{ "Event": { "published": true, "date": "2026-02-08", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-02-08", "timestamp": 1770596122, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "c6dcb9fc-317f-4d46-9b27-a94cfc7e4c4c", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68afa949-0481-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770508927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770508927, "uuid": "7d1cf455-0664-4f8c-a891-f247360b83ce", "comment": "Malware payload", "value": "83293ca9415adfac0b787558f8a11d4e", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770508927, "uuid": "82925702-69e7-4e97-8338-9cc51479e8de", "comment": "Malware payload", "value": "929435f651b5533105074b79d2464afab804b509d289a6a2aeaefb1a9c873427", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770508927, "uuid": "7c82dd21-6963-4c10-aad0-60cb9e34ac8e", "value": "T108752296FF4350B4D8670278216AF7BE113EA40089374EB6E7C19BCBEC67882255D3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770508927, "uuid": "28f0a9f8-3b8a-45c4-8afe-6adb7973cf1c", "value": "87e83bda436138fd7844ecd76decc70d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770508927, "uuid": "34a3e18d-607e-43c3-b85a-678e4eaaa71f", "value": "24576:RWKqa4hnzP3w7L3rmZmpk7FSQFW2iJ+N07/TwYV1CdZdQ+4lT+iFgiGTtswAtdz:RSrwf3aZmpOFU2iQNIUc1LxGTtswgd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770508927, "uuid": "c5f7e25e-5c79-49be-9bd1-8fdda48bc2cc", "value": 1585148, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770508927, "uuid": "96be1768-8675-48a0-ba85-c33e532a2206", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8209a538-0481-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770508970, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770508970, "uuid": "0968ab75-04f9-4493-9905-078ae4f163ca", "comment": "Malware payload", "value": "290fba465b308b2a84cf32a0a9d6de85", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770508970, "uuid": "07aca273-46a9-423b-96ec-9b427a007a16", "comment": "Malware payload", "value": "29bb22682bbb881a3730f7a952a617800a14c23a70c3cdd19f460ef586d8e8f7", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770508970, "uuid": "f0a2ee27-4b40-47ec-9e06-183df7d4e565", "value": "T102E3F97F83F6313572038359F5A2A728966DC273EB410ED2F9B29A9D8FC11A101772", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770508970, "uuid": "922d1451-72b4-478d-922f-1c247f7501eb", "value": "768:HZdapEbrcXlGRNjcXscJGcz74k/tHcTwAQK9sfifRf+VIrePfHKIYW7voFSnUh+/:fapArIl4k2wk9UIrU71F4B0hYT8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770508970, "uuid": "75095080-21a4-4501-aef1-9d44beb5d716", "value": 147745, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770508970, "uuid": "f76eb535-58d6-478f-b53a-26042233cb9a", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1945d57-0481-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770509077, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770509077, "uuid": "187a20eb-d4e3-4b82-90ce-d29f211587e9", "comment": "Malware payload (Mirai)", "value": "f9b2bc33dca23d76556a005b2158052c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770509077, "uuid": "43d2e43e-2b42-4e8c-8fc6-1f138293dcc0", "comment": "Malware payload (Mirai)", "value": "730fe29dbafcddfdbdacce476dbc7e5a9acc08d7b4444e50ba16a622da9ca7a0", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770509077, "uuid": "4639130c-7824-4213-a62f-052291d6239b", "value": "T13B617CBD41E1AFD3C982AE1CBB668361E703D1F4EC76F13CAC984A66818071534976", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770509077, "uuid": "02395dbb-13ed-40b1-9cbd-00589e646d96", "value": "96:Aqcs6A/g7yEIuC0uY5UZCz2zAmQiU4+UimQqSQ:+KN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770509077, "uuid": "93e3a488-f00a-408d-b4a0-96538ae46641", "value": 3181, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770509077, "uuid": "cac7cc49-7f24-41b6-a582-4589815d30cd", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cfef2a49-0481-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770509101, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770509101, "uuid": "99b03062-7357-402c-bb9d-61be429def9c", "comment": "Malware payload", "value": "a71e2b2d1ff22acc872e93b4a00b1175", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770509101, "uuid": "8a00ec4d-790f-4f71-8382-967926e99c0e", "comment": "Malware payload", "value": "83fa304e1ddbf3e235cc5124cd5bb8b6efd6e0edf8ecf18da2467150464e3bf8", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770509101, "uuid": "24b88a4c-72bb-4293-bc65-43d34fafec47", "value": "T1081412C7EBB7A8C4CF0E76B0D1E35E4853409DC19E7F64388A6CCFAB175525AA7242", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770509101, "uuid": "796f70d3-6d07-441a-83bd-cb3b061787ed", "value": "ee53c10aff1d01eafea53328179e33a2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770509101, "uuid": "8bcfccf3-779e-4d26-afaf-3b6f51d11726", "value": "3072:Jd56YkTNRlUhfX92thXxFnedsKgU4Ma6iHIPAE2HSCamzs/Vt9f7/Tvs:JSbTNTKlidKgUhaVoPAByCajb9T/r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770509101, "uuid": "8b0f4302-5883-460b-920b-043fd0eb929d", "value": 204288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770509101, "uuid": "149fd6fc-e32b-4437-96e6-5cba743de19b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1770509595, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770509595, "uuid": "4c0cbb23-9175-457e-8469-9fd445f6b0a7", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770509595, "uuid": "cfcc94fe-db43-496e-ab4f-2857aab58696", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770509595, "uuid": "ec9020f6-b4eb-420d-b0c1-18a934c04aaf", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770509595, "uuid": "e8f6fd03-c3d9-4344-ade7-bd4a3ea9114c", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770509595, "uuid": "7c37b51f-6167-4a80-aae4-712fc066477e", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67d0f9c0-0483-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770509785, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770509785, "uuid": "af552c78-53fb-42ff-ab03-513731aa121d", "comment": "Malware payload (Mirai)", "value": "e4924c84de1d70bf9d9f493f07203f57", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770509785, "uuid": "f4d7f049-f524-4842-aef9-29d8760e67f5", "comment": "Malware payload (Mirai)", "value": "8b3bc3e5d4ffd5c55c75bd5c3651464f278d8a9bccd795c123b6ca5ea6690d0c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770509785, "uuid": "7e547b67-0740-4b4b-885e-b09b2cb87c4e", "value": "T1049316756542F2ACEAB45074F40329E62A5206093FDCD5E3BD83113BFF74788A66DE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770509785, "uuid": "48ea5c31-57e4-425a-8393-e010b69f4673", "value": "1536:wkWNtHtc5jAR0RSH6NoXmm9YVBIVCCfy0K9q51qJ2E:WHtc5jAR01aWm4uR5YoE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770509785, "uuid": "0ce80ad9-4c1a-4032-ad7e-c9ac51a57c97", "value": 91912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770509785, "uuid": "657b95b0-9570-41c0-9965-ccfc39f68f3b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8bd69e53-0483-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770509845, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770509845, "uuid": "bf5567fd-e535-4fd9-8dcb-24e379f45e8b", "comment": "Malware payload (Mirai)", "value": "1734e1da70258fc892adb2f5ba117d7c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770509845, "uuid": "e53319cb-8b37-4d16-a6a8-5bb3fce9b64a", "comment": "Malware payload (Mirai)", "value": "b5d22069cf8b825765bbe021407652b8e10261b9821ffd89160e7e7c362adabe", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770509845, "uuid": "1117a88e-c0ae-46bf-b333-6bfd9fe4ab2c", "value": "T1FC634A12F83D1E17C0E4957A12B78B69B2F5674F18A4979D3E310F8EFF605D0AA062", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770509845, "uuid": "e39798df-5a86-4bbd-890d-17175385e3fb", "value": "1536:OF4LVJozlmePPgjXf+5+FpGMi38UCaIYq0izNs:iGVy73VypG1sUMYq06Ns", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770509845, "uuid": "ca9087f9-4397-4240-9aa5-1d49a6833b8e", "value": 67536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770509845, "uuid": "393178fe-ec46-4956-99cc-1620668b5902", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6bf9fc34-0484-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770510221, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770510221, "uuid": "ec9000aa-9f8b-4c70-bd23-202b052bf06e", "comment": "Malware payload (Mirai)", "value": "e5dae2ccf33190bb5cc7b0be4036b618", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770510221, "uuid": "ee6e9951-c085-44c3-afc3-ddfc2c434bd2", "comment": "Malware payload (Mirai)", "value": "84d4643444ea8cbc029973aa61bf8e1d84a74c5e845bc7951a858c052323b7e1", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770510221, "uuid": "3e6da2ac-3fb0-4baf-9082-71da4d9ac7d9", "value": "T196532A99F401AF7CF91FDAFA4012490EF521624496830F3AAF77FD936CB10A58E179", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770510221, "uuid": "8b1e8fb7-d384-455d-a57a-b5192760f11a", "value": "768:Xe6Y8Tv7bIGEubAKv054Tk1fb9e8YoQKst9jYO882YxN+5xidImJRPY6X5Z:X3Y27bIDu8DD1QKI8O88RW5xiamJ55Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770510221, "uuid": "7618ebad-a349-4c37-b5e8-599f43165008", "value": 63620, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770510221, "uuid": "0259db55-2643-41da-be80-ecb9741f0f0a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "41b7a7b9-0485-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770510580, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770510580, "uuid": "6619730e-c08c-4d7f-ab38-39cb4d6d6fca", "comment": "Malware payload (Mirai)", "value": "c5411620ca080cc2e464978e63572a4f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770510580, "uuid": "8abbf198-9981-4eb4-bddf-defa3cc1d192", "comment": "Malware payload (Mirai)", "value": "e0bee1498194f2ea24c8d31f72d93adbf21df682e946bd27c107d379d9413f86", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770510580, "uuid": "269f3711-8d40-4fd0-9da0-fa4e843c6484", "value": "T1B973F885FC818E11C9C91376BA2E11CE33136369F2DEB367DE106F10778A92B0A7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770510580, "uuid": "5d887833-73ad-4337-9fff-36ecae43eaec", "value": "1536:Lon3rBZKKeHRmZknMuMhCkULs58Xwz1IUiRtFnAyLFp:6Z9eHRieMd8YAFnAyLF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770510580, "uuid": "a1ecd6f2-174a-47fb-a528-ae8cfc5af870", "value": 75252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770510580, "uuid": "e9124c2d-4d8d-45d6-9d33-3a96e1a827d0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "55f4952d-0485-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770510614, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770510614, "uuid": "170d7002-38cb-4378-a55f-924e6a621996", "comment": "Malware payload (Mirai)", "value": "ce5e4e1181a0fb8abf0ce1e604328724", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770510614, "uuid": "136c01e4-0e72-4cea-8b1a-3fd723a95962", "comment": "Malware payload (Mirai)", "value": "4314cc9193a9b7b6b48afe821acd76cbe664322f88b05b280a51cc3f67c9a121", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770510614, "uuid": "e0eb1fac-f569-439e-a0bb-3f1ce7f93a45", "value": "T173434A4137A84E03C0665AF8293F23D5C3FEEE9121F8F284260F960B8674E77545AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770510614, "uuid": "e15db137-65b6-47f0-bbfa-05400a93be62", "value": "768:/BYpl8QouDJVFORlm3RMDLWVto5Rpi+vUnRrGgLXDbbzpUnAVt85iYrGl1cFvm7V:i8t6cS3MyI5InZhPvanJiYri2FGV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770510614, "uuid": "3eff5873-8df4-4cfc-9c8c-b6c7f59eb9b9", "value": 60408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770510614, "uuid": "92e0c41c-33f6-4e70-906d-8fdf68fc3399", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9c86e33-0485-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770510862, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770510862, "uuid": "f87cab54-a0c4-4055-a86c-48f5abf0a95e", "comment": "Malware payload (Mirai)", "value": "a2a28cb78ea4075733178b7c7ce817eb", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770510862, "uuid": "2db7f3dd-75c1-47aa-9af2-ceed27f0cfe9", "comment": "Malware payload (Mirai)", "value": "e69798ff814211487731039e3bda65b49f24f0473c405b25c7b947f94eb45f9d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770510862, "uuid": "4f98f19f-a23a-4142-b915-2e511830b002", "value": "T1C76309C5F98B81F6C90B493091A7F63FCB31D97981708A6DEF4AAF35DB3390192161", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770510862, "uuid": "9b0ab9f5-2dbc-4af4-8b08-c7a7c9925cb0", "value": "1536:GVdLd71WxZ+I5Ew0TbNPpcbegAgbPnZFjz:Ad7oZl5EwubNP+egBPnH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770510862, "uuid": "52bdc80c-e4df-45e5-97a1-655baa557c20", "value": 66864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770510862, "uuid": "867b78f7-aa90-440d-bc92-e231952b40c8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "489f9b61-034c-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770511063, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770511063, "uuid": "9336b5e1-56d3-4d78-b6eb-be0b4997ea8a", "comment": "Malware payload", "value": "14eb8c9ff6b0a99c6be02dda979db77f", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770511063, "uuid": "b6947af9-b12c-404e-ac23-f5f25ae11a21", "comment": "Malware