4eb6-791a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.134.106:48940/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727034125, "uuid": "bf62fff4-791a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.35.240:47799/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727034125, "uuid": "bf686c21-791a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.84.35:53502/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727034137, "uuid": "c69aa307-791a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.39.67.248/KMSAuto%20Net%202016%20v1.5.0%20Portable.rar", "Tag": [ { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "KMSAuto", "colour": "#78A617", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727034185, "uuid": "e3127493-791a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.116.42:55294/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727034186, "uuid": "e399ec65-791a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.18.159:39180/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727034307, "uuid": "2b9d1777-791b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.101.252:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727034308, "uuid": "2c22f7f6-791b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.87.168:45585/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727034425, "uuid": "721edb74-791b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.101.176:39471/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727034485, "uuid": "95be71d6-791b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.235.230:44580/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727034546, "uuid": "b9d89b0f-791b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.219.134:50439/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727034546, "uuid": "b9f77a6f-791b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.18.67:54478/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727034666, "uuid": "0191ec5b-791c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.190.37:52740/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727034681, "uuid": "0a69ee19-791c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.76.200:51975/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727034730, "uuid": "27d42ff7-791c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.136.86.68:60006/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727034907, "uuid": "914cc99d-791c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.116.215.195/File.exe", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727034965, "uuid": "b3e9af6b-791c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.161.37.93:55584/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727035507, "uuid": "f704f41b-791d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.18.67:54478/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727035530, "uuid": "045d347e-791e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.122.9:40626/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727035626, "uuid": "3dfe56f7-791e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.114.116.68:37699/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727035635, "uuid": "431f92d8-791e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.62.255:45930/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727035746, "uuid": "851977cd-791e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.39.45:44310/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727035748, "uuid": "86819840-791e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.46.236.122:48478/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727035879, "uuid": "d4d3280d-791e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.127.188:48433/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727036359, "uuid": "f2897cf3-791f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.214.193.241:39710/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727036483, "uuid": "3c6712a6-7920-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.125.208:51674/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727036525, "uuid": "55e6883d-7920-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.103.117:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727036530, "uuid": "58afe480-7920-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.205.120:32892/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727036585, "uuid": "79aa9565-7920-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.168.219:55097/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727036609, "uuid": "87d08d3b-7920-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.36.183:34912/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727036886, "uuid": "2cbc07b1-7921-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.92.75:59571/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727036898, "uuid": "33f0a779-7921-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.185.77:50861/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727036945, "uuid": "5038acfb-7921-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.62.255:45930/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727037010, "uuid": "767acc76-7921-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.39.45:44310/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727037066, "uuid": "9858937a-7921-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.135.120.135:47590/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727037186, "uuid": "dfa5220e-7921-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.46.236.122:48478/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727037187, "uuid": "e03960bc-7921-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.143.89:49526/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727037606, "uuid": "da320992-7922-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.122.9:40626/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727037606, "uuid": "da33d0d6-7922-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.127.188:48433/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727037665, "uuid": "fd63c1e0-7922-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.55.98.253:39347/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727037922, "uuid": "960dd3fb-7923-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.178.13:37623/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727037968, "uuid": "b1d8a630-7923-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.116.31:37717/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727038025, "uuid": "d3edf055-7923-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.205.120:32892/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727038054, "uuid": "e547ebeb-7923-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.188.247:44342/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727038085, "uuid": "f7abd845-7923-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.101.55:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727038385, "uuid": "aa35b1a7-7924-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.92.75:59571/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727038416, "uuid": "bc973b33-7924-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.252.171.98:42543/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727038445, "uuid": "ce497582-7924-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.185.77:50861/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727038625, "uuid": "396e8a74-7925-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.75.173:49198/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727038700, "uuid": "6632ae3f-7925-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.183.152:51269/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727038745, "uuid": "812b37ff-7925-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.143.89:49526/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727038820, "uuid": "ada7f959-7925-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.252.12:40279/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727038823, "uuid": "af39ee06-7925-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.200.180:58417/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727038993, "uuid": "14d7d3ea-7926-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.157.239:37287/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727038996, "uuid": "16c768aa-7926-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.248.144:47836/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727038998, "uuid": "17961aaf-7926-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.156.98:40204/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727039020, "uuid": "24aaa6b4-7926-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.33.15.105:37926/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727039046, "uuid": "345b7926-7926-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.144.106:48989/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727039050, "uuid": "36f80166-7926-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.229.118.178:39159/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727039059, "uuid": "3c0a71f5-7926-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.99.134:55009/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727039071, "uuid": "4343c1b3-7926-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.178.37:35325/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727039167, "uuid": "7c46daf2-7926-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.41.34:43373/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727039286, "uuid": "c3a64d7d-7926-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.178.13:37623/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727039465, "uuid": "2e3d2a32-7927-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.35.126:46439/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727039585, "uuid": "75be0316-7927-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.116.31:37717/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727039826, "uuid": "051c8abe-7928-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.200.180:58417/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727039946, "uuid": "4c93e9f7-7928-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.4.18.198:44815/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727040008, "uuid": "71699a3b-7928-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.151.255.34:52122/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727040008, "uuid": "71d79ab8-7928-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.192.238.68:43949/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727040068, "uuid": "952fe62e-7928-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.42.132:36931/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727040195, "uuid": "e140b061-7928-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.211.85:42641/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727040246, "uuid": "ff97f50b-7928-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.162.177:35158/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727040246, "uuid": "ffc19ffa-7928-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.181.26:32875/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727040308, "uuid": "24921484-7929-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.230.46:55403/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727040365, "uuid": "4662d020-7929-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.75.173:49198/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727040426, "uuid": "6ae1d439-7929-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.23.49:58189/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727040553, "uuid": "b64b56d9-7929-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.234.131:34464/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727040610, "uuid": "d87e5dea-7929-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.10.67:55782/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727040612, "uuid": "d96bb1e3-7929-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.192.32.39:54959/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727040612, "uuid": "d973ebbb-7929-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.87.221:57959/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727040666, "uuid": "fa28d41a-7929-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.234.222:33260/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727040667, "uuid": "fa440343-7929-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.95.26.208:38561/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727040694, "uuid": "0aa5dfdf-792a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.41.34:43373/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727040847, "uuid": "65c6e9cc-792a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.170.145:50010/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727040909, "uuid": "8a95a559-792a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.122.238:54474/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727040965, "uuid": "abeaec22-792a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.197.142.97:36981/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727041207, "uuid": "3c35e0d4-792b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.77.72:55428/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727041207, "uuid": "3c4c16f1-792b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.27.241:38587/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727041372, "uuid": "9e7d2f9d-792b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.182.186:51855/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727041386, "uuid": "a6dc9e5e-792b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.211.85:42641/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727041386, "uuid": "a6fd41cb-792b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.130.42.181:45411/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727041687, "uuid": "5a54fdd7-792c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.162.177:35158/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727041870, "uuid": "c7b3d63e-792c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.43.118:52938/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727041926, "uuid": "e8d7c9ad-792c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.95.26.208:38561/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727041926, "uuid": "e8e25f97-792c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.234.131:34464/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727041926, "uuid": "e8ef15d3-792c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.230.46:55403/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727041939, "uuid": "f0a8a039-792c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.3.143:50946/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727041987, "uuid": "0d53f369-792d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.51.13:59464/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727041998, "uuid": "13b922d7-792d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.118.201:56678/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727042226, "uuid": "9bac494b-792d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.161.160:53587/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727042286, "uuid": "bfb10dfd-792d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.197.62.124:53217/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727042346, "uuid": "e320f54a-792d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.148.67:49270/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727042408, "uuid": "086695cf-792e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.210.226:50581/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727042410, "uuid": "093d31c0-792e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.209.174:37767/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727042423, "uuid": "10e47c37-792e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.122.238:54474/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727042470, "uuid": "2d616f62-792e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.87.89:40146/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727042588, "uuid": "73801f0d-792e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.123.250:35755/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727042590, "uuid": "749bf8af-792e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.98.137:60999/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727042826, "uuid": "01276e48-792f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.68.215:50110/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727042945, "uuid": "48624f5c-792f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.87.89:40146/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727043101, "uuid": "a5403456-792f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.41.242:54615/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727043192, "uuid": "db91aedd-792f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.249.163:57993/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727043209, "uuid": "e5943180-792f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.197.168.31:60275/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727043233, "uuid": "f3b8fa86-792f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.122.213:53506/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727043245, "uuid": "fb359934-792f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.27.241:38587/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727043366, "uuid": "433b4f7b-7930-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.18.60:32946/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727043447, "uuid": "7389de70-7930-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.43.118:52938/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727043546, "uuid": "ae7588d6-7930-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.209.174:37767/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727043549, "uuid": "b07a6918-7930-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.165.107.36:39621/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727043726, "uuid": "19c78b1d-7931-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.3.143:50946/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727043784, "uuid": "3c9c3003-7931-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.161.160:53587/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727043908, "uuid": "86276865-7931-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.210.226:50581/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727044027, "uuid": "cd02e7f3-7931-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.247.29.31:48490/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727044148, "uuid": "1582ba0f-7932-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.197.168.31:60275/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727044266, "uuid": "5bc2c6dd-7932-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.30.90:55620/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727044266, "uuid": "5be41dad-7932-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.123.250:35755/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727044327, "uuid": "7ff994bc-7932-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.4.234:46416/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727044387, "uuid": "a39c7411-7932-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.148.67:49270/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727044387, "uuid": "a3b2cb6f-7932-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.68.215:50110/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727044446, "uuid": "c719b2aa-7932-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.72.155:43559/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727044626, "uuid": "31fcc297-7933-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.130.42.181:45411/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727044698, "uuid": "5d61903e-7933-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.136.19:38851/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727044746, "uuid": "79a8f1dd-7933-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.249.163:57993/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727044866, "uuid": "c14a8751-7933-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.74.248:56365/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727045123, "uuid": "5a4f2815-7934-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.165.107.36:39621/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727045286, "uuid": "bb6a7a9d-7934-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.89.161:40187/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727045407, "uuid": "03b948b0-7935-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.27.193:36937/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727045408, "uuid": "0428a46e-7935-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.101.133:46451/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727045408, "uuid": "044090a0-7935-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.173.53:44468/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727045416, "uuid": "0955fbca-7935-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.141.92:48897/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727045526, "uuid": "4abc128d-7935-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.245.175:33433/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727045527, "uuid": "4b437e34-7935-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.164.159:34000/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727045530, "uuid": "4d3bce5f-7935-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.124.105:58835/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727045533, "uuid": "4eba3820-7935-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.247.29.31:48490/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727045535, "uuid": "4feb055c-7935-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.42.201:49269/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727045587, "uuid": "6f4e4fe4-7935-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.51.41:56506/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727045679, "uuid": "a5f70a54-7935-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.239.187:60825/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727045767, "uuid": "da8799f2-7935-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.176.7:44484/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727045885, "uuid": "20f0b5c8-7936-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.89.161:40187/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727045946, "uuid": "44e9a323-7936-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.70.88:52528/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727045950, "uuid": "4735750a-7936-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.180.194.188:42289/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727046071, "uuid": "8f60c764-7936-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.147.249:58410/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727046082, "uuid": "95d658b1-7936-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.150.180:33499/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727046187, "uuid": "d48e7700-7936-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.177.28.155:47872/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727046190, "uuid": "d6747b3a-7936-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.70.110:54118/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727046608, "uuid": "cfb51140-7937-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.72.155:43559/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727046666, "uuid": "f2309ed2-7937-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.169.143:44566/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727046726, "uuid": "15de9b7d-7938-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.213.213:37654/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727046908, "uuid": "8295118a-7938-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.173.53:44468/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727046915, "uuid": "869583cc-7938-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.161.168:58851/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727046996, "uuid": "b6faabd6-7938-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.48.122:57376/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727047025, "uuid": "c7fb850c-7938-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.51.41:56506/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727047085, "uuid": "ec0a98cf-7938-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.101.133:46451/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727047085, "uuid": "ec226d41-7938-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.83.101:48453/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727047145, "uuid": "0f9d15b8-7939-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.59.238.158:39030/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727047206, "uuid": "33fc36d7-7939-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.176.7:44484/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727047265, "uuid": "574da5a6-7939-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.180.194.188:42289/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727047266, "uuid": "578d8765-7939-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.70.88:52528/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727047325, "uuid": "7b0e9918-7939-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.245.175:33433/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727047326, "uuid": "7b7a3dee-7939-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.0.97:53462/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727047332, "uuid": "7f624a9a-7939-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.42.201:49269/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727047385, "uuid": "9eb7014e-7939-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.87.137.175:33146/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727047511, "uuid": "e9e57175-7939-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.70.110:54118/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727047569, "uuid": "0c3329ca-793a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.177.28.155:47872/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727047626, "uuid": "2e9616e8-793a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.150.180:33499/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727047627, "uuid": "2effe398-793a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.181.110:53268/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727047686, "uuid": "51e0e3b1-793a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.44.118:53098/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727047810, "uuid": "9c029c66-793a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.109.5:36261/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727047876, "uuid": "c33620f5-793a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.254.97:46819/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727048108, "uuid": "4df101a4-793b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.92.246:50505/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727048166, "uuid": "7066c545-793b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.213.213:37654/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727048166, "uuid": "706869fd-793b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.193.78:55502/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727048346, "uuid": "db482b7f-793b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.213.137:56958/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727048408, "uuid": "00348ba0-793c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.169.143:44566/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727048526, "uuid": "46bd50ba-793c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.234.208:42309/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727048645, "uuid": "8df1f3cd-793c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.220.123:59094/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727048646, "uuid": "8e174bef-793c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.83.101:48453/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727048646, "uuid": "8e62e659-793c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.234.70:59280/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727048707, "uuid": "b28c2cfb-793c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.59.238.158:39030/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727048825, "uuid": "f901f89b-793c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.87.137.175:33146/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727048828, "uuid": "fabc11bb-793c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.229.22:59178/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727048886, "uuid": "1d2dcb5a-793d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.0.97:53462/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727049007, "uuid": "659b8e39-793d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.118.155:52325/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727049012, "uuid": "68bc3bcf-793d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.177.23:34178/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727049066, "uuid": "88ef16f6-793d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.161.168:58851/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727049084, "uuid": "934c2f15-793d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.74.217:46001/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727049125, "uuid": "ac0b1b9c-793d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.109.5:36261/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727049425, "uuid": "5ec1e866-793e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.92.246:50505/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727049426, "uuid": "5f336e03-793e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.181.110:53268/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727049545, "uuid": "a6485d2e-793e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.89.180.198:48055/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727049545, "uuid": "a669f730-793e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.162.142:38075/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727049546, "uuid": "a69d48ec-793e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.127.12:39659/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727049546, "uuid": "a6aaaba1-793e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.47.1:57637/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726992244, "uuid": "3be83343-78b9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.22.242.