payload", "value": "2864070cd3a8be5b7d812c8e0819efff1f7267ed036b159ffd4ae364867c6d91", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770511063, "uuid": "4a0b5743-65bb-4257-9970-4efdb2f22daa", "value": "T11D412872E2A23589FA58C53E2E2C1A92F40A2D9A8F349CED0620D4E1E92C9500EE05", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770511063, "uuid": "4435ce7f-dbe0-4c2c-bcca-7092cd57612a", "value": "48:9X/7yRv+M0q2/KSyuqWNTkauF+b1Br5fLBKuw0sHv/ZBmgb6GdRoUe02:dyh0pxL9kaN1zBuvh5bfdR2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770511063, "uuid": "7e6d7ed6-4b14-4f0f-9596-3d4f632e7b53", "value": 2366, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770511063, "uuid": "1f0669c7-2b1d-47b4-8689-713180dae118", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b1c2af4-0487-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770511508, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770511508, "uuid": "fad34bc3-3f83-45ca-aa86-8c40ea03bace", "comment": "Malware payload (Mirai)", "value": "78bf1639d9ad767f26a8e288fa2c3026", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770511508, "uuid": "76d53d50-b9c1-4637-8484-a462f81036b3", "comment": "Malware payload (Mirai)", "value": "3a726119c127924e372f130e818e01c85e521e1f2a67fb22afbbddf7c29d71ef", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770511508, "uuid": "ca608c3e-f5b2-4231-8d58-b197a0138d1b", "value": "T1CEC2E19390A98D05C863423B6E1F15AB61382439134DFE2E373BFAEC63464B49175D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770511508, "uuid": "80339e7a-936e-4295-9ddd-2bbbee4ac1a8", "value": "384:MRGW9WXUx5+bkbRaliVErjrL9VD9jPwrSaf5dwapDyCTYHHJC8oytPFnAqV/LlPC:45+Kcrb9VDJe5FLTYTlPFnz/xOUiRz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770511508, "uuid": "f54e2d25-b60f-4b5b-86b4-bfe8254e0c71", "value": 27704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770511508, "uuid": "486bd86c-19ac-407d-b276-9a1aca2cb0b4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "87616db9-0487-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770511556, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770511556, "uuid": "a076f739-55a4-46a6-bf96-b6bfacbc22b6", "comment": "Malware payload (Mirai)", "value": "69e9c34994daa4a6f7d9861d0dea144c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770511556, "uuid": "2d6867aa-c10d-48aa-b408-d6dd9cdf8d55", "comment": "Malware payload (Mirai)", "value": "dc57e6ac32d100f81e8acd3341e6ee117b8f48da62de1afe35ebe133da9bec5a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770511556, "uuid": "df42d1f3-99de-4702-bf84-c0d4188bfe5f", "value": "T17583414D3E318F7CFFFD823493B75A659209339A7291C584D5ACE6022D6420E742FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770511556, "uuid": "cc7a6c80-5d2b-4034-a1ab-28a8e8fd60f1", "value": "1536:56TEggEeGxdltYYcd/d7LM9NADfu9QPJzthXbPiOr4/FovdG:cwggEeGdtYpvLMuJzthXbPiOk/F4dG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770511556, "uuid": "90f9f4ed-080d-4e15-a043-980d1648141b", "value": 85008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770511556, "uuid": "1bbca417-9ec7-45a8-9e47-e92e71b41659", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd989239-0352-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770511707, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770511707, "uuid": "5985219b-b299-4440-9ec7-49b2be5c5ccf", "comment": "Malware payload", "value": "3ec0d4ca5613ba072e46a440fd02c90c", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770511707, "uuid": "00dc6e1f-aec8-421e-b2aa-7608a9aa5e89", "comment": "Malware payload", "value": "ff8093b1c56c678f45ab8d770c8619519c96027a6bbe448c10ccf9e2cfb3cb5d", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770511707, "uuid": "bd73060e-dc0a-4995-86d1-8812054880c5", "value": "T124411BB687486895C41BC0F6C9BCC751C798559A3B3C64DD60106E620CA94D7CBFE6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770511707, "uuid": "4c68ff33-b03b-470b-b30d-ce94df0b1a25", "value": "48:9U5AgY8UE99ETU0Uyig5aF9nwWW/2SpDbtBI0R3uHfpK4j+:Z8pEAyig5aFJ3W/26btBIQ3uBpj+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770511707, "uuid": "03669dbe-23f7-403a-9312-941216c3c077", "value": 2290, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770511707, "uuid": "605ad789-db48-4f9e-ba70-847663cf46bc", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1e7935c-0487-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770511708, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770511708, "uuid": "af423621-0441-4412-a283-d51160e8592a", "comment": "Malware payload (Mirai)", "value": "9cc45ca3634a0254dcc830be51db7074", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770511708, "uuid": "b80de1ea-9e82-4d25-9d16-f0e687df005a", "comment": "Malware payload (Mirai)", "value": "db7e17d49b68e270d9793ded785abaae8bd3442628bc81a25dc248d0133fee18", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770511708, "uuid": "c070945e-db29-4b9a-b58f-8a27eebbe914", "value": "T1D4D32A46EA418E03C4D61775BBAF42493322A755E3DB73068D18BFB03F86B9E0E675", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770511708, "uuid": "9af56346-7e7c-4900-87f6-759311bb6c96", "value": "3072:5Aq0D859ZFN4HYpkcHSCeYn5egAXwFDKuwTM/9adPI3:uIZF5kcHSC7QgJBKuEM/9a5m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770511708, "uuid": "ca9c79ce-0538-4868-a88b-f3be9dfecd4c", "value": 140329, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770511708, "uuid": "d85f56d6-a6cd-4663-b0a4-af4faadfb334", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a133382b-0489-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770512458, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770512458, "uuid": "82b90735-6d9d-4e3a-8e3e-8903e8c9c32d", "comment": "Malware payload", "value": "0a9537f036c589b0b58507cdad0b915c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770512458, "uuid": "5de2e12a-d829-4b31-ac9d-cf2296cfad0b", "comment": "Malware payload", "value": "d2603ea9ea1933813f1df3f13742ffdc91e80b8cd9a08d750069b31f2fae96d7", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770512458, "uuid": "2f06b0a3-0e26-4c32-9421-ebc6925e5fb5", "value": "T137E3F97F83F6313572038359F5A2A72896ADC233EB410ED2F9B69A9C8FC11A141771", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770512458, "uuid": "97f68ad4-0454-41da-bad6-ada3de0abc59", "value": "768:1ZdapEbrTXlGRNjcXscJGcz74k/tHcTwAPehsfifRfiVIrePfHKIYW7uoFSnUh+F:dapArrl4k2wDhoIrU7QA4YPhJgb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770512458, "uuid": "96d31538-c25a-4f49-95cc-9094860c3ec5", "value": 147860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770512458, "uuid": "1229fb98-6ecd-4b5b-9ff6-4291c1d45364", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f5b51c31-0352-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770513224, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770513224, "uuid": "414d10f8-4df7-49d0-91a8-bc5479dd3307", "comment": "Malware payload", "value": "cce79c2208155ff575ff605723fcdcf7", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770513224, "uuid": "d9667fe2-5935-4fdb-91be-4c1faf9eec36", "comment": "Malware payload", "value": "2779d89c7c064c6f57507c2e0599b63a2ccb6920dcda6eead63787d91983b631", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770513224, "uuid": "bbaadc25-01db-4000-88a6-13a4352479e8", "value": "T180413B2FC8733F87CA22427900EF76CAB06EC47A35113D9D23311020BB07CDB59898", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770513224, "uuid": "da7059a5-b3d8-4445-8084-50129853a069", "value": "48:9/KBgKkdB+6RzjWYtFKsWjLQohUnTQ8gvwGMK3OZs/BMpo0df09u:MgKQB+6JHasMEimTQhtztw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770513224, "uuid": "a763dddc-3cbc-4f5f-a43a-c2995ff2e4ed", "value": 2262, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770513224, "uuid": "2e2ce772-1f23-475c-a0f2-eb3c0015774b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9fca8397-048c-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770513744, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770513744, "uuid": "a83da4ae-7fb7-41d7-a960-b6befd5f9c05", "comment": "Malware payload", "value": "9cfa356b5251ffa6faa1b9773dcb224f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770513744, "uuid": "5f098f03-5515-48ca-8b50-f852c857ea65", "comment": "Malware payload", "value": "059f6821ef00cab7e17ca335c034c89aec0193f36352f365e3167109d27531a8", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770513744, "uuid": "48a67db5-4c23-4d93-84d4-df7ed1ac6f79", "value": "T115F31A62A7B4197A23BB43BCE455F78879688523D74D62E1F8FEC19C42C1BD224727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770513744, "uuid": "e4993c3a-5a5f-4a60-a02d-9e5bfcb59429", "value": "3072:EdrK2iu5mGuE/kDkank7evQ+/s4oxY+b3wyAtA+3CWPCWTn5bXZEtUioCkdGas0f:aru8GPLMWLasPlH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770513744, "uuid": "56f8811b-b191-40a8-8c80-064fbef380a6", "value": 159238, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770513744, "uuid": "77b006b3-8761-4d3e-ad51-d5f22363f83a", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac76e282-048c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770513766, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770513766, "uuid": "896de8d1-1be6-4d5d-aaf7-f112c039b4f8", "comment": "Malware payload (Mirai)", "value": "6573cbace494be534d0c77bddc96f7d5", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770513766, "uuid": "de804bc7-ff5f-4e82-80d3-7e4aa910064d", "comment": "Malware payload (Mirai)", "value": "ad8edc1871fa24cde9c4da01554065d10b340768057435305f8225a97288e54d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770513766, "uuid": "e466e34c-5b4c-427b-9e07-844da4422f95", "value": "T170531907BD4495FDC299D13C83BBB57AC127307E123972DA2BD4FE1A5D46EA12E1C8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770513766, "uuid": "5ecd6868-4b9d-476f-86d5-f1f74d8c058e", "value": "1536:4y8fTXrcG+y4KLQsRzfUjjQlHLqrDavnC:WfXV+yrssRzfUSHLq6vn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770513766, "uuid": "242df3ba-ba95-4283-84e8-7ac2ebd226b7", "value": 63680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770513766, "uuid": "e4198f7c-8a1a-42fe-ba7e-19d80a5c618a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d18d7215-048c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770513828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770513828, "uuid": "f599d057-8e16-4dac-a134-2ef4af92cb66", "comment": "Malware payload (Mirai)", "value": "31f5da361acccd8661ec84348e3fa804", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770513828, "uuid": "4d16452c-051a-4406-9f13-e890ed17eed3", "comment": "Malware payload (Mirai)", "value": "a03281983acde60bcb9ad4c476cc2af7e491121429cd2520591236a9bea2efc7", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770513828, "uuid": "8ef5cb51-c032-4311-9272-bf66d9a89300", "value": "T1139374097F901EB3ECAFDC374AAA274414DD661B256C6F75B930E828B50B64F26C38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770513828, "uuid": "1474f03b-bf78-44b6-ba8f-fa51a4608ea2", "value": "1536:85E/xOpxUQWpaWITkJV5CvxUnwKe8gZriDsKF12:8+/xOpxUQWTIa4QgkF4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770513828, "uuid": "0201413d-86d5-48e8-8417-f43d5feaab65", "value": 89104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770513828, "uuid": "dd04e44b-da20-4a60-9fc9-bea4ad4472d9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72f47fac-048d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770514099, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770514099, "uuid": "e60e0353-9c18-4fd5-9830-0941f5f66dae", "comment": "Malware payload (Mirai)", "value": "db8c18a1db38e4e154f7b4a51032ae57", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770514099, "uuid": "a532c351-2ea0-4b93-8a9b-626b68c2f286", "comment": "Malware payload (Mirai)", "value": "83f003e3b760174836c8796b58d70cfbac03dcae8f7a5006f7792535c513be6c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770514099, "uuid": "52e9fbf8-0554-45cd-b5d4-d4e40c632ff5", "value": "T141435BC8E5D7DCF9EC2506302276EF719B77E63E216CDE97C79859239982503E8026", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770514099, "uuid": "e1d8a7c4-9a80-4133-8fd9-23ca39d30f1b", "value": "1536:/451DYLkOoAg0wxEuFrdtIqAER5Fs/RzhkkM:/I1DYLkOou6EgFAiFsZ9c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770514099, "uuid": "8d58b937-3f17-4d10-9a4d-03fe7acb9758", "value": 58672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770514099, "uuid": "be2d50ae-3dc9-4413-8205-2314b8e781b0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1770518354, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770518354, "uuid": "44291c79-922c-4b2a-acf7-f43e54ca558e", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770518354, "uuid": "60aab58f-ab05-4aa9-a0b4-5741786e5abf", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770518354, "uuid": "d81b5f5d-068e-420f-8113-f2607f47c685", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770518354, "uuid": "ae647883-8c1d-4dcf-af78-9981bba75dbf", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770518354, "uuid": "35d5ca65-4909-4d72-9d51-631e54cfae1d", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "047a3a9b-0499-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770519067, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770519067, "uuid": "414795b3-7449-45f6-8809-9ae132a216ff", "comment": "Malware payload (Mirai)", "value": "6bb5693c604e9ba1272ddf2e9bc2f749", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770519067, "uuid": "b73274dd-bd34-489e-9d53-b3f40e42158e", "comment": "Malware payload (Mirai)", "value": "297974d9c57a090216509d252bc1a65bd77d1b7652b721e2d328ff21f7e851d8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770519067, "uuid": "9f0226f2-e61e-4d37-836d-ac1a0d4f5660", "value": "T176538D75D12DAEA8C0424AB4A9598E704F13A0C046732EF7DA9587A69443DBCF858F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770519067, "uuid": "c563eb3d-42a7-44d9-9159-39d952b11d14", "value": "1536:zag/Vdf5F1LwtkbaOoQ3veifs3guba/qzCEZaCw:zJzf5TLcQfPf+gehCEZa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770519067, "uuid": "353c2ecb-ea6b-4f52-9640-53ab0bd8fa1e", "value": 