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726974183, "uuid": "2f327f2d-788f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.33.134.111", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727038983, "uuid": "0eace4b4-7926-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.33.15.105", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726984983, "uuid": "543811c4-78a8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.197.112.246", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726995784, "uuid": "7a03c360-78c1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.197.115.144", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727017443, "uuid": "e82266ca-78f3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.199.200.210", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726963444, "uuid": "2dfa41a2-7876-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.203.72.246", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726995784, "uuid": "7a03a940-78c1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.208.233.155", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726995784, "uuid": "7a03b505-78c1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.208.233.172", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726974183, "uuid": "2f32888c-788f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.208.233.212", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727023924, "uuid": "fe975f4e-7902-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.211.188.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726984983, "uuid": "5438a9dc-78a8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.247.54.125", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028605, "uuid": "e51def63-790d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "104.243.129.2", "Tag": [ { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "iso", "colour": "#f7044c", "exportable": true, "hide_tag": false }, { "name": "KMSAuto", "colour": "#78A617", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726970944, "uuid": "a44e17ed-7887-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.99.66.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726991223, "uuid": "db9db403-78b6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "106.4.174.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727034963, "uuid": "b2b133bb-791c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "109.161.37.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727002023, "uuid": "0116a5a1-78d0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.247.85.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999505, "uuid": "24072a08-78ca-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.111.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726992364, "uuid": "83adcae1-78b9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.116.144.56", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726985824, "uuid": "496821f6-78aa-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.118.135.222", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726991823, "uuid": "41324abb-78b8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.118.15.132", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726989724, "uuid": "5de81932-78b3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.228.150.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727027223, "uuid": "ad58f3ae-790a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.228.71.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727039044, "uuid": "331b2e4c-7926-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.229.118.178", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726984865, "uuid": "0da426ef-78a8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.229.174.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000883, "uuid": "59944765-78cd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.229.178.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727048524, "uuid": "45a0e1e1-793c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.231.234.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028905, "uuid": "97dd7e19-790e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.236.101.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726967464, "uuid": "8a1a348c-787f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.236.114.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981023, "uuid": "1bf66fc0-789f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.238.14.148", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726973583, "uuid": "c94a167e-788d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.238.161.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726973704, "uuid": "119463e3-788e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.99.201.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999206, "uuid": "71d22176-78c9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.225.85.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727009823, "uuid": "29f37f43-78e2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.158.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727042224, "uuid": "9a5b0157-792d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.161.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726972623, "uuid": "8d2b57fa-788b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.34.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727031905, "uuid": "93a53b06-7915-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.122.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727017564, "uuid": "2fc05e8e-78f4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.147.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727017805, "uuid": "bfe9ecfe-78f4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.216.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726993383, "uuid": "e330cde6-78bb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.24.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726980905, "uuid": "d58f477a-789e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.25.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726995363, "uuid": "7f1b740d-78c0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.66.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727022910, "uuid": "a2889249-7900-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.2.206", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727045283, "uuid": "b9f0fcec-7934-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.89.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727015164, "uuid": "996cd100-78ee-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.0.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727032263, "uuid": "6978dc5f-7916-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.116.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726977183, "uuid": "2b60ea0e-7896-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.54.135.114", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726994463, "uuid": "66a9ec6d-78be-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.10.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727031244, "uuid": "09aa042c-7914-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.136.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727041205, "uuid": "3aef0051-792b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.27.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726985284, "uuid": "07a51149-78a9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.39.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727042343, "uuid": "e1c04209-792d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.148.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726973223, "uuid": "f2e55b55-788c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.164.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727027106, "uuid": "67615d5c-790a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.58.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726975144, "uuid": "6b8c99d8-7891-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.222.198", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726989964, "uuid": "ed68ea8a-78b3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.168.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727006824, "uuid": "2e36844f-78db-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.59.59.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727012943, "uuid": "6df36a53-78e9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.75.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726973763, "uuid": "3483d587-788e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.13.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025183, "uuid": "ed917ef0-7905-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.99.148.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726995005, "uuid": "a9b7d2bb-78bf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.138.44.118", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726970522, "uuid": "a8d312e3-7886-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.139.236.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727005743, "uuid": "aa4335f3-78d8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.2.129.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726984983, "uuid": "5438d450-78a8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.77.75.249", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727009284, "uuid": "e8e497af-78e0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.192.232.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727040005, "uuid": "6ffb4a77-7928-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.192.238.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727040608, "uuid": "d767e0d5-7929-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.192.32.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726987564, "uuid": "56695561-78ae-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.192.34.156", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727008507, "uuid": "19a19e74-78df-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.192.39.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727018824, "uuid": "1ed6679a-78f7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.193.147.5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727001245, "uuid": "3132e15a-78ce-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.193.150.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727006104, "uuid": "814462b4-78d9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.194.211.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727040184, "uuid": "da8a672a-7928-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.194.211.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727031484, "uuid": "98f5e58d-7914-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.194.211.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727004124, "uuid": "e4e0285c-78d4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.195.189.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726963505, "uuid": "5241d2aa-7876-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.195.85.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727040962, "uuid": "aa5da977-792a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.197.142.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727043184, "uuid": "d687843d-792f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.197.168.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727042284, "uuid": "be269896-792d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.197.62.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988223, "uuid": "df827cc7-78af-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.17.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726986484, "uuid": "d2c9cb98-78ab-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.8.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727026024, "uuid": "e255afc2-7907-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.17.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726967643, "uuid": "f510b200-787f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.201.113.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988405, "uuid": "4c018122-78b0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.201.182.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726975809, "uuid": "f8008ee0-7892-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.201.20.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726969923, "uuid": "43d5acab-7885-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.202.92.