63484, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770519067, "uuid": "f0d74b88-b44b-495a-ad46-db3f528373f1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04989ff5-0499-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770519067, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770519067, "uuid": "f399ecaa-e123-4688-9215-b141e7dc005c", "comment": "Malware payload (Mirai)", "value": "d3337c3b37b90c7427db71f098b73fd1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770519067, "uuid": "08a4633e-18c6-44da-8665-6840ec9290ed", "comment": "Malware payload (Mirai)", "value": "5019bf1b854473a4c91919956f61fbc5d63c917a61edc4ca097af767234ae795", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770519067, "uuid": "cfd0b2e5-5dec-43c5-b477-df7af8a29198", "value": "T1E0732A26B97A1E26C0D4B57E60FB8B11F6E1278E26B4C50A7D720E5EEF147006502E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770519067, "uuid": "66baa40f-247f-4804-ab57-b3a1468220f3", "value": "1536:hD/B6f6UD5hAS7mo0DCCAXpSKV6v3G78nN9Wj:927jqCt8v3GI/g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770519067, "uuid": "55ecc68e-0fac-4464-93c4-8714d124cdd8", "value": 74752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770519067, "uuid": "23c0ce22-c4d9-44b7-b282-e155108841b3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "049f1afc-0499-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770519067, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770519067, "uuid": "e9cf80cb-3f35-49a9-b9b8-2d469d57fd45", "comment": "Malware payload (Mirai)", "value": "9ae7df0d112b4967ffdcdae29d542406", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770519067, "uuid": "c9b88a97-8ff1-4258-a55d-cb2480d324cd", "comment": "Malware payload (Mirai)", "value": "1158b9bb56e098ea40e7cce9a0f2a4d3a8e4b06d25a436a851a7018594833c22", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770519067, "uuid": "44b4195e-661b-4f34-95bd-47c82a6ce5f7", "value": "T1BED2D0ADE57441C6FD4E6C3E808C3FA10E19E581231BDB9667228C4D5B32C5AF26E4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770519067, "uuid": "0ef57943-d65f-4f1e-bd8b-83918fbfd809", "value": "384:e8pVWtmRsLYEpB6V8S628FuRUuNJG9whQ3Cfbo6w+K95orj3J9RWGVCz0Nv3:jMYHb62x4ahQ3CfdwLjKW6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770519067, "uuid": "700a5e18-b81b-44ab-a5ed-06dfa8bb85bc", "value": 29944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770519067, "uuid": "987d915e-eecc-4967-8f1c-fee8d3909b88", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04d47d0f-0499-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770519068, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770519068, "uuid": "8ac5b1eb-5bf6-47f8-85d0-bf32a08b9c9c", "comment": "Malware payload (Mirai)", "value": "f24946ffc4b8e5aa570a636f5344ba1e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770519068, "uuid": "1a1a6677-5f3f-4f19-9d38-aaa7eac1749c", "comment": "Malware payload (Mirai)", "value": "ac563bb7f762f37bcbedaf6a453b4b175c938c353bc5fd716f580105235c6845", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770519068, "uuid": "614fd824-7f83-4612-9741-d1aeb594e124", "value": "T114D2D1B8670249D7CAAEE1788DE50B262D608FF3E1436C076558D9D7BB0985C3CB5D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770519068, "uuid": "2cc499bc-dc0e-445b-92b1-14864a986dc3", "value": "768:E4ylAtv6pqLJM0RXaxGyUbXtheU/Sn9IJgGlzDpbuR1JS:XMBqTRXa+Zhr/dVJu4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770519068, "uuid": "33f41731-a1df-4035-9d85-246df79b1cf2", "value": 28884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770519068, "uuid": "40c762be-1788-4d18-a630-734d0caf0adb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0542e892-0499-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770519068, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770519068, "uuid": "2f4fc819-9058-4aa2-b246-d8b44dd1d1bd", "comment": "Malware payload (Mirai)", "value": "4d95d710dc41825d22dc163d8e122279", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770519068, "uuid": "81af8af9-4288-4bdf-9567-51da84ae5fa3", "comment": "Malware payload (Mirai)", "value": "0d9feeb2476b2075a18f23a6c4017ffd9ddc35422f1ce33f27081fca55bdd12a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770519068, "uuid": "c401b8e6-91b0-443b-a9e9-40c6f5888141", "value": "T19EC2E191E1F62ED9FB3A6E602F65C2C177B04E9EB7B7CCD225589F0808A711747056", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770519068, "uuid": "62350d4b-a96a-4500-ac5a-f2ce2b513a42", "value": "384:lQez9/6Jgn9yMGEGHV4u/DT8HgPEt6seDYc/OGbM4uVcqgw05VxJc04:yG959yM0HWubJsWDYcG54uVcqgw09S04", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770519068, "uuid": "2560ef73-e046-4014-9969-f0fa17de4cb0", "value": 26232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770519068, "uuid": "b4e07d48-51f1-4d4e-a484-b3795189f965", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0556f7c2-0499-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770519069, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770519069, "uuid": "31ee7030-8bfd-4dc1-80b7-7a7af83a4976", "comment": "Malware payload (Mirai)", "value": "403da8d301cec2d947fad9c738f19a79", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770519069, "uuid": "0b161bbc-5fbb-4ea9-8e6c-d94731eeabf2", "comment": "Malware payload (Mirai)", "value": "3663bb0afca51d756c320643d2a36a92f05f973fcf05e82233993902144be97e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770519069, "uuid": "284a5f92-aa05-4f96-bb81-a62ee6280291", "value": "T166534B99B4028E3DF88FE97984160E05BA2023D112931F2767AFFDE37D331659D16E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770519069, "uuid": "c9b11a79-fa5d-4c6f-8a0d-5da51fa4dc1a", "value": "768:2eY49YE204qEkRf/36fmODeiuQlJZvTgFHq1euk8B8vpG97ErlfXySJ1oXso7PK:2Y7EkRfPh3iDx8Fq1Xk8B2aErlfiSJSe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770519069, "uuid": "c252b782-cdd5-40ef-b074-07f3845f7ef8", "value": 65096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770519069, "uuid": "5c4aa3f9-22f0-4bd5-a2fa-176f175ccd72", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1770525734, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770525734, "uuid": "e7909fcf-dcce-4a80-9492-27e5e7536d15", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770525734, "uuid": "f20026ea-283d-40b0-809a-583777938852", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770525734, "uuid": "0da739c7-b26c-49d1-9346-67a76d650e74", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770525734, "uuid": "458e571c-b31b-408b-894b-97178bc78ce5", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770525734, "uuid": "f7567e1b-fe76-4323-9b0b-08817d54afc2", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1c3f574-04aa-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770526686, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770526686, "uuid": "0dc83442-1c13-46ed-9263-354d58fa6968", "comment": "Malware payload", "value": "4d633e80e31f2414156139332179d784", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770526686, "uuid": "5ee4ddfa-8843-4f96-b820-313a0f223ed2", "comment": "Malware payload", "value": "07249f369772a40a96bfd73cbe7727afd98e9398a2f0183cfa71ad3b24ef88ba", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770526686, "uuid": "3daa373b-fc77-41aa-a9da-aa14a74e8655", "value": "T18D15AEE131BD93D3D1B18EB04F9A9A70B6F134AC98D0170D61F59B2E9BD23900C5DA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770526686, "uuid": "c0aa5887-ae39-467a-9444-542f00f9f595", "value": "4e3b0eb31beeb2a620c8bd214a9c9ec1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770526686, "uuid": "c7d2474f-6a79-46ab-947f-86c840ad915a", "value": "12288:9FKa0JP7V1DWpOTM7zPlmVCT8vJXKJnNAnYwVn32ioSs7JolnrIoOjn:q1JTVNWpOwpW6R+YwVnb4SlnrIz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770526686, "uuid": "4076a3aa-d311-4207-ac3f-e43e951809ff", "value": 883712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770526686, "uuid": "219a8acd-9028-4dd6-9405-a1c2e6201b53", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e4545b7-04b4-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770530868, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770530868, "uuid": "7c7718a2-8243-4a22-9ec5-7cfe885ff195", "comment": "Malware payload", "value": "85da9ac5bb94ca12d7e609e6d8eb3d9b", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770530868, "uuid": "83f32d2c-2058-41ad-bd9b-048a0223e02c", "comment": "Malware payload", "value": "8e61276d32ad1a040db17ae2e3b1565b29b63a2080d4b5c4a2aacb0f7847c28a", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770530868, "uuid": "1836d251-bda0-457c-a6c0-18578dda87cb", "value": "T12A631B46A5D770BCC28BC070469BA971B9327CA111203EBF6BD4FE712E35E51236AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770530868, "uuid": "5f6139e8-337d-42b6-9b06-21f8995b1854", "value": "1536:/sV7nxRw3Fm6ZlL29xpEF460o6Sc5R2fOdYn4nX7fsMAsRxMkwIbUr:/sV7nxl6mtrJsMA21I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770530868, "uuid": "4421b9fe-f391-4051-acc0-d10c9354c34c", "value": 67176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770530868, "uuid": "f3568645-18e3-4e86-be68-c5ee4a6c57f7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1770531557, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770531557, "uuid": "584e47cf-ec21-4b51-b4dc-d6bfbbd0bd5d", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770531557, "uuid": "f7d01d34-df36-457c-a320-df6278b3b531", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770531557, "uuid": "3fc177a4-7966-415d-913e-aa9615b1c2f1", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770531557, "uuid": "662b9f9d-f34c-48f0-8a4b-43d610644db9", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770531557, "uuid": "5b662d31-22de-4bdf-b14c-865f18fd9f05", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8fa7f27a-04b6-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770531756, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770531756, "uuid": "bcbaef73-944d-4122-b647-f583ffb38a38", "comment": "Malware payload", "value": "a875dc3126ec4704a8fd55c83f2db961", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770531756, "uuid": "bb37d511-db6c-490d-9a44-43767beb9db3", "comment": "Malware payload", "value": "bae97d2152a85a811b7727c323358ac60f8ad907011e6d73cf4eaefebfe20e67", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770531756, "uuid": "7de5a98e-01cb-4968-80f4-780c2b897be7", "value": "T1D48533AC16308341007F35A96E40BF7A1B2A3F3CBA87F53EDE83B5DF69455972A118", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770531756, "uuid": "873aca1f-3863-4286-a67f-daa80cf53594", "value": "49152:32Bw6Tci0nWCS9ycgrdzYJcTJqqyQs0Q7Z98wiV:GBtYicJS9BgrdZJqqyQW7Z9g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770531756, "uuid": "224784c2-6f52-4d10-8b95-646c2bf1f811", "value": 1758693, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770531756, "uuid": "292448ec-db38-4e03-819a-e4e60448e5a3", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1770533173, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770533173, "uuid": "8f0ce2ce-1774-4670-bf58-f00c574582f6", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770533173, "uuid": "cf72d5b2-5ac8-4228-acba-04ff4e11af27", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770533173, "uuid": "bdcb195b-f1e7-4926-bd16-734de1cfce7c", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770533173, "uuid": "55c1842a-1af3-4a5e-8b93-2543cc4f81f0", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770533173, "uuid": "cce4c7ab-e6f7-4de5-aac5-7e2fbee97577", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "39ab6e61-04b4-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770533201, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770533201, "uuid": "80435e41-8d19-4eb3-81c6-26d4295d4d92", "comment": "Malware payload", "value": "93259b9486a390a4beba7da6122c21b1", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770533201, "uuid": "984d3de5-4e33-407d-89d8-264350064234", "comment": "Malware payload", "value": "d0fc8a1ea68607d53cee06982ce67a1e8d7d276b55a1f1aa3000d5bd55a81c29", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770533201, "uuid": "6c3b7b29-a124-468d-b24d-06a837921472", "value": "T184412B16BC28ECC8F58B47766E528FD64409AA7B4E339C07C8599562681F5E05F3F2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770533201, "uuid": "c0ad8f82-84d7-4dc2-9fe8-8f9b3015cc1c", "value": "48:9AV2nD4XIMMcY9mNZ+f1Hci5grVMSl2/zhXZ/Ll/:iEyY5f18NMSl2lZ/Lt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770533201, "uuid": "401176fd-eec0-4d8d-9c68-a309f05610aa", "value": 2317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770533201, "uuid": "009e8986-6995-4fde-8009-e7030e78eb3b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c74d3260-04bb-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770533997, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770533997, "uuid": "567bfd99-1108-4373-8ed5-6c0e00b250a2", "comment": "Malware payload", "value": "4f7ea6d452c61533581230b8a36185b7", "object_relation": "md5", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770533997, "uuid": "083a2c1a-ba42-479c-8381-6f3c4f82fce8", "comment": "Malware