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726972084, "uuid": "4bb2ee35-788a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.68.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727032983, "uuid": "16b538d2-7918-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.41.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726966624, "uuid": "9531c947-787d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.133.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727029683, "uuid": "67ba4c61-7910-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.16.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727024465, "uuid": "412755f3-7904-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.18.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727017443, "uuid": "e822608c-78f3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.184.192", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727036883, "uuid": "2b415b22-7921-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.185.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727038023, "uuid": "d2a9320d-7923-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.188.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028184, "uuid": "e9f5ae45-790c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.191.13", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727017443, "uuid": "e821ee0f-78f3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.191.45", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726974183, "uuid": "2f328ac2-788f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.22.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726966624, "uuid": "9531df9e-787d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.23.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726971964, "uuid": "0472e102-788a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.26.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727005984, "uuid": "39b649ab-78d9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.29.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726993683, "uuid": "960a114e-78bc-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.30.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726968244, "uuid": "5aee73d7-7881-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.75.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727034664, "uuid": "002d3422-791c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.76.200", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727038983, "uuid": "0eacdbca-7926-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.207.156.98", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726968123, "uuid": "131c8fef-7881-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.207.30.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726982883, "uuid": "70c09803-78a3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.207.61.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007423, "uuid": "937fa203-78dc-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.100.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727027344, "uuid": "f54532ca-790a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.101.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726970764, "uuid": "38fcff26-7887-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.138.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007063, "uuid": "bd2c9fec-78db-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.211.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727012883, "uuid": "49dd831a-78e9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.214.102", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000643, "uuid": "ca62cbce-78cc-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.217.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726963444, "uuid": "2dfa3ec9-7876-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.218.125", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981805, "uuid": "ee427f01-78a0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.220.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727017443, "uuid": "e826a04d-78f3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.23.117", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727011505, "uuid": "148ecfe7-78e6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.246.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726991823, "uuid": "413252f9-78b8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.248.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727047865, "uuid": "bcb8ef6c-793a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.254.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726986424, "uuid": "af162ac2-78ab-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.29.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726980905, "uuid": "d58f1492-789e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.31.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981083, "uuid": "3fdd83a7-789f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.210.178.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727038683, "uuid": "5bfd33f7-7925-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.210.183.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726964524, "uuid": "b1c8577b-7878-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.210.203.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726963384, "uuid": "0a33c45a-7876-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.226.219", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727040664, "uuid": "f8bbcf69-7929-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.234.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727011505, "uuid": "148ebe95-78e6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.239.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726996924, "uuid": "215cd310-78c4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.240.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726998843, "uuid": "99a95b47-78c8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.43.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981504, "uuid": "3adf4465-78a0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.43.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727035624, "uuid": "3cae66cf-791e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.212.62.255", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727009284, "uuid": "e8e47bd5-78e0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.114.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727041983, "uuid": "0acd07f8-792d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.118.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726973583, "uuid": "c94a4410-788d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.119.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726978863, "uuid": "145d6430-789a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.119.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727004363, "uuid": "73b20539-78d5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.241.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727017443, "uuid": "e82214c1-78f3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.243.136", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726974964, "uuid": "008040ad-7891-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.247.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727038805, "uuid": "a4b06504-7925-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.252.12", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726968064, "uuid": "ef8726e0-7880-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.86.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726963505, "uuid": "5241b665-7876-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.92.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727036344, "uuid": "e983b73a-791f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.214.193.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726965844, "uuid": "c458d422-787b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.157.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727038983, "uuid": "0eaca3e5-7926-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.157.239", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727005805, "uuid": "cf056a98-78d8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.130.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726991463, "uuid": "6adcc9e0-78b7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.140.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726984983, "uuid": "5438970b-78a8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.204.42", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981984, "uuid": "589ecce9-78a1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.38.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727046963, "uuid": "a3352eeb-7938-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.48.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726969505, "uuid": "4a9f5a8e-7884-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.116.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726986243, "uuid": "434f764f-78ab-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.119.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726987506, "uuid": "342b71c1-78ae-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.130.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028184, "uuid": "e9f631a7-790c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.141.186", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727033344, "uuid": "ed6e13c4-7918-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.187.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726991884, "uuid": "6555043a-78b8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.32.130", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727009462, "uuid": "530a19ab-78e1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.33.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726995543, "uuid": "eaa2cc97-78c0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.33.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727039163, "uuid": "7a3c293c-7926-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.41.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981624, "uuid": "81ddb150-78a0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.42.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726987204, "uuid": "804fbe27-78ad-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.45.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727021524, "uuid": "681d7abe-78fd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.49.130", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726972923, "uuid": "402c8e6b-788c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.80.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726982823, "uuid": "4cc5ff74-78a3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.86.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981265, "uuid": "abe6e9fc-789f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.90.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727020443, "uuid": "e3fc4eed-78fa-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.91.255", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726993205, "uuid": "78f525ab-78bb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.92.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727046064, "uuid": "8b82bec4-7936-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.220.147.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727020806, "uuid": "bc4b6617-78fb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.220.151.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727012823, "uuid": "26612134-78e9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.220.247.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726977244, "uuid": "4f2b5ebb-7896-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.115.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727004363, "uuid": "73b20f18-78d5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.124.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726987384, "uuid": "eb3662c7-78ad-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.248.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028184, "uuid": "e9ef9ac5-790c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.222.113.246", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727038983, "uuid": "0eac9bc7-7926-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.222.248.144", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727041923, "uuid": "e76c07d6-792c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.3.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726990384, "uuid": "e79349fa-78b4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.4.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726991105, "uuid": "9582e9f8-78b6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.108.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028484, "uuid": "9cee5162-790d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.117.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726994107, "uuid": "92564635-78bd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.120.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727043184, "uuid": "d687b3c7-792f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.122.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727035505, "uuid": "f56aa9f5-791d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.122.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726998843, "uuid": "99a96681-78c8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.123.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727036464, "uuid": "310e90ad-7920-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.125.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727024224, "uuid": "b17be190-7903-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.152.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726977004, "uuid": "c0adc4af-7895-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.27.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726989783, "uuid": "814b1d3c-78b3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.53.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000405, "uuid": "3c5df43b-78cc-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.66.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727039044, "uuid": "331b3d0f-7926-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.99.134", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727048643, "uuid": "8ccea1e4-793c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.234.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727045644, "uuid": "90e04c4b-7935-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.239.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727006644, "uuid": "c32cf78c-78da-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.250.48", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727015344, "uuid": "04a109db-78ef-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.219.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726968607, "uuid": "3382951a-7882-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.22.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726971844, "uuid": "bcf367ca-7889-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.225.5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726991105, "uuid": "9582d475-78b6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.33.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726972744, "uuid": "d5066b61-788b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.33.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025124, "uuid": "c9e56a29-7905-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.33.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726982224, "uuid": "e77da438-78a1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.33.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726985705, "uuid": "02cad56a-78aa-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.39.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726990505, "uuid": "2f6bcca2-78b5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.40.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726973105, "uuid": "ac5fb21e-788c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.41.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727040063, "uuid": "92ae8fb1-7928-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.42.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726984983, "uuid": "543829a6-78a8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.247.24.46", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727044024, "uuid": "cb6ed1e1-7931-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.247.29.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726976883, "uuid": "784f6852-7895-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.163.4", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726979405, "uuid": "57c8ddf5-789b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.164.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726991823, "uuid": "41325074-78b8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.165.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726971005, "uuid": "c8f4b85c-7887-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.165.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726966143, "uuid": "76d39d7d-787c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.167.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726967344, "uuid": "425f4b73-787f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.168.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726972444, "uuid": "226cc8ab-788b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.170.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726965009, "uuid": "d2dd0f27-7879-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.172.53", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727045405, "uuid": "0269cb2f-7935-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.173.53", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726975865, "uuid": "19c4cf17-7893-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.19.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727019184, "uuid": "f5e5531d-78f7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.49.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726992905, "uuid": "c607129b-78ba-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.252.165.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727038383, "uuid": "a9399635-7924-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.252.171.98", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726993444, "uuid": "0757dcd8-78bc-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.252.173.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726983663, "uuid": "41668efb-78a5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.252.203.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028484, "uuid": "9cee54fa-790d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.0.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727045405, "uuid": "0269e5bf-7935-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.101.133", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727002684, "uuid": "8acd0b84-78d1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.104.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028244, "uuid": "0d9de6b0-790d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.107.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727046663, "uuid": "f083864d-7937-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.169.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727017083, "uuid": "115fc160-78f3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.3.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030824, "uuid": "0f649f9c-7913-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.8.198", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007063, "uuid": "bd2cbf72-78db-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.98.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726996685, "uuid": "931050b3-78c3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.173.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727047624, "uuid": "2d46299f-793a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.181.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726973943, "uuid": "9ffb2610-788e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.97.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025844, "uuid": "773a8146-7907-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.156.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726986725, "uuid": "6264ff9b-78ac-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.211.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726963384, "uuid": "0a33f276-7876-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.27.110", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726997645, "uuid": "cf280981-78c5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.99.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726974484, "uuid": "e244d5f3-788f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.62.77.33", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727033883, "uuid": "2ed0b6a9-791a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.114.116.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726982764, "uuid": "295fd601-78a3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.115.164.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726978263, "uuid": "aef0c4e2-7898-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.115.64.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727020384, "uuid": "c0a102df-78fa-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.116.154.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726963444, "uuid": "2dfa2bbb-7876-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.179.77.172", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727045943, "uuid": "436d09dc-7936-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.180.194.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727018824, "uuid": "1ed67b8a-78f7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.57.223.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726969863, "uuid": "1ffe39d6-7885-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.60.225.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726998664, "uuid": "2ebe5085-78c8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.60.235.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726989483, "uuid": "ce810417-78b2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.60.238.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727004543, "uuid": "df275fbb-78d5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.60.239.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727021644, "uuid": "afbd4cb6-78fd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.12.156", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727031423, "uuid": "7489ffe3-7914-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.193.120", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726998124, "uuid": "ecd67251-78c6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.198.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727038805, "uuid": "a4affc56-7925-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.200.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727009343, "uuid": "0c277909-78e1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.127.34.106", "Tag": [ { "name": "200", "colour": "#699f99", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025964, "uuid": "bef38cfc-7907-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.127.34.110", "Tag": [ { "name": "custom", "colour": "#b86c1f", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727014744, "uuid": "9ef0216d-78ed-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.225.250.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727009763, "uuid": "066190ab-78e2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.228.38.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727004483, "uuid": "bb234401-78d5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "122.245.12.52", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727042405, "uuid": "0692e09b-792e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.209.174", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726991043, "uuid": "70852e88-78b6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.215.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727047323, "uuid": "7a05ad05-7939-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.0.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726963923, "uuid": "4bb9c375-7877-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.13.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726977964, "uuid": "fc57b426-7897-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.152.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727027584, "uuid": "842eba1f-790b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.234.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726978084, "uuid": "44124b6b-7898-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.236.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727049543, "uuid": "a51def80-793e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.47.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727016964, "uuid": "ca24cd52-78f2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.13.118.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726998605, "uuid": "0bbd1eb9-78c8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.13.139.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727006104, "uuid": "814472a4-78d9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.13.4.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727041384, "uuid": "a59f2a56-792b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.130.42.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726968304, "uuid": "7f0e3c23-7881-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.132.164.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727036883, "uuid": "2b4158a9-7921-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.92.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727006583, "uuid": "9f2225fa-78da-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.101.68", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030583, "uuid": "80422fec-7912-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.134.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726997763, "uuid": "15e823e5-78c6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.134.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727008507, "uuid": "19a01ce5-78df-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.135.216", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726992305, "uuid": "604200fc-78b9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.166.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727042823, "uuid": "ffcc1621-792e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.68.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726968543, "uuid": "0d5cee66-7882-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.79.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028184, "uuid": "e9ea2e95-790c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.173.201", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726978744, "uuid": "cd619e07-7899-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.9.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727005923, "uuid": "15a42a27-78d9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.135.120.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727022544, "uuid": "c847f420-78ff-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.94.208.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727040664, "uuid": "f8bbe665-7929-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.95.26.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726984683, "uuid": "a1b04836-78a7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.112.36", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727037184, "uuid": "de7cf21a-7921-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.143.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981205, "uuid": "88919479-789f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.205.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727003224, "uuid": "cc732086-78d2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.42.31.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727012105, "uuid": "7a04f783-78e7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.33.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727022424, "uuid": "80af33cd-78ff-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.51.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727035744, "uuid": "83e6ac64-791e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.46.236.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727045524, "uuid": "495299c4-7935-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.245.