payload", "value": "fec8567478269d70fc3dd038dddcc263bd594fadffeb4043fa7ef9e3d0d5b59a", "object_relation": "sha256", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770533997, "uuid": "acd5462d-71b4-452b-a7b0-42f80763b4c7", "value": "T114B633C4B345817BE8B7B770CE2A2FF81A1E50B42B5F9DE77E5822752C224E599311", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770533997, "uuid": "5ad33464-69e6-4326-8ffc-03a9f33562b8", "value": "bf5a4aa99e5b160f8521cadd6bfe73b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770533997, "uuid": "b94ae10d-c57c-4532-97f6-a458bcb24c33", "value": "196608:D8BFI442k2meeKNs9pspLgnpD0t8ORPbKuUdfSPp6zaLu0ZmQTKS569O:cp42kJ9pspa0tPPbUYBOaS0EQGS56E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770533997, "uuid": "234fa57f-2ab6-469f-97b6-1abed837ca46", "value": 11363328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770533997, "uuid": "f8dac56f-28e0-4c13-b8d0-6729b4ff014b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a130609d-7fd9-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1770535428, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770535428, "uuid": "68f21e22-23ff-427f-92eb-bbbb14193b28", "comment": "Malware payload", "value": "b8f42653f5d3ffc5f2bc42eda10d82be", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770535428, "uuid": "640bd31d-69be-41a7-a665-3ac85e19a6cb", "comment": "Malware payload", "value": "733dad30bbb081801d7774c4461516fd4173fecb7bff19c5fed28ccdb47be660", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770535428, "uuid": "969537ef-3cf9-483b-b661-7250b763efd5", "value": "E16312E02BB5178C1276E8393ADE306F8124622B379A29241D9791CEF85B6039573DBD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770535428, "uuid": "15575ed8-eaf9-4655-b3e0-f5a3a383313b", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQAvcYkFtZTjzr:8D+CAXFYQChaAUk5ljnQssr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770535428, "uuid": "058b1f58-cb80-440f-9d28-9a2a1f04e226", "value": 72012, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6d0b5db-7fda-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1770540138, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540138, "uuid": "ca780194-b1b0-47b4-93bc-353d5e568c4e", "comment": "Malware payload (Hajime)", "value": "5377e8f2ebdb280216c37a6195da9d6c", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540138, "uuid": "c6088d65-8056-43e2-8a1c-0eddb331c211", "comment": "Malware payload (Hajime)", "value": "020f1fa6072108c79ed6f553f4f8b08e157bf17f9c260a76353300230fed09f0", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770540138, "uuid": "353f3489-acd5-4098-9928-f5f125416396", "value": "21831229135414E5D62681F1D3FD1B84AE981FA9CEE2EC147C12BC89EE333AD3CD2618", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770540138, "uuid": "fdd6234b-1035-4200-a1b0-f2aa567dc48b", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J1V+uBNu:yYI0ARqw1qAEv7UIFM8oJorFquyjkRks", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770540138, "uuid": "b5574296-7160-4f14-a3bc-84407cb39015", "value": 85232, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "59697595-035c-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770543197, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543197, "uuid": "2ec061de-a7b8-4e13-b491-ad3f55658dd8", "comment": "Malware payload (Mirai)", "value": "9b38e2f49177385b349e83f0562b8caf", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543197, "uuid": "19a7d015-8aef-42b0-bf62-dc7ddc5c55f3", "comment": "Malware payload (Mirai)", "value": "a98fc17acb6a3a274eb728bc4d87d627eb3d41f37ebefd67b57ac9e896bff1fa", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543197, "uuid": "88d5594e-10ca-433d-85c9-d08005a62ed5", "value": "T10C530782FC819A07DBD01336BA6E61CE33257399E1DE7247ED126F613ACA91F0D6B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543197, "uuid": "c21a996f-094e-431e-b601-256eb34ff2bf", "value": "768:RShIy19IkyR5wmKNMil8KhoKUz6m/etTQ+Eg1cmKF4QPpo77HabBNu56upsTZGUq:AIy1WON6ilQOkETQ+FcRzPkXpswm8FL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543197, "uuid": "4b7617e6-6fd7-4aae-87ea-7dfb4032b8fe", "value": 63656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543197, "uuid": "cae79db9-3933-4a32-b14b-3938d4034232", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "26422b3e-0474-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770543197, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543197, "uuid": "1495805e-4a76-42d4-9ad0-42c291f747c6", "comment": "Malware payload (Mirai)", "value": "e6b70ab7aae2198eb7170aafd760e6fc", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543197, "uuid": "65f77380-58d4-49a1-810d-29e9c8bfc8f2", "comment": "Malware payload (Mirai)", "value": "a9a96cc123866df23aa043f23e7374c6ff75f68c67359f93bb89a05f8c7b2719", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543197, "uuid": "da774ed5-8406-4785-8a1a-400878b6d572", "value": "T177532A82FC81DA07DAD01336BA5E51CE37267399E1DE3347DE126F213A8A91F0D6B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543197, "uuid": "1a0ac33e-e1ab-4589-a85e-dbf92b4f3abb", "value": "768:EZqtAATOSAWG/yi6A5LJAcZUO1CBeUS8Vg1xmKFD6/po7bHeBNu5bpsqnZUZ2Fve:E8AE7X/A54yOeUS8QxRu/MbpsCRFw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543197, "uuid": "2e6c28ab-87f6-4305-a8ff-abce5ff0afb0", "value": 63756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543197, "uuid": "28724e1e-52bd-4196-99b8-09ddc06c2fc2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62be1cf4-035c-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770543197, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543197, "uuid": "dea38bb8-27f2-42d8-9d80-7ccff6b0179f", "comment": "Malware payload (Mirai)", "value": "8939e31dc576c898d941b14e4592be7b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543197, "uuid": "986301b5-127e-42c3-a613-2ddd244e12c1", "comment": "Malware payload (Mirai)", "value": "2577146d5291c674dad1c9eac1025d721b468b63614e2c2fad89a950aa2c3b53", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543197, "uuid": "7807cf99-5bf2-49c8-85be-2e28c0c9ef26", "value": "T11353498AE68BD5F0CD4A05B0157FFB3DCA36A8303234CEA7D7C4BA57A9E3642A0511", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543197, "uuid": "53b510bf-3cd5-4749-b499-0aa97275643f", "value": "768:CohndpoMMRfCfRlXDvsa5PwNXxIKBsCt/+wQugNSXwG/d/tSyMgfFkIb1PcLtup2:CvtCfjp5PCXxKuttS+fduLMp2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543197, "uuid": "fc1f6255-478a-4fb4-b7b0-7d117c7014d9", "value": 63860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543197, "uuid": "fe82320b-9701-4c23-bed3-3bc88a829da7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8b9cf141-035b-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770543197, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543197, "uuid": "7f3136a7-d25e-461e-a84a-1a4174021447", "comment": "Malware payload (Mirai)", "value": "a3da66cc83ca04a0e88b9c9d267852e1", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543197, "uuid": "470227a1-ef86-4e7e-801a-541cd39c557d", "comment": "Malware payload (Mirai)", "value": "141b4f5689cd0694d59e543567a88ebaa527868eb4d812784b37777d8b26c015", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543197, "uuid": "5c6e670c-3aa9-471b-b039-344a3d4fa6e0", "value": "T19A438DBBC9A96AE0C944817465288AF94B23D804A6D73EF5DB938D534007FECF9053", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543197, "uuid": "cf87bfc7-06bb-4bac-9111-278069707fe9", "value": "768:/at/bB7hLOf6FaeGuYYro3AyoDJWqYHREoveaLH9CAkYFn79:/at/VV6fNQdJD9YHhGo9CAXF7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543197, "uuid": "12776ef4-e17f-4bfd-b70c-8ecaf8126d55", "value": 58872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543197, "uuid": "defe4012-29c6-49ad-af57-b9e870932ffa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "985210c6-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770543367, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543367, "uuid": "5bf3902d-43ca-4ce7-9b95-0f638a97ea7e", "comment": "Malware payload", "value": "b58e04dbacb49dc0d2611d78fc71ccae", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543367, "uuid": "f8563113-10f3-4e2c-bfbd-81e439474d7e", "comment": "Malware payload", "value": "d5ac76538aa5812eebab9b65ccd446c46280b7d5612902aae67980391a22cb0e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543367, "uuid": "19adede2-5620-471f-a84e-5df4dfcce76f", "value": "T1EE63015D92491573815A1C8DFE9BE05A498878F1BCA39C0252DF10E99C538BBEFF72", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543367, "uuid": "1f4d1c33-2901-4ce5-82bc-1bd824b2bd17", "value": "1536:RZgKk5EcfgSWVYLMJ/odF15dujZVMPbA8xz5mXSbGRB0HURc426XJjLKVaP:RZgKkBfgjiIJ/of1ozMPbLkXf0HqceL/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543367, "uuid": "44921e4d-10ae-4e5e-9f0f-a3c13e09d74c", "value": 68608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543367, "uuid": "cb04af31-c969-48a0-960d-c065ff6d5616", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "986fcbbe-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770543367, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543367, "uuid": "95a703f4-4a10-448e-991d-1ee2644f811d", "comment": "Malware payload (Mirai)", "value": "02eee4d66f9f11367a7da314369d12ac", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543367, "uuid": "54a56866-f0ae-4236-9285-c376c0d1dd82", "comment": "Malware payload (Mirai)", "value": "7d331ce92bccd116d760f63933019c27bfbe67d3c06e9928e442169d63b8488d", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543367, "uuid": "5729fb04-fb5f-48f2-9849-f52caf705b4f", "value": "T1DE44AE27B7059C6AC2650AF98ECB035D1733C0005F1BDBC77A2C66386E576DEAD9AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543367, "uuid": "e2159349-bb56-43a0-82ce-9a7afdb39c1f", "value": "6144:09OsKlEn70MedCWZx2xUq1vA2z6f84n1sm1uEMTmX:09OsmsCcWOUntqm1uEMTmX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543367, "uuid": "3cf7f5a3-e172-404b-89fc-43cdc264f26e", "value": 268580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543367, "uuid": "ee6399a6-63e9-4b91-b1f9-2edd138dac82", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98d138ee-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770543368, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543368, "uuid": "179ccd8e-6964-45a8-a065-3852018a7d93", "comment": "Malware payload (Mirai)", "value": "5d1723405dab73d624ee6dbdd114410b", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543368, "uuid": "8471fb00-5ea2-43c3-898b-d859a944edba", "comment": "Malware payload (Mirai)", "value": "19842a9b42b42c0270d1add3b14aaaae34855387287d0aa84013f19b80c5d190", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543368, "uuid": "040741ed-d98d-4612-bc74-c1abc3c45311", "value": "T1F324C6076BA19EB7C89FDD3306B6860110CEF45721A47B2B7378DA5CBA0A94F49E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543368, "uuid": "ba623256-f40b-4fa5-8b5e-3a604b16f1fd", "value": "6144:iyCdUsTolYi0734CnGmHWjnpW4twPuX+Mp:iDuxq3AmHWjnpW4twPuX+Mp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543368, "uuid": "4795fa79-f7e1-491b-8317-1c00e4905972", "value": 218024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543368, "uuid": "69e35046-6530-4f22-ab4f-ed0d4496ea89", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98dda8c5-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770543368, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543368, "uuid": "6fbe87f9-b146-4ea9-9a08-8ebab3b4a19f", "comment": "Malware payload (Mirai)", "value": "310788424d0809d374e59e08a6ef3316", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543368, "uuid": "1e769d8c-2a16-4707-a692-f4825cbf85fa", "comment": "Malware payload (Mirai)", "value": "9d73a35f8ab089f496f23ac991cc2bc6547f50dde039ac19aa9866aac2aaa5de", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543368, "uuid": "fd70726b-3d02-4304-815f-32b1f37ff111", "value": "T12321A68D507591C4C417EFF333859CC39044CAEAFCB88A31E9D66DFA998D6047974B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543368, "uuid": "8bff4137-eb72-4ec7-8104-54c8e334e5d3", "value": "24:6yW2HB2HLcR92GG3yb6G3y3RG3yTiG3y3lG3ygG3yHG3yAG3yKRv/WR6G3yKR2b9:jW6P9JGCb6GC3RGC2GC1GCgGCHGCAGCM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543368, "uuid": "2ea8722a-9e09-4bb3-b570-18e598bac24c", "value": 1246, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543368, "uuid": "cb794819-33ef-4360-bc68-644f7dda2459", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98ec74b4-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770543368, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543368, "uuid": "4fd181e0-f24f-40c2-b43a-ceecc6ca9be7", "comment": "Malware payload (Mirai)", "value": "6f3b7a8e3640c49a3bbf8ed51dd5188a", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543368, "uuid": "cd040be1-2252-45d0-bca4-6d10e50278d9", "comment": "Malware payload (Mirai)", "value": "9959068360bc225e6e1e6f066e98a41e8ad1d4991bd29c67ffedd518a944a419", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543368, "uuid": "099aca2d-f68e-4d54-b967-28f3f237899f", "value": "T11BE32A5398694FB7C596AFF522F34A710793ED110F4B0B49B62AEAF80607DCDB8097", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543368, "uuid": "e527ed9d-2a85-4e35-8bd9-720be27f8822", "value": "3072:9uKTr8H/CAQgAUdZLwVvWEjsMCI7JhBb6mnZamjPoVPEH7NhO:fsH/CxWUQEoMD796mnZamjPoVPEH7NhO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543368, "uuid": "19da6307-8e7b-40fa-95c0-650bfce3d486", "value": 149126, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543368, "uuid": "04e0c8c1-dbc4-49a8-abab-209fbc95905d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "990db92f-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770543368, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543368, "uuid": "42f46fce-4a36-486e-9cb4-4cf1bc0e45ea", "comment": "Malware payload (Mirai)", "value": "97661a1a1801c297a5493c804b30bcce", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543368, "uuid": "0134847d-59e4-4e22-a30b-3cf54f3d74a9", "comment": "Malware payload (Mirai)", "value": "d2f1b535262a7f61c113f52674e7483b5f5f50a12f8b139a3a9e1ef4981e9845", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543368, "uuid": "f062f74c-bf14-4034-887f-7d9412f245d2", "value": "T1DA043C03659189FBC4D6DFF51BDB95128933F8392B32220AB798BCE51F0DE946E1D2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543368, "uuid": "fefb2cef-5e04-47d4-b8c5-8fa1f2def297", "value": "3072:LwB04VMozdqOMyJKUayTrqCT/mAdvmOHnd4wvnOp5EHhO:LWnzvwaVFvmOHnd4wvnOp5EHhO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543368, "uuid": "4a40db0e-b102-433c-9f98-c82765ef2d48", "value": 176376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543368, "uuid": "834e28ac-4f66-4604-a55e-041a2ae41f15", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9937e7ed-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770543369, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543369, "uuid": "dd424ec2-88da-4c08-b803-5762af8b60a1", "comment": "Malware payload (Mirai)", "value": "e6f4984ea34751cb9c8647c1562a6536", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543369, "uuid": "929d6404-e534-44e0-add3-e15a4aa76cf0", "comment": "Malware payload (Mirai)", "value": "b5ced18d85128d4ac08874a1723876ac6ff69cd4dc08c22ff0375169d2408979", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543369, "uuid": "5e3eaa75-d400-4c54-be75-6923b1f6a1de", "value": "T15DD319456656DAF3D5C31FBA02E747210633E82A2F2BDE45E32DBCB44E1518CF21A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543369, "uuid": "e0ec1c64-3046-4849-abd1-51add3203aee", "value": "3072:RjD2R7dwbDO5BmJdFYvu703ImuHngNPvKXKHsGhU:RmfUIu44muHngNPvKXKHsGhU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543369, "uuid": "f882abab-ff94-4909-9d26-b2369d8f8c2f", "value": 141038, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543369, "uuid": "b2149fca-5d27-4adc-8649-22d045d55ccb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "996e3627-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload (DiscordRAT)", "timestamp": 1770543369, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543369, "uuid": "5dc80b02-61cd-44cd-b0ac-371d5804e0c3", "comment": "Malware payload (DiscordRAT)", "value": "ac69e9a73b4cc40cb05a9060c6e093fd", "object_relation": "md5", "Tag": [ { "name": "discordrat", "colour": "#cc0866", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543369, "uuid": "b029d1b9-020c-40e0-b3b9-35167f12e1ca", "comment": "Malware payload (DiscordRAT)", "value": "726a321c489253584377ccdb566c29109ea5f9a399f2874784e3f29a6ebac926", "object_relation": "sha256", "Tag": [ { "name": "discordrat", "colour": "#cc0866", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543369, "uuid": "0134618f-7cbd-41d7-a77b-d467a58439e7", "value": "T1B073B8C877AD8903FBBF5EFD147141524B72BB17E935F68D088C54E611A2B828C42B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543369, "uuid": "25344418-0a64-4b15-b00a-3909a7c23e13", "value": "1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+xPIC:5Zv5PDwbjNrmAE+hIC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543369, "uuid": "d20316dc-655e-4f73-9c73-037a7f7214d0", "value": 80384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543369, "uuid": "accd6354-fea4-4c44-9528-8deb00ce54a9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "997ea8cf-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770543369, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543369, "uuid": "7976e24f-af58-4de4-990a-960359cbd981", "comment": "Malware payload (Mirai)", "value": "21e4c0b2841228e6455eaf674c22f767", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543369, "uuid": "0e585327-596b-4218-8580-fe2b907b49ba", "comment": "Malware payload (Mirai)", "value": "d961ffb7cbdb08d9b1782c6ece2379961b159eaf6cc75ef15695a3edf8ec851b", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543369, "uuid": "36ad87e8-2de1-4c4c-a4b8-c4aa55670d85", "value": "T1ACF34A03670C4A83D05B6EF026F757F183A7BD5129A7A140F60EFE895772BB0A41AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543369, "uuid": "9a6a487a-0dfa-4d75-b6ce-c056d4177258", "value": "3072:kil7S9UVvJ0dHn3NVrSw4heWXZ4zEj+o+pm4HamOPoKtKH7gxO:kil7SovJ0dH3NZSH4Eewj+o+pm4HamO8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543369, "uuid": "5e6fa43e-161b-49b0-8acb-17e17096b92d", "value": 161041, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543369, "uuid": "e1381882-19e1-4140-9db4-0afad32f4c3b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99a11ad6-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770543369, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543369, "uuid": "175393af-3170-4db1-b78a-7266e0a02aae", "comment": "Malware payload (Mirai)", "value": "2fc04a04f45f1d368ead9bada8b14589", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543369, "uuid": "54dd15b1-32af-4db4-b47c-8a2441aa6201", "comment": "Malware payload (Mirai)", "value": "74e3c775fe3ea928410a88aa4a35415467561f88e1d0472809671fbeb1878d40", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543369, "uuid": "afb843e6-c4d4-4222-86ee-15e44e7c8c5f", "value": "T1A524841A3A22EFFFF568867007F38A7047D9659636E19746F26CD71C1E2028D680F7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543369, "uuid": "8a8090b9-0852-4579-a6f8-32cd1ea3b18e", "value": "3072:eXceOyGI9NUAjFsFPPSyWkHSI0tKBHdmCWjnpW4twPuX+Mp:8nPcoCP/Wkr0t0HdmCWjnpW4twPuX+Mp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543369, "uuid": "8a99a73a-c0eb-4b1e-b75e-9603a6b67aa1", "value": 217963, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543369, "uuid": "548cb03d-0ded-415b-920f-04f8589e7eb3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99f49b12-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770543370, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543370, "uuid": "454e1d91-715d-40bb-a6b9-3a89ce85bb53", "comment": "Malware payload (Mirai)", "value": "79f7ff68ee24af37091e648191417289", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543370, "uuid": "554ac608-0a71-427b-a664-31807782683c", "comment": "Malware payload (Mirai)", "value": "a8e00f535ef8eea1907c5a766a2627a985fb350e4a695f70fa320322d6b4c366", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543370, "uuid": "18ca18a0-0940-418f-9ef2-573b7e9ef61f", "value": "T174040983B904DEF6F80EE77204D30725B271BB654A531A72B31B797A9E3A2C43426F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543370, "uuid": "ee67eebf-3f34-42bb-9964-3c207acb0427", "value": "3072:Ki0Tnggzj/rEiBsozyHbXNRMyhjOqCDeLe7nnyjhaYvmsHnm2PoKiKH7ghO:70TnLzEiBsomxRMy7LezyjwYvmsHnm2t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543370, "uuid": "c2d7944b-3aca-4760-a106-72f39ee45a44", "value": 180615, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543370, "uuid": "0be61d05-c151-48b2-b6c8-c66bd5f4aecc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a3fb575-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770543370, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543370, "uuid": "1fe42f8f-06cd-478e-9b35-c3e2c0fa8d02", "comment": "Malware payload (Mirai)", "value": "e36c30dc817317b4df0e178fd96f0588", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543370, "uuid": "1d1848ae-cd54-4dcc-861f-95ad276296a9", "comment": "Malware payload (Mirai)", "value": "99c485c2390da80e99b25d7954458e378c00eb79144fdb0826d5c78e3b874b8d", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543370, "uuid": "dfe0e8f0-b468-40bd-acfd-b0e7562a0779", "value": "T1A5040901B9004B57C5C32BB7FBDF42993B326B1897DB3301AA19BEB42F4679D5E292", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543370, "uuid": "5291552e-5bd0-4cb6-b0e9-5f6bb073ae80", "value": "3072:geK431f4/WNVlGvDa0v21O6oGe2oxhjRmzHnNT/ZNsCQ3FVhO:Llf4ONVUbriToGe2UVmzHnNT/ZNsCQ3Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543370, "uuid": "887a4a58-4f12-43b0-b02f-7a807fa5bb97", "value": 177298, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543370, "uuid": "4324e7e3-8dd6-479c-81f8-b05b16bbe617", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e0170a2-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770543377, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543377, "uuid": "2812e3cf-68b3-4b01-a471-5d734dcd76ae", "comment": "Malware payload (Mirai)", "value": "82f7c8583af32c8e8139d3a12de8c0b4", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543377, "uuid": "ed2bc063-fcb5-4aee-9aed-ac053e30a2f0", "comment": "Malware payload (Mirai)", "value": "788283ff38bc2e24617a1c6fb5749ddb8a148c6d54a98f3c53ab5431f853a276", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543377, "uuid": "256b789c-1679-44b9-b6fd-0fc22bdd2998", "value": "T184F32902770C4E83D1676EF026F727F083EBED511AA2A140F61EFE845336AB16519F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543377, "uuid": "ea0b054a-3aaa-409a-9de5-53a13a44dba9", "value": "3072:kWxjks+1eO8CVnfI4hFKoDi3XD+Mm4HamOPoKtKH7gxO:kWhkp1eOlVnfxhAN3XD+Mm4HamOPoKtu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543377, "uuid": "28184813-41d4-4835-9c71-6f2b1698fb42", "value": 161041, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543377, "uuid": "51b7a1b9-9552-4759-915b-96f1803ffe49", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e3d09a0-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770543377, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543377, "uuid": "538a95ea-9c22-4315-b1e1-486fa2538980", "comment": "Malware payload (Mirai)", "value": "db8f90f4d311eef4b3ca64ef0453d86d", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543377, "uuid": "f7b8d25b-3d3c-4ca8-b256-685dbf3f6eac", "comment": "Malware payload (Mirai)", "value": "e43e037683423f3c5c64ec7edbb531bfeaaf27f88bf8388540118de5a70949db", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543377, "uuid": "3295d60f-9194-4f08-8675-7a798d4c9307", "value": "T1F1D32B45AA46CAF3C8C30FF512A75B650632EC256B1BDE45F32DBCF84E16588F11A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543377, "uuid": "a65867d7-1fd6-4423-8170-cc77efd6c31a", "value": "3072:cl6Ph2CLfROIb7Sd73wUgnWMlmXHngNPvKXKHsGhU:clGYC+CUYWamXHngNPvKXKHsGhU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543377, "uuid": "4bfdff38-51e9-43aa-aa11-43d447eb9cf1", "value": 141678, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543377, "uuid": "2049185e-74f9-41ae-9514-fc9df21e819d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ec54ea0-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770543378, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543378, "uuid": "799cde46-0559-4bf0-ae14-9810606e052a", "comment": "Malware payload (Mirai)", "value": "c2bdb155397d2deff03401335cef1ee3", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543378, "uuid": "5e5e096d-dec4-42c9-aa6e-42d1c07e2c94", "comment": "Malware payload (Mirai)", "value": "eec4faae7969eb516a3230b8eae133ad2493d9cd28a6843cb0494d42804d8407", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543378, "uuid": "0bfcfc2d-20c7-48a3-ac00-abdc1fa39a58", "value": "T12AF30A01B9104B97C5C22BB7F7DF82993B336B1897DB3301AA19BEB42F4679D1E291", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543378, "uuid": "947328af-283f-411e-aad7-74ef02346830", "value": "3072:U1ncdeJ4JA2JV6EmuQolMV2CBmSmSHnjOSZX+xD3BqmO:HUJ4m2JVrVQolMV2wmSHnjOSZX+xD3BA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543378, "uuid": "5b449ab3-3c72-4e11-96c2-c330f7325447", "value": 169752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543378, "uuid": "17937149-0b84-466a-be10-cbe2a9c07f6c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a038218c-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload (SantaStealer)", "timestamp": 1770543380, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543380, "uuid": "584bfb30-5c3b-431f-bfc7-857ec41f5010", "comment": "Malware payload (SantaStealer)", "value": "a9f71eb39fbb66f27a07dcda6791bf5c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543380, "uuid": "8f59f45d-be69-4d90-9222-78a7c2b2c434", "comment": "Malware payload (SantaStealer)", "value": "6688239d3266236edc9f341a0e717f32a25905a3d0ce43a2668a67eb2f8843b1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543380, "uuid": "922fec50-0538-4e18-bd19-5953de063108", "value": "T103D5AE0AF25349D5CC5BC0BC839B7131EB317D69CB242EDB17918B613E55B806B29F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543380, "uuid": "5e28f717-8058-4718-8fb7-f5d9ff2e9f79", "value": "1e71a6dfe71991a69e79c1243f113f5d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543380, "uuid": "204eb740-8d12-467e-b652-0ae007742a50", "value": "49152:5NfZEXurRHg9orj/oKCQOydhYMJucKK6q3MqCc/9k3e8:59auTj/oFQOyrYMkcKzjw9k1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543380, "uuid": "479aa121-180f-4e73-8491-e883253641b8", "value": 2982400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543380, "uuid": "ccbcfabb-9130-40dc-a333-1bf011659b66", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb5ded37-0327-11f1-8b2a-82aee05be84a", "comment": "Malware payload (SantaStealer)", "timestamp": 1770543380, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543380, "uuid": "62044cd4-d848-4711-9056-5a72ac671fb3", "comment": "Malware payload (SantaStealer)", "value": "f969adfd080b0a48a7718f162fa1b46f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gitlab", "colour": "#a79648", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543380, "uuid": "838faba0-1d9b-4263-850d-01882775335b", "comment": "Malware payload (SantaStealer)", "value": "2484a47385727ddde233600c28dfc34befc2eab654be9b0c624f780cc7a69558", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gitlab", "colour": "#a79648", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543380, "uuid": "c2c9ba57-ca33-4e7e-80bb-642c39cabf32", "value": "T1B476D0CAD16B40D6CC067FF598142BC39F3056324A34046836ABBE585F779FA811EE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543380, "uuid": "01262d90-1853-4bc3-b36d-2695db2a75bd", "value": "09bf3c2c0d1e1c721043f5ca267758f5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543380, "uuid": "f3c4cb91-4e2a-4f0e-ad8b-a32bd2c92faa", "value": "24576:chdjCOnn42rjefqP/gwqn3Vc17MT2riCbRqSblfbBhSdCHFR/Rzu8R6op7EoomGS:YJ2VH/NgOO5HqiL/6nmDgo8xw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543380, "uuid": "dfbd9483-6e26-4a2f-b1f5-a3d56dc3b535", "value": 7192064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543380, "uuid": "1ec838ff-5df0-4dc2-904f-66602060a401", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a0aad4be-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload (SantaStealer)", "timestamp": 1770543381, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543381, "uuid": "86f2fcba-423e-4317-a15f-f2c16bdf14bf", "comment": "Malware payload (SantaStealer)", "value": "eef7f3d0a3034ac5307bb2fdc6413eb5", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543381, "uuid": "1e33bb63-f648-4f21-b0d7-047d41ff4e28", "comment": "Malware payload (SantaStealer)", "value": "554650562de7ff4b0a266857cdd8bad5c3445dbe23816c7898eb679d34652391", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543381, "uuid": "fe02963a-008a-43d7-8434-e9b455f8a792", "value": "T11DC59E0AE15349D5CC6BC0BC838F7131EB357D79CA283D9B17D28B613A95B806725F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543381, "uuid": "6f534957-9b3e-4890-8558-e945837d5fb6", "value": "d6d4019539ab1757eb53b82c6691b682", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543381, "uuid": "afb035e2-31b7-4028-a223-287ff1f3e781", "value": "49152:lwLgW0B2MXHteGLzCnx7Rt80JjIGr2yXEJmgS//cEIu0Z:lpW0jteGLzkx9KAjcyTxU+0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543381, "uuid": "d4f20f1c-50c1-4398-ba15-4694eb32988a", "value": 2628096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543381, "uuid": "3c64d73d-8001-4c31-ab5a-5c62162bac65", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a0ac83e8-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload (SantaStealer)", "timestamp": 1770543381, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543381, "uuid": "5815a85a-b1ab-446c-9ab1-2badfcf88fe7", "comment": "Malware payload (SantaStealer)", "value": "5843f25e5d736f915da1d2efbf7cde4c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543381, "uuid": "0c8a6849-8a72-4cf7-91c0-9be9e8715e39", "comment": "Malware payload (SantaStealer)", "value": "a29d6ca899a2a2c1497b192dc8aeb1cb6290109c347ffe3bc66d950dc0b0f1a6", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543381, "uuid": "03bd031d-5076-444c-b03b-9b3d66194040", "value": "T1D4C59E0AE15349D5CC5BC0BC838F7131EB357D79CA282D9B17D28B613A95B807729F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543381, "uuid": "55bd20a6-f7df-4afb-bb2f-47bb54b2b519", "value": "d6d4019539ab1757eb53b82c6691b682", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543381, "uuid": "38d66408-bb66-438b-903c-f10637f91146", "value": "49152:UwLgW0B2MXHpeGLzCnx7Rt80JjIGr2yXEJmgS/GcEIuDZ:UpW0jpeGLzkx9KAjcyTxp+1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543381, "uuid": "0b863ef1-df12-4a74-a87f-b712a178724c", "value": 2628096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543381, "uuid": "6e13c856-9131-4977-b705-cfb6b425dde5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca7b82c0-0327-11f1-8b2a-82aee05be84a", "comment": "Malware payload (SantaStealer)", "timestamp": 1770543384, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543384, "uuid": "65a06a0d-b41d-48dc-b264-19042575d5b8", "comment": "Malware payload (SantaStealer)", "value": "24b4096627c8c94c23857dcad98674d4", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gitlab", "colour": "#a79648", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543384, "uuid": "c8b43b53-3d03-4eba-8aed-85141096f127", "comment": "Malware payload (SantaStealer)", "value": "0992a2d2f68b550a9d2c261aceece823810a184f6c599190f6382c1099dca99d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gitlab", "colour": "#a79648", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543384, "uuid": "724d08b4-75ab-4628-9eba-a090b6a637b5", "value": "T114D5AE0AE15349D5CC6BC0BCC39A6131EA357DB9CB242EDF17914B613F52B806B39B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543384, "uuid": "db917498-e99f-4e24-b481-18c107540c62", "value": "8ce038dd8e3bb128b6fce43c5c582390", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543384, "uuid": "64330595-0daf-4035-9850-7e84463323f0", "value": "49152:TF5lFVzu22e+uLqvFEeyDY1oyPh7UEQ3OD6:1zKumv6e84jPNUEQ3z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543384, "uuid": "fec1a1f2-01f9-4ae6-bbe6-fe0ac8d64766", "value": 2839552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543384, "uuid": "61c4b247-ec19-4e9d-b8f0-9636c4a9c9ca", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a578a3f9-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload (SantaStealer)", "timestamp": 1770543389, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543389, "uuid": "40568c83-7dfe-4a52-b2a9-d442a624b545", "comment": "Malware payload (SantaStealer)", "value": "a17dcf576c6fb8662aa0e4e97fc2ff48", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543389, "uuid": "33362fee-8c99-49ef-8775-2f03e95db98e", "comment": "Malware payload (SantaStealer)", "value": "0cf0039d23072103ce42cf3bdd8186b79a60c306c381f2990bdc91096ef45c48", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543389, "uuid": "f89ab2bd-d882-4915-9e27-bec9b45fef55", "value": "T119A6BFCAD16E44D2DC053FF5A8142AC75B2447328A7400283A6FBD899F775FEC05EE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543389, "uuid": "324a1c00-aa36-4e7a-8221-1322e723159c", "value": "fcc736760ffc18b2096bf8dc1a972ac5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543389, "uuid": "048e8785-2cc7-4692-aa35-e9d98b37fdc4", "value": "24576:to8xw386cXfJX+skIhw8XrS7aYGrIxzEfhYDpk6o3b9mov7JJLF4YGtdYJpzkEce:to8xwhEfrkIrWG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543389, "uuid": "d0911988-7fee-413f-b12d-6873be272bfa", "value": 10224302, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543389, "uuid": "70d5c190-f29e-4bd3-957b-c1ee2af4b3d1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac168b3a-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload (SantaStealer)", "timestamp": 1770543400, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543400, "uuid": "ab1e142e-85e3-490a-843f-55f0dee0d911", "comment": "Malware payload (SantaStealer)", "value": "f3413645618cef6c4d2bd2a9d71eb1a4", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543400, "uuid": "1677d5f4-defe-45c3-a366-270f61db182f", "comment": "Malware payload (SantaStealer)", "value": "586ff0ff4b5bb490e12ac550b69964f32a915000bfdff8fed93ca7d483330813", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543400, "uuid": "bd162484-9a4a-4f9c-9830-950106f309e7", "value": "T1B1A6CFCAD16E44D2DC053FF9A8142AC79B2447728A740028366FBD498F775FEC05EE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543400, "uuid": "357629d5-629f-4d85-9ec1-ff9b207514bd", "value": "fcc736760ffc18b2096bf8dc1a972ac5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543400, "uuid": "bee7bf5b-185f-43c9-997f-85a54118c9be", "value": "24576:jo8xwcCTjZc9/7tmUImJY79fPuS2FP3LuX8kpuj7iODa/Fz4JW5w4JvHrGl5nipl:jo8xwD6C1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543400, "uuid": "1128d407-1b13-4983-bdb4-e3d4ad71a2cd", "value": 10088777, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543400, "uuid": "12175757-51fc-4f5a-9980-fb272a2a42ba", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af6771f9-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload (ScarfaceStealer)", "timestamp": 1770543406, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543406, "uuid": "3bec75f9-1e12-4408-b369-be8f549f14b1", "comment": "Malware payload (ScarfaceStealer)", "value": "2ac838bd8fc39269c06c8df4cb55c340", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ScarfaceStealer", "colour": "#660BB4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543406, "uuid": "fc6e6145-cc67-47e8-ab51-a6ce29403465", "comment": "Malware payload (ScarfaceStealer)", "value": "bca70f1cf0487beef8eb88bf29d7ee39e732092e80f2fe61f891ae09eb408b54", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ScarfaceStealer", "colour": "#660BB4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543406, "uuid": "89862567-7f54-48d2-8f13-8c088c34624c", "value": "T121D623E959D5A2E8C4D34650328B43DA31D06A5D41FD4C2D3ADA3C027B11DAFA28EE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543406, "uuid": "5849fe8b-6891-4eef-814a-fd46da2989b0", "value": "8739de86cd836ae1476705562c069cc0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543406, "uuid": "e78cb998-9300-4263-8570-08d14f9bfe8b", "value": "393216:AiJdTAq+jtm9HNaS1/vFyG9J9gKM51OjL:AaFZ++RRvFy0d4wX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543406, "uuid": "addcd46b-8761-4b94-9630-417e7cc11b05", "value": 13072896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543406, "uuid": "50ec89e0-1ca3-4bff-9f6f-30bbee2c5842", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce25e1ee-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload (SalatStealer)", "timestamp": 1770543457, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543457, "uuid": "e275be03-b9cb-422d-8262-e30b8bc5c8f0", "comment": "Malware payload (SalatStealer)", "value": "66f0dfab7bcd24a6f3971653a9d876e3", "object_relation": "md5", "Tag": [ { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543457, "uuid": "b0f389dc-0587-4eac-8494-98e9222748c7", "comment": "Malware payload (SalatStealer)", "value": "71c960b8fab32934704b6d96cd790a0c9225f541874cfb785ba3552f59a5b2f6", "object_relation": "sha256", "Tag": [ { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543457, "uuid": "fcc7cec8-e3ea-4842-9c2e-e1ad5b993d04", "value": "T18DB31203419BF59ADEA472330045B91A56C3CC7B4265C3C3CDF8A96AAEDB769031F2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543457, "uuid": "64882a0e-49ac-42b0-8ca5-3a358fd081db", "value": "29b7be409741948aa4a747060a975a3a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543457, "uuid": "bc035e3a-c586-4cdb-bffd-3d6646a91b19", "value": "1536:js1rUm9p6F+7Nappu6GzUGrrFy8rvbxz7CV0TntDqGuiL322DBhIX8jQ35VL44DS:jsNUm/lB2azU2x9KODBdPnIyiLL7De", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543457, "uuid": "88ac4587-7026-49e5-b16f-9c5454ce25f1", "value": 114688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543457, "uuid": "1014c160-893b-461e-8fff-6534a4221cd3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce4370bf-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770543458, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543458, "uuid": "77d406dd-9fe8-402c-b77a-e1d2f6d00f01", "comment": "Malware payload (Mirai)", "value": "791434f9a5a9c931edc1c102d1eac3a0", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543458, "uuid": "98db5182-0a8c-474c-ae7e-21c6006933c0", "comment": "Malware payload (Mirai)", "value": "84ac20936a283f4d93c76f3025f4ad057b047077f8d90fe5f33b9f48ca75637a", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543458, "uuid": "21e1ae76-24ac-4035-a4d5-ff8a8e90bb17", "value": "T14A937B9FB6475890C8258BF00BC79B9E6E2333119E1789F73C1E2A7A19751DF5A063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543458, "uuid": "114536ad-570c-4305-b371-68fef0aeb85e", "value": "1536:d3L00zJaG0MfXeCei5fqv9A4ESDfpxg2/LW:Wg30GOdQfqlA4ECfpxg2q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543458, "uuid": "2be15a4c-4f53-4199-91c9-4ab516a4e58b", "value": 91764, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543458, "uuid": "355a31cf-4ad8-4290-9aee-71aa5efb7d8a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce4ffed9-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770543458, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543458, "uuid": "c9dc3dab-ee63-4c2c-b275-6ae425686237", "comment": "Malware payload (Mirai)", "value": "2aa91f548cb4da5dd87c1c4985cf7873", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543458, "uuid": "ec781cb4-0093-4723-be08-49bf32a86150", "comment": "Malware payload (Mirai)", "value": "83bf27ddd5ecad5e30f6d840762fe3ddd92b2c33456974a37f5211f1524efcf4", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543458, "uuid": "142eb93c-bf99-47a4-afae-9c347a11ad79", "value": "T1935302311901D80AFE8EB13C6F83A22F7098BEB5F7D5F8152AE4E105F76B5129439E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543458, "uuid": "f517b30e-c6ce-4fcf-bd11-0012af2cfe38", "value": "1536:ziz6ljAOKVOc7K8smk2XSF+CWm51AySq6HnTajzRE4GG10+yp:G61CrK8si6XBtl6HnTajAvp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543458, "uuid": "6db9e660-287c-4ee2-886b-61f5d0c691bb", "value": 62888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543458, "uuid": "ce346ca3-d610-4ac9-b040-ae239c3e3f12", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce548279-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770543458, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543458, "uuid": "3c9a4189-ab2a-4215-944a-cabae566f3c4", "comment": "Malware payload", "value": "145801a362c7c53716e5a914f2040c3d", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543458, "uuid": "a6c9bdf7-d677-40f5-a66d-96339b00f190", "comment": "Malware