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727019664, "uuid": "13941fa3-78f9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "14.153.215.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727033883, "uuid": "2ed0cec9-791a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "141.98.11.58", "Tag": [ { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726980964, "uuid": "f871c8b3-789e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "150.158.102.191", "Tag": [ { "name": "downloader", "colour": "#9d9bda", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999384, "uuid": "dbc8e2eb-78c9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.146.153.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726989724, "uuid": "5de81d43-78b3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.146.89.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727005144, "uuid": "44f874db-78d7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.147.217.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727047807, "uuid": "9a038725-793a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.149.109.5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727020324, "uuid": "9ce788ce-78fa-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.149.169.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727010784, "uuid": "66a3e10d-78e4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.149.66.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000584, "uuid": "a74a357a-78cc-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.44.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726987805, "uuid": "e656eddb-78ae-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.83.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727024704, "uuid": "d01062c9-7904-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.167.229.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727002443, "uuid": "fb463a2b-78d0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.174.90.216", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726984983, "uuid": "5438a3bb-78a8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.102.180.162", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727013243, "uuid": "206bcd71-78ea-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.225.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727041983, "uuid": "0acd1665-792d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.51.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727045583, "uuid": "6cad07b8-7935-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.51.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726984923, "uuid": "30af69df-78a8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.36.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030644, "uuid": "a44b2a4f-7912-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.47.10", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727026084, "uuid": "0676d15a-7908-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.119.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726974183, "uuid": "2f326d82-788f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.79.50", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726974305, "uuid": "77e3803a-788f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.85.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726980722, "uuid": "689a7eb4-789e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.228.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727037964, "uuid": "af4a61af-7923-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.116.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726985705, "uuid": "02ca9f1f-78aa-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.181.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727009643, "uuid": "bee7c009-78e1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.38.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727018705, "uuid": "d82c1eff-78f6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.57.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726995784, "uuid": "7a03caf8-78c1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.6.19", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726963923, "uuid": "4bb9b772-7877-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.158.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727045763, "uuid": "d8396ee0-7935-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.176.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727006343, "uuid": "0fd08074-78da-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.218.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726996744, "uuid": "b62e2ab7-78c3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.122.238.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726990864, "uuid": "0594c35b-78b6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.35.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726978504, "uuid": "3eaa0ddc-7899-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.116.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727024164, "uuid": "8dd0b140-7903-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.110.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727032083, "uuid": "fe046b9f-7915-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.126.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726975205, "uuid": "90132845-7891-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.27.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727044324, "uuid": "7e7f8c57-7932-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.4.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727006343, "uuid": "0fd086ad-78da-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.46.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726992905, "uuid": "c605a97a-78ba-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.243.152.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981323, "uuid": "ceb25317-789f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.165.125.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000763, "uuid": "120b342b-78cd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "186.94.250.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726975563, "uuid": "65a84533-7892-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "190.109.251.10", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726963444, "uuid": "2df9f494-7876-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.112.100.102", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000044, "uuid": "6549330e-78cb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.117.208.101", "Tag": [ { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727034905, "uuid": "901eb34c-791c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "194.116.215.195", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727031544, "uuid": "bc970058-7914-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "206.206.76.183", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "config", "colour": "#10580c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "json", "colour": "#84a2e5", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981023, "uuid": "1bfb9034-789f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "209.105.248.135", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727034124, "uuid": "be602795-791a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "212.39.67.248", "Tag": [ { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "KMSAuto", "colour": "#78A617", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727001123, "uuid": "e8a0b736-78cd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.24.25.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726966263, "uuid": "be5f0c2d-787c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.173.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000824, "uuid": "35f7e1c0-78cd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.20.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727017024, "uuid": "edfb5f75-78f2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.118.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726979043, "uuid": "7fd4da54-789a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.54.10", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726979163, "uuid": "c78abe37-789a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.62.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726978623, "uuid": "857f04c2-7899-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.29.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727008984, "uuid": "35d377d2-78e0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.114.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727048823, "uuid": "f7e3b5a6-793c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.229.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727042464, "uuid": "29acc8d3-792e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.87.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007244, "uuid": "2892160d-78dc-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.212.247.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727031544, "uuid": "bc970d5e-7914-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.145.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726967884, "uuid": "84272e77-7880-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.25.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726964284, "uuid": "22f5037f-7878-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.100.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726974605, "uuid": "2aace4ce-7890-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.19.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727040424, "uuid": "698c175f-7929-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.23.49", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726987984, "uuid": "510e27b2-78af-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.53.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726983125, "uuid": "00bd2bbd-78a4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.70.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727008984, "uuid": "35d372d4-78e0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.82.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726963444, "uuid": "2dfb1523-7876-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.189.152", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025782, "uuid": "5262f62d-7907-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.117.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726971724, "uuid": "755734ba-7889-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.233.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726984865, "uuid": "0da415d0-78a8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.93.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726966683, "uuid": "b8d3dc60-787d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.254.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000284, "uuid": "f41fd016-78cb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.216.192.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727040005, "uuid": "6ffb422e-7928-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.151.255.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726969683, "uuid": "b4fc1194-7884-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.100.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726967763, "uuid": "3c8c75c1-7880-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.100.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007305, "uuid": "4d7ba473-78dc-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.101.101", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726964464, "uuid": "8db232f5-7878-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.101.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727034305, "uuid": "2a7134d3-791b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.101.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727038084, "uuid": "f69ca2f0-7923-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.101.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726987683, "uuid": "9daca923-78ae-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.102.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727036524, "uuid": "54e2ce58-7920-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.103.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726978623, "uuid": "857f2081-7899-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.103.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726971544, "uuid": "09d3f504-7889-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.108.16", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727009405, "uuid": "30e585c1-78e1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.108.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727000106, "uuid": "8a2bc76e-78cb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.109.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726998543, "uuid": "e6c927a2-78c7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.109.144", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727019906, "uuid": "a3c70f97-78f9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.176.125", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025306, "uuid": "3663c3d6-7906-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.177.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727023563, "uuid": "2802db53-7902-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.181.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726980304, "uuid": "6f95a31e-789d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.182.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727032923, "uuid": "f2e96c2d-7917-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.183.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727016364, "uuid": "648adcdf-78f1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.183.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727031784, "uuid": "4bd203d7-7915-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.220.208.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726973164, "uuid": "cf753b74-788c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.74.129.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727049543, "uuid": "a51e10c4-793e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.89.180.198", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727045405, "uuid": "0269e19e-7935-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.178.27.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726992964, "uuid": "e9232b7d-78ba-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.178.29.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726975683, "uuid": "ad15a3e4-7892-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.178.93.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726974844, "uuid": "b8c0642d-7890-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.179.150.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726979163, "uuid": "c78ac250-789a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.179.232.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727027584, "uuid": "842ed08b-790b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.180.222.120", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727021584, "uuid": "8c32188d-78fd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.116.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726986063, "uuid": "d81b6148-78aa-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.168.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727048164, "uuid": "6f26439e-793b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.193.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726963265, "uuid": "c310fa49-7875-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.47.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726974605, "uuid": "2aad4344-7890-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.127.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727032444, "uuid": "d53177b3-7916-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.235.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727035744, "uuid": "83e698ec-791e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.39.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727039943, "uuid": "4b41009d-7928-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.4.18.198", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727020864, "uuid": "df2a272f-78fb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.4.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727016244, "uuid": "1cf8c4f7-78f1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.53.30.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726996685, "uuid": "93103dd6-78c3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.58.18.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726970105, "uuid": "affffe17-7885-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.58.230.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727047143, "uuid": "0ea118b5-7939-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.59.238.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727006405, "uuid": "34e931f6-78da-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.86.123.38", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727047383, "uuid": "9d9aad01-7939-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.87.137.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726995784, "uuid": "7a03d8e2-78c1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.115.89.161", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727026024, "uuid": "e251c01b-7907-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.200.149.43", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727025723, "uuid": "2f675bfe-7907-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.200.149.45", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726995243, "uuid": "37ddd69f-78c0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "47.238.84.157", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ReverseSSH", "colour": "#032A55", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "supershell", "colour": "#85bddc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030944, "uuid": "56ee87c2-7913-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.253.246.137", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "dayzddos", "colour": "#CC1FA5", "exportable": true, "hide_tag": false }, { "name": "dedsec", "colour": "#EBC62B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "kaiten", "colour": "#6e04b0", "exportable": true, "hide_tag": false }, { "name": "roze", "colour": "#b8cdc0", "exportable": true, "hide_tag": false }, { "name": "RyM", "colour": "#1A24D4", "exportable": true, "hide_tag": false }, { "name": "unknown", "colour": "#e83c34", "exportable": true, "hide_tag": false }, { "name": "Vixaati", "colour": "#128FB0", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030103, "uuid": "621615d3-7911-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.59.249.236", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ECHOBOT", "colour": "#30a891", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jade", "colour": "#3427db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726969505, "uuid": "4a9f5755-7884-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.255.47.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727019305, "uuid": "3e06e664-78f8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.59.153.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727004184, "uuid": "08bd2e61-78d5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.178.147.245", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727046064, "uuid": "8b82bbf3-7936-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.178.150.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727037905, "uuid": "8c3fb220-7923-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.178.178.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727015407, "uuid": "2a6c9d7c-78ef-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.178.178.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727036524, "uuid": "54e2bc53-7920-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.178.205.120", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727046724, "uuid": "1475ed99-7938-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.178.213.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727036584, "uuid": "78a1ced2-7920-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.178.36.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727045524, "uuid": "4952dfff-7935-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.178.42.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727041864, "uuid": "c3e0e99c-792c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.178.43.118", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726993324, "uuid": "bfb5dd6f-78bb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.178.88.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726965245, "uuid": "5f431556-787a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.115.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726989244, "uuid": "3febb258-78b2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.120.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726965904, "uuid": "e886bfe9-787b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.122.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727018105, "uuid": "72bac8db-78f5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.122.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726969323, "uuid": "ddfbcc6d-7883-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.124.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726994463, "uuid": "66a9d40c-78be-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.125.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726963444, "uuid": "2dfa76a3-7876-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.126.252", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726993925, "uuid": "26085da1-78bd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.134.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726964943, "uuid": "ab9b1406-7879-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.149.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726985164, "uuid": "bfdc87de-78a8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.150.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727012823, "uuid": "26612508-78e9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.229.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727040543, "uuid": "b08f4d10-7929-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.234.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727010663, "uuid": "1ef2ea37-78e4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.67.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727049064, "uuid": "8769475a-793d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.74.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726984443, "uuid": "128c650b-78a7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.85.10", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727001123, "uuid": "e8a0c105-78cd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.95.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727027643, "uuid": "a7b48fdd-790b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.10.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727032684, "uuid": "644d8bb9-7917-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.101.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727006583, "uuid": "9f22308b-78da-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.102.255", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726963384, "uuid": "0a33bd56-7876-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.105.44", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726963384, "uuid": "0a33b43a-7876-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.115.90", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727031184, "uuid": "e6117f2d-7913-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.120.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726995483, "uuid": "c6b46671-78c0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.121.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726977364, "uuid": "96d823ac-7896-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.123.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727035863, "uuid": "cb61928a-791e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.127.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726993383, "uuid": "e330d00c-78bb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.135.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727044683, "uuid": "54294233-7933-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.136.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726971724, "uuid": "755740ef-7889-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.138.40", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726965009, "uuid": "d2de56a9-7879-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.141.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727045405, "uuid": "0269df27-7935-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.141.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727042583, "uuid": "70ba0d62-792e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.98.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726977605, "uuid": "26ce3324-7897-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.98.255", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726979523, "uuid": "9de1cd40-789b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.240.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726997524, "uuid": "87639fde-78c5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.243.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028664, "uuid": "084d5311-790e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.249.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727017443, "uuid": "e824b90e-78f3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.253.46", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726976943, "uuid": "9c3fdb50-7895-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.59.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726972564, "uuid": "69f524d1-788b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.62.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988344, "uuid": "27657a4d-78b0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.63.125", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727026324, "uuid": "958cf042-7908-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.70.130", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727024105, "uuid": "6acd6151-7903-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.10.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726972207, "uuid": "9526366b-788a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.14.24", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999263, "uuid": "94063efb-78c9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.181.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727017683, "uuid": "77241037-78f4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.229.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727002443, "uuid": "fb464ebf-78d0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.232.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727013544, "uuid": "d3b8d0a1-78ea-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.239.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727043184, "uuid": "d6879d03-792f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.249.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726974363, "uuid": "9a68bfdd-788f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.252.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726979644, "uuid": "e5ca3852-789b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.14.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726971964, "uuid": "0473d7f7-788a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.187.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727010905, "uuid": "aefcfccf-78e4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.194.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727021584, "uuid": "8c320763-78fd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.229.156", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726996983, "uuid": "44f51899-78c4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.234.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726998124, "uuid": "ecd6965d-78c6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.237.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727016424, "uuid": "883f458d-78f1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.237.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726990564, "uuid": "52d8613c-78b5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.65.116", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727017443, "uuid": "e822e45c-78f3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.66.103", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727046183, "uuid": "d2658011-7936-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.70.