payload", "value": "d7d8e8816f422f879272dd1546ae3d9563c968a1e04c4983df0a25414d446eec", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543458, "uuid": "62928c39-ae96-4d4c-94c5-57b8db5c256c", "value": "T17FC3E946BD418F13C5C721F7FB9E42983A1A6F6DD6FB3202A925BFA037464D60E362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543458, "uuid": "907271f4-3b38-4c7c-a709-04cd175c4445", "value": "1536:23hOlF7WiN7z4R2AsWK4VjzDTdqaVt+neHYXyURXl29wwywHq2V0ZHWmh/Al1wOd:23WNf4Rw4dDhqaunYYXDDRKeM3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543458, "uuid": "eccf7518-1fa1-4067-a74e-a69758389375", "value": 126264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543458, "uuid": "255af7c5-3001-4a80-8a0a-af80c8eeb711", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce559d27-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770543458, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543458, "uuid": "31a82cba-65cd-4a98-8f8a-e1c6e312ec4b", "comment": "Malware payload (Mirai)", "value": "a34eee769c1c58da5e0fce6e1626b3ef", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543458, "uuid": "e86dc961-0641-42e6-a081-d3112d8313df", "comment": "Malware payload (Mirai)", "value": "ce695c14121cf8fd9ac11a9234c7a679a60ebe80375297fb83b54332ab368d1d", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543458, "uuid": "47ba06d5-e0af-4b34-926c-1f08295f5d1a", "value": "T1A4F2F13857300FA8D6EBD37DE66A26A440D5D28B5B0813C7FB896EE3B5E385C10797", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543458, "uuid": "1b46a22b-b718-4aca-a1f9-25b093b117a0", "value": "768:ZTmqd3WlIJpsj3CIVUfBwTQj3kbSHwe5a+Mo1/UwoIfng4af:ZTNM6pO3TVUpBkbMlj3BHfng4af", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543458, "uuid": "3499a363-688d-4eb7-89ae-7df386b3d078", "value": 35200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543458, "uuid": "068f8596-4407-47fc-a396-cc884e62e114", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce611b7e-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770543458, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543458, "uuid": "b0842aef-a9ce-49b6-9c25-21cbe095d5d6", "comment": "Malware payload (Mirai)", "value": "5a1f9e4618252c5838028b9c01d4a23b", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543458, "uuid": "31e678f3-881d-4e69-b895-2f0f7cb7d836", "comment": "Malware payload (Mirai)", "value": "2a9814bcb3e9fa5f7527842b1b0686e072b14019f380017959301750b67fa742", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543458, "uuid": "e041cb75-a11a-4ad9-80f7-f33f8716ddbd", "value": "T13D5301731A734884D8262A3AE8370479EB130F659905ED3F1660D53F07F9B13F60A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543458, "uuid": "244cffb2-52bb-47a2-a79e-c18d78a6b23b", "value": "1536:NCIcj376RbhKwHvJgqVoqvq5OVAqOLLQO+3QXXfteMRVrbdLV:NCJjr+HxgpIdeqOLLQpQXVeMRVrRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543458, "uuid": "6718ea71-c3ab-41b4-af92-1b08a9916664", "value": 63728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543458, "uuid": "bb8a3a43-1c24-41a5-8c65-f44d72e3fc48", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce652d99-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770543458, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543458, "uuid": "6e70bbdf-1192-4533-bc1d-4115f5822200", "comment": "Malware payload (Mirai)", "value": "aa1e2ea2dee1b9c2392bf8771f5fd38f", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543458, "uuid": "974d0ac3-ebc7-4661-9932-e0192d630f77", "comment": "Malware payload (Mirai)", "value": "5ca0e57dced1ee9077fbf4d8e57d4db2f82db07063c615946555cccbb99ae77b", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543458, "uuid": "23c6ab72-5e12-4aec-bbcf-a2c2c5e45291", "value": "T18713F1690D11B5A4D0ECEDB17D71908E4331AAB5AA7B038007F6FA4980F2187F43D2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543458, "uuid": "5b6c13ea-d0c5-4369-b968-7885d472bec1", "value": "768:ac3VEda5/yVNY4N/aD8+8To8MXUMW7q9rTeowwKcd0s2DVpPk6E3YFI3g3+QWP:a25iTN0nWerKolKcys2k6E/g3+b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543458, "uuid": "13067434-2b33-4c25-9e15-ac838f43db2c", "value": 44132, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543458, "uuid": "fa303993-d090-49bb-8aa2-dddc67c5dee5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce6cf95a-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770543458, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543458, "uuid": "d329acc6-87b5-4686-ad61-3d1ec5933aca", "comment": "Malware payload (Mirai)", "value": "ca0684ead1e21ccbbd97d8ee44740c00", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543458, "uuid": "e680b592-b94e-4eb9-ab12-9790f4dc01ed", "comment": "Malware payload (Mirai)", "value": "485152f88c0248f537403372770292ed9510e0d0681f14e1e16f24b21d6d613c", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543458, "uuid": "190a1f16-8adc-49be-9101-1bf137626e36", "value": "T1D353F16D4A20B4D0D46EEE322C2199CD0770ADB5EAAB23C057BAF60544F5183F87D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543458, "uuid": "14151feb-a73d-4b9d-a4db-d094e320d948", "value": "1536:e25iTN0nWerKolKcys2k6E/g3+xgwMX97u/NL0p:p50N8DlB23Eowg7Rk0p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543458, "uuid": "6dc2c2ee-b016-4462-818a-b852e3fc0abe", "value": 65848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543458, "uuid": "97d50c64-f6b2-4e8e-b4fd-2668a62a2980", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce6d294b-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770543458, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543458, "uuid": "ada24b31-d43a-4f26-9c56-7da4374889a9", "comment": "Malware payload (Mirai)", "value": "182a6ddc172b27e8ccef04ae377117f7", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543458, "uuid": "1693bafc-3724-4f1a-8246-8eab77cdc0b7", "comment": "Malware payload (Mirai)", "value": "d0fb0e06ca2c9cac0bb9b2d6bbb128ef4584866f0b1f1ebe1e2b839783902294", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543458, "uuid": "8aa708d8-0378-477b-871c-81fb661c8075", "value": "T1764302C41961D80FCC73F5343749DC8A1E5C0DFD0EE67E892BA50CCAC9A92686950A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543458, "uuid": "5fde8632-620d-4d9d-aa45-c9ecf3f32d07", "value": "768:9ki7WbmvcdhvQVRRCK1nOY5LSwg1dcMlH4h/1TTQjr09aKWtZ/pGw2Nuvr8:9ltchKz5LSwWcOs1/Q/0tKRGH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543458, "uuid": "9eba6ab6-87eb-4730-8f45-24fbd0b3a97b", "value": 56028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543458, "uuid": "d3187d4f-7d25-4551-a9c9-6d1467a3e2e6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce6d3698-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770543458, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543458, "uuid": "bb6afba5-170e-44bb-b210-1248dbcfe42b", "comment": "Malware payload", "value": "99fb80e4ed9fea418cfc36c691be91ad", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543458, "uuid": "4fba2ae5-c044-4914-916a-22b534e312bf", "comment": "Malware payload", "value": "1ad04f2fd4122d725c00e6770e3902627ec09aaadbac439ded1f3ced4cd14f70", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543458, "uuid": "ffcc8cfb-9dcc-4f72-8418-3b04854dd9ff", "value": "T169D3E846FD418F13C5C721F7FB9E42983A1A6F6DD6FB32029925BFA037864D60A362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543458, "uuid": "2a56592d-be31-4d71-951f-d62596fe007b", "value": "1536:l/zPvclV7WfbPUmg2rsx4VfwSOTdhhggJsioA6lLAwywCmM2YlSARV4CtD3ZROXF:lbPjbMmgb4mfRhxubATtDeRz3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543458, "uuid": "d8f827df-3485-44c1-91d6-c7a86537396d", "value": 130360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543458, "uuid": "f3646123-b13e-4f1c-af0a-c08cbad2b88c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce6ff606-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770543458, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543458, "uuid": "624cc08f-cbc6-4b03-befc-566d73ec0308", "comment": "Malware payload", "value": "dea655de3732446856c75c7d912e14b7", "object_relation": "md5", "Tag": [ { "name": "pe", "colour": "#8df5e8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543458, "uuid": "fae483ab-a73b-4086-aeee-ed63d6a03e67", "comment": "Malware payload", "value": "80f959b0969f8680c9b5ecc55cef44d7c208435f10918fb7412fc95beabab06a", "object_relation": "sha256", "Tag": [ { "name": "pe", "colour": "#8df5e8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543458, "uuid": "6fa80d46-ae23-40cb-b31e-634338c752fb", "value": "T153649E127685D431D4A115321735CBBA5A7DBA304FA249CF63C82ABDAF306C2A731F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543458, "uuid": "bd6bdc76-de05-4b0f-a8bd-4029346f3a9e", "value": "241b9956a177b0bbbcb5aa848dbabddf", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543458, "uuid": "7d580552-05fa-4ce7-aa85-4124a63e7ea6", "value": "6144:7AZLsyb1zVerDHm/y1eJO5gEyVBvDE6Q/0tF6DGUO:8G6zVeXm/y1xq5BbHtF6o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543458, "uuid": "8cec55c6-8b85-4681-994d-d76b1b6226ce", "value": 334336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543458, "uuid": "7d0e1764-391d-4dfc-80db-1c2dfceac4de", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce7ec14f-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770543458, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543458, "uuid": "afcbbdd7-09b2-4fff-88ac-cd81c33050b8", "comment": "Malware payload", "value": "4b3e69ca9fb17ddd6fbfa575e1a33292", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543458, "uuid": "33d36705-9f99-4beb-8ca7-26972d6d7119", "comment": "Malware payload", "value": "d4ad4681863eca87acffda22218a845e9813b9b550240a2a0c5b76c56a3f778e", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543458, "uuid": "7cde0037-d1af-486c-891d-af824fdc0d61", "value": "T1483633BAC42780F3E156CB3FA5B0E54AB15D1E2FCA9D4A04DA4EC49731783A607E77", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543458, "uuid": "817d84f9-2b7d-4094-9f35-a048b3241e56", "value": "6ed4f5f04d62b18d96b26d6db7c18840", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543458, "uuid": "69459908-0251-478c-ad24-7ac75d0ce216", "value": "98304:0lcOjeKTr+2WXmi1/l5JdgZ3+esaqOJ9o0haLl4lB9EbtuE1JrZLVOOX/PU90YQ:lOjjf9M1zO3XsqnhHtWp1rLVnnUn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543458, "uuid": "0485e0c2-4e63-432f-8a5b-c4e475d3bef0", "value": 5042176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543458, "uuid": "ff8427f5-c280-4d62-b166-df48d4f14f93", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dfc3bba6-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770543487, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543487, "uuid": "62081b2a-ac44-4668-831c-90755a439df8", "comment": "Malware payload (Mirai)", "value": "c371fc5879a5e4c6af815b86219f8717", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543487, "uuid": "acfe7635-c167-447e-86ec-ad204225c711", "comment": "Malware payload (Mirai)", "value": "3eaec57d3927901d559b6664857c35c3cd51acb6711cecd29425197194e35917", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543487, "uuid": "3c02ae60-1482-4aa0-9dc0-848719b977cc", "value": "T192D2E0FEE9A2D1DFC1B8C2FBC05B629D9E5236F3022990537F28607099F6314A6391", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543487, "uuid": "1c63fac5-b7d0-4292-8e8b-f432dea53d49", "value": "768:7DQbUeiQ0ZBkylbP9r6TcErGgi2uBnNxPHBRTIYDvSjVVWkbHk:7GUeiBZBkaTt6/G5PPHBR07jikbHk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543487, "uuid": "a004f54d-321a-4323-9838-eb75cb67f1dc", "value": 29904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543487, "uuid": "066390c7-4d1c-467b-9a67-efc42d9e43ec", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dfccc465-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770543487, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543487, "uuid": "b03267b5-c816-4159-b640-2fc8e5409b7a", "comment": "Malware payload (Mirai)", "value": "e598133b4f3130e5a289aecd4083ac2e", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543487, "uuid": "6a1b24e4-c8bf-4a89-babd-4f267e4aa02e", "comment": "Malware payload (Mirai)", "value": "bc67353850c90a583fce584223a154a90916dd9933d7f4d7bfd856f0cd7f16ff", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543487, "uuid": "e2d3fe33-cbed-41a1-8d28-36d09840405a", "value": "T1D1F2F1510FD827B1D7A1B7BA0ACC76755413FE7D000492945F78A9AA323225EE2F4E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543487, "uuid": "b4b5b51b-8989-47bb-b87f-e9446d0dbbac", "value": "768:qFtN9dAH74yAAYdfJyPR8FJcZrbqv7eVgA8zhp+zx45/sTpHSH5USk04E:qFt/dG4BpxJyyFJyrbcygThp5EtyHipE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543487, "uuid": "91760f66-ae6d-4728-8155-c21fefbe99dd", "value": 34596, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543487, "uuid": "4c142c1b-064d-4009-b13f-52d7f6c3d5b8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dfdbaa4c-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770543487, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543487, "uuid": "7744956d-49c4-4c6f-8cea-a3914851497e", "comment": "Malware payload (Mirai)", "value": "7328746d397d52deaac4c11e9a55aa62", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543487, "uuid": "7ccef9f6-fa43-4489-aa8f-1185424b0f68", "comment": "Malware payload (Mirai)", "value": "133e304ef1cdc962dd7e46aaa1fcde0f2853a048478f1ee0134675a239e8546a", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543487, "uuid": "75720a07-7624-4652-9f1f-02e480aeff4d", "value": "T192432922BE624F27C4C765F662F30A21B6B5AB5F2CB84A167D716DC8AF146C031437", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543487, "uuid": "803cd55e-c85b-468c-996f-3a52e69fe1aa", "value": "768:ZMloJnDHUzS3KMgHXO+65Va6BIAhC1tPImeeee7:6loFDHUzS3Kvr65KtPheeee7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543487, "uuid": "bb75578f-bdc6-4aab-adaf-31200173996c", "value": 