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727045943, "uuid": "436cf448-7936-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.70.88", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727040844, "uuid": "6448eb79-792a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.170.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726963384, "uuid": "0a33aed1-7876-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.80.57", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727033223, "uuid": "a5b66e5f-7918-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.84.245", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727034305, "uuid": "2a712569-791b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.87.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726970944, "uuid": "a44e1114-7887-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.90.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727006343, "uuid": "0fd08feb-78da-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.93.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727006223, "uuid": "c8619aaf-78d9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.95.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726971964, "uuid": "0472f40f-788a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.98.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726964223, "uuid": "fe7d0d75-7877-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.181.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727040244, "uuid": "fe214378-7928-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.181.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988944, "uuid": "8d020625-78b1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.185.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726967763, "uuid": "3c8c7af1-7880-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.186.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726995664, "uuid": "3291228b-78c1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.187.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727002744, "uuid": "ae75bb5b-78d1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.189.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727040305, "uuid": "2298c818-7929-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.230.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726990804, "uuid": "e21047b3-78b5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.230.5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727024105, "uuid": "6acd6ec6-7903-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.232.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727015223, "uuid": "bce14487-78ee-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.152.101", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726998905, "uuid": "be49aafe-78c8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.45.206", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726996623, "uuid": "6e6dbc39-78c3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.45.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726999564, "uuid": "47247d33-78ca-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.46.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726989424, "uuid": "ab036941-78b2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.46.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726984505, "uuid": "371279f7-78a7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.46.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726976165, "uuid": "cc0d2660-7893-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.46.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727017443, "uuid": "e82231b6-78f3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.80.46", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030464, "uuid": "38d31e50-7912-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.87.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726975505, "uuid": "42d9dce5-7892-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.90.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726982583, "uuid": "bd7abee7-78a2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.94.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726978143, "uuid": "678d1093-7898-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.201.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726993984, "uuid": "496003bf-78bd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.112.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726963444, "uuid": "2df97e45-7876-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.114.212", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726968963, "uuid": "07992f19-7883-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.116.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726991463, "uuid": "6adcdc52-78b7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.118.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726979223, "uuid": "eb283b53-789a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.119.24", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727016484, "uuid": "ac4e53f9-78f1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.122.98", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727042583, "uuid": "70ba1825-792e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.123.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726998905, "uuid": "be49c37c-78c8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.124.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726996924, "uuid": "215ccec6-78c4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.126.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726967823, "uuid": "603817ad-7880-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.98.196.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727017383, "uuid": "c4490e79-78f3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.223.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727026024, "uuid": "e2524b64-7907-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.18.127.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726985764, "uuid": "2582584c-78aa-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.18.63.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726986243, "uuid": "434f79a0-78ab-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.212.100.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727049543, "uuid": "a51df56a-793e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.127.12", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028184, "uuid": "e9f2be02-790c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.176.187", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981023, "uuid": "1bf5f7c2-789f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.176.49", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727003343, "uuid": "13907459-78d3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.177.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727049005, "uuid": "64707e61-793d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.177.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726986304, "uuid": "67c1066f-78ab-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.177.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727039044, "uuid": "331af23a-7926-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.178.37", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028184, "uuid": "e9ee1d48-790c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.184.197", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726972207, "uuid": "9528a371-788a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.184.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726988044, "uuid": "747927ca-78af-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.185.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727002505, "uuid": "1ffe88a9-78d1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.185.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727001664, "uuid": "2aa5c2fe-78cf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.187.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727042405, "uuid": "0694f527-792e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.210.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726986005, "uuid": "b5b3121b-78aa-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.192.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726982043, "uuid": "7c0c9aa0-78a1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.192.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726974424, "uuid": "be978917-788f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.230.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727023983, "uuid": "224a14a5-7903-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.240.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981144, "uuid": "63f5c13f-789f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.242.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727034723, "uuid": "23a709e7-791c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.136.86.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726992484, "uuid": "cae91d98-78b9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.137.137.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726979163, "uuid": "c78ad31f-789a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.2.108.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726984204, "uuid": "840f21b8-78a6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.136.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726990444, "uuid": "0b7bef1d-78b5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.136.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727024523, "uuid": "6423efdc-7904-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.139.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727030283, "uuid": "cd59fb81-7911-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.139.56", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727004423, "uuid": "979868dd-78d5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.142.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981683, "uuid": "a584e35e-78a0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.142.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727001123, "uuid": "e8a0ce52-78cd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.143.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727024164, "uuid": "8dd0c074-7903-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.143.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727034543, "uuid": "b880b1a8-791b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.18.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726990143, "uuid": "57ed4d30-78b4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.216.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727005864, "uuid": "f21386ba-78d8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.219.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726991764, "uuid": "1dd3a023-78b8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.26.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727045524, "uuid": "4952ce60-7935-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.124.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726964464, "uuid": "8db27f09-7878-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.223.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727048106, "uuid": "4c7334f1-793b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.92.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007605, "uuid": "000bc38b-78dd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "74.50.91.55", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727043544, "uuid": "ad846ccf-7930-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "78.165.107.36", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981023, "uuid": "1bfafb1d-789f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "8.130.82.167", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727022305, "uuid": "39ffbaf2-78ff-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "82.165.221.158", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726993564, "uuid": "4ebbd75b-78bc-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.177.106.19", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Ganiw", "colour": "#70338d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Setag", "colour": "#086622", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726968543, "uuid": "0d5cfd51-7882-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "95.132.72.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1727002143, "uuid": "48ae4396-78d0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "alsadekllc.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1726980965, "uuid": "f97b26fd-789e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "betrothrow.art" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981023, "uuid": "1c0e400d-789f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "blathertom.info" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1727029084, "uuid": "02a9861e-790f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "dfgdfgfhgjfggedfgdfhvh.xyz" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1727028606, "uuid": "e57b8599-790d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "down.fwqlt.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1727032864, "uuid": "cfc090bc-7917-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "fgwe.myvnc.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1727002144, "uuid": "48e702c6-78d0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "oneip.com.my" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1727016844, "uuid": "82d5256d-78f2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "papeleriaveneplast.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1726980964, "uuid": "f8a7e0bb-789e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "saras.freehost.io" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1727007844, "uuid": "8e954423-78dd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.darkviolet-alpaca-923878.hostingersite.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1727023924, "uuid": "fea7f61a-7902-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.imety.edu.co" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1726981024, "uuid": "1c41db43-789f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.informacionoportuna.com" } ] } }