56352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543487, "uuid": "e06cdab3-17d2-45ee-baca-754c19b0aa29", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dfdc7404-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770543487, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543487, "uuid": "25d27d34-b52b-4571-ab2b-1b738e70839b", "comment": "Malware payload (Mirai)", "value": "5aa22fd5278f821c99ad1a0e2b9ddd67", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543487, "uuid": "bc150f2d-151c-4004-8428-ba04fcec9357", "comment": "Malware payload (Mirai)", "value": "78d452d7d1fa0d63af95a63df9f72e896ba56715c048891dffa7b0fc5206003b", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543487, "uuid": "5a5571c6-671c-4318-8e21-6099ff47b6fd", "value": "T1575302EE23FD0E76DAC87AB5826414ADA63E255306CD302E872079DB9B491C611B4F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543487, "uuid": "830c8111-3d1f-4821-829a-bf4c5cebf72d", "value": "1536:LTXwFwHTq6lxt86jAld3bYUdWMVSa2U04Cqcdl+T6rlsBEzC:LTAGGwnUYUdWvaTPCqFGpsme", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543487, "uuid": "df1866be-4dba-43ab-9b7a-4fd0fef6ca7a", "value": 63444, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543487, "uuid": "f25d1c8a-fe1c-4155-9ec0-a6e245eb7463", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dfde16f0-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770543487, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543487, "uuid": "3b4f50b8-e649-4d07-9709-1121ab70d5d4", "comment": "Malware payload (Mirai)", "value": "88e12c49af3810f3696d3e1aa50cc6a5", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543487, "uuid": "9096d0b6-cbcd-4cf8-9be6-49b90686fdf3", "comment": "Malware payload (Mirai)", "value": "33af3ceef6a3dbf42c4edd5155287224d4e3f5f4fcd27f0826059b05cbc6c4ed", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543487, "uuid": "832e25b2-8769-4a62-9f32-2c2b3f781c55", "value": "T19533027FE256B4A7CC26437592BF50CDB6CF13DA9A1010189BF0BD2764619E21D487", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543487, "uuid": "2594f1b9-5858-43de-af67-55be7c54bfbc", "value": "1536:LjzxTYq+N/Y+tY+fmRYtZf7tJcGn9l0aWL/xPQltHA:Ljzx95gqsZfpJ97Sxqg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543487, "uuid": "dd04dc8b-9a27-4413-ae4f-4d402fa3556c", "value": 53976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543487, "uuid": "218d5db8-4565-4b7c-8a90-5840b430ae0c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dfe10df5-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770543487, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543487, "uuid": "b0a995ba-7b1d-4d9c-ae78-5b862262d486", "comment": "Malware payload (Mirai)", "value": "794ae72bbc6a3c274a0c0bfbe678a316", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543487, "uuid": "cf36c4ec-32df-4fad-8549-e1fe249acb32", "comment": "Malware payload (Mirai)", "value": "6ef34129b0386802abb6b2be3d3cd4bdb10416af68d3d1de5695e212c29412f2", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543487, "uuid": "1d084ad8-48a4-4c28-9115-641e5d221f9c", "value": "T1E94302A51E20F8A4CA9C5578B694DFD50EC48FFE52B82E4E99E04F4B2940F23741A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543487, "uuid": "6b2d016e-7f47-4cbd-834e-4b3ab9796eae", "value": "768:Qarfo+9krwZZnuba7h2z3xdPYqszmM/LaRTNq3U563hmIqRBN/7p/DwizvrY:Qajx+rwfn3h2zxVKHLaRBt563hJqV/7C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543487, "uuid": "4c27df7a-c9d2-4eef-80e9-14762b502c7d", "value": 55936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543487, "uuid": "bcb589e0-5914-4b5d-83b0-0a636d3fe8bf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dfe752d2-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770543487, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543487, "uuid": "7085bc91-9563-4e11-b295-1c9002e0b124", "comment": "Malware payload (Mirai)", "value": "824a6da4235b0a5bc84458e72c34ecb2", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543487, "uuid": "18d4ff95-2f6e-4397-9fe0-783e51115f65", "comment": "Malware payload (Mirai)", "value": "e3e48afaff2572b91c8a3d7b211f258648bb90b8938c0d3d913f49540a1baad3", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543487, "uuid": "89d1d935-6bd6-49c5-bfbb-2be6e8395fe6", "value": "T13FE3E7C7FA00CFBBF40BE776449308157530BFA648520A77726779AAED3A0D42563E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543487, "uuid": "41e950b8-9c52-42e8-9cb6-3d1531dc5692", "value": "3072:qdu4oewLGGj4RHDFsZQLmubpV9jbiHLONJNEyG/jWD:Z4RHDaZJubeL5yGqD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543487, "uuid": "fd3f63e8-77a8-45be-9f46-1e2df2677eb5", "value": 147736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543487, "uuid": "76624f2a-8d3c-44ee-9215-e3caf96a14a8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dff4c293-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770543487, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543487, "uuid": "f3a0609a-9f58-4673-a47b-8beb1c9d1fe8", "comment": "Malware payload (Mirai)", "value": "81ff17c7a979fda000252810e065d70c", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543487, "uuid": "c367f20a-8c27-4a11-853f-d8e8832a1f83", "comment": "Malware payload (Mirai)", "value": "796fded1274e4690addca1952cb565e152fa8a77804d4f720d5e32f32ea13adb", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543487, "uuid": "25508703-acb6-4456-9278-68dc8cbd1639", "value": "T177B30663DD169F5AC116E0F0A6F68E741B43BC6689470FFAA572EAE44243CCCB5053", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543487, "uuid": "91774157-6d50-4594-8e3f-3a866c2aef88", "value": "3072:iGc2ilxfzu2TRNnsBLo9NH7WJIu78C52:I2ilxK2TRNAcLHqJl7f52", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770543487, "uuid": "27088522-e0bd-4bd8-8a50-a0394ac2291a", "value": 114040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543487, "uuid": "77854234-fcc8-4353-9a1e-be93d4e20815", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "abb8a43b-04d5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770545118, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770545118, "uuid": "91d61860-9376-4891-bfe6-d702bb9869b9", "comment": "Malware payload (Mirai)", "value": "305495e9dc5bae2c8eb77eb3fd51d04c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770545118, "uuid": "d1002187-d6ad-463a-aef5-57dc6d9fae5a", "comment": "Malware payload (Mirai)", "value": "725e13862af947197344fcb7ab345488a74762b936e841237df7f433fcbc31d8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770545118, "uuid": "7423fce6-0e22-4976-aa4a-61bc6d37b0f3", "value": "T11AD2E1B84095ED48D6FD14301CFEB3FF6828F65E5A2065A16EF4362FC91376138EA1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770545118, "uuid": "f3078d68-03fc-4465-a3f8-30fa87244572", "value": "768:ylPK4ZSllz9kihGvXmRlpEApBwoCnbcuyD7UM7b:ylS4Uz9kih+oQAT0nouy8o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770545118, "uuid": "668ce178-b900-4de7-a173-196bd6343179", "value": 28504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770545118, "uuid": "4fa29aa2-b603-4019-b289-2f39190c16e2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "abc5fde4-04d5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770545118, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770545118, "uuid": "266b7725-ae65-4b07-84f6-95db3df841b9", "comment": "Malware payload (Mirai)", "value": "1c617a66116e63664d09af3e90f81c72", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770545118, "uuid": "37e7575a-5d77-46db-b7be-117863b70444", "comment": "Malware payload (Mirai)", "value": "a4eec9df7699817f8b3ee6241d863b49c1c7bf727b51ea777962b6c5c42ddf99", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770545118, "uuid": "2707d251-3367-4963-88a3-b55b7b303e74", "value": "T1B86328827880AA26CBC0577BFA5F108E331457D8E1DAB3479C191FA076CAD1F0D6B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770545118, "uuid": "8ceb17eb-c996-49c1-93ed-3d1946b6de63", "value": "1536:dRqCA7shu+z506mEu82prPw+70w4Y8jkMhW65g8Yn:dRqG0pjp70zY8jLr5k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770545118, "uuid": "a0a502d6-c7d9-48ba-abe9-344b1d1260b9", "value": 69452, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770545118, "uuid": "fc276d47-8c0c-4b78-b585-75e1f6e2ef52", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "abc64664-04d5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770545118, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770545118, "uuid": "28a864b6-1213-4f64-8538-7ecfda0a6809", "comment": "Malware payload (Mirai)", "value": "e6d1f9243303bde6d7090df21cf6567a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770545118, "uuid": "fbafbb0f-8504-43e8-b5c2-68e9a0c1ea98", "comment": "Malware payload (Mirai)", "value": "7dcbe81f748cc63db9d293c2dedebb86a9fd2299d9bd50043437c5a75107a64b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770545118, "uuid": "de7891c1-d453-43c2-88be-98d06bec0005", "value": "T16043F7817881AA39C7C0577BEAAF104E3314A7DCE0DA7747CC180FA176DA91B0D67B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770545118, "uuid": "3b0edf29-4ffa-45d7-a9a8-fcc3056c1dbd", "value": "1536:bmXou1DAd2Gmj+4jbZ92qK0zlKpg7MEhWm5uN:bm5jbZQ0z8pg7vD5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770545118, "uuid": "2116fe1f-af6b-45be-82f0-400632f85c68", "value": 60304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770545118, "uuid": "e5f36cd7-32ee-4bb9-b1b3-3761fb1280f5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "abcc169f-04d5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770545118, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770545118, "uuid": "00b050ad-48e4-4105-aaf5-c5295350502e", "comment": "Malware payload (Mirai)", "value": "324a3a11b82a4b906e376b75d4211349", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770545118, "uuid": "8bd0ffe8-dbdd-4ab5-ac12-fe82a001deb7", "comment": "Malware payload (Mirai)", "value": "32de63a0ea3a16d33fa478b59d9ac4ca503eabff97a35c5a4d9fa6e841479c28", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770545118, "uuid": "4b3ea1dc-d9bf-4a5e-8132-fa10f1e7ad78", "value": "T18553026AC2666B7BC8F566B0817A474297DBCF34E15C3911F10407066DD3EE2BAF82", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770545118, "uuid": "d6e16418-cfd5-4e1e-8a4c-6d32df2b6e83", "value": "1536:2foNsJMqqVSq8ykXjq8vZ79BVGYTBfJEcKOPa9E:moNsJXUSXXGqB9BltD57", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770545118, "uuid": "f4c1d948-0d27-442a-8f76-4a4e6781dfe8", "value": 65616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770545118, "uuid": "d29ff87d-78fc-4162-a861-85d55e805ff0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac057cde-04d5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770545118, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770545118, "uuid": "3c218194-c02f-4e61-9602-79460acdfa91", "comment": "Malware payload (Mirai)", "value": "c58b373a70f9a4d9b878ec185192ac91", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770545118, "uuid": "430d1078-e23c-40b4-a678-13c4cb474ddd", "comment": "Malware payload (Mirai)", "value": "824247c83d959b72bf2287af03ea5a96c496ff7eb077596e4d363e3e04994ced", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770545118, "uuid": "5bda62a4-5957-4cd8-9f41-cc5a0fe91f83", "value": "T161C2D084F185CD01EAEB24F13D48D6DBBBD46B2E29668EC16BA052C56F5C3738345D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770545118, "uuid": "6b1d466e-34a7-4eaf-89bb-229a8d63ae27", "value": "768:1VdafO76jpmNJJKehmA7trpfIX9KeA7P624uVcqgw0retF:dam+AnKehPRa9aX4u+qgw0rI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770545118, "uuid": "c643a363-c7f7-4251-a12b-0302f272689a", "value": 27556, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770545118, "uuid": "f8fc8ba7-c73b-406a-9dd2-37a233fda5e2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac114119-04d5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770545118, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770545118, "uuid": "17e3549b-c124-4c8a-8589-a92bcfa75e31", "comment": "Malware payload (Mirai)", "value": "a4c45c1919b5eee88f5590be60dc490e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770545118, "uuid": "360930a9-b620-4b2c-9500-13b4a6110a8c", "comment": "Malware payload (Mirai)", "value": "5408fbe38b20d2a90df7f4da3f41224a7769ea9ed5ca00442c344afb64cc8306", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770545118, "uuid": "53047065-f328-4750-9ba8-e38aed72b965", "value": "T196536EC6B4119E7DF5CBE7BE84224D0EB821722150531B27BB6FFD83BD721A48946E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770545118, "uuid": "e4b22f77-14ac-46df-88d7-ea2f6b12f4c7", "value": "1536:kPqRg0FGTbSX5xpLepSGorsF7QhOx2X/ZOqc/yA8o:p5VHV8I9cKi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770545118, "uuid": "74d48471-c24e-4c6c-b13f-19fc8bab14cb", "value": 66508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770545118, "uuid": "c74d8b83-24ae-4d88-9917-7c9a3d287105", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac160499-04d5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770545118, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770545118, "uuid": "b74e265b-5133-4743-a87f-dc5cdbda1ddb", "comment": "Malware payload (Mirai)", "value": "842678d725534996caf0f54946dffd84", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770545118, "uuid": "db26e829-d768-464d-bbb1-900a14fd067b", "comment": "Malware payload (Mirai)", "value": "39c58becb00768a1fc5b97703ad0f6e9277d266d50d6dfa182e6a028af5ec64a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770545118, "uuid": "0ee20f10-3561-4bd0-a19d-62eacb901ea8", "value": "T105735D24A9792E26C0D4A17B61FB8321F2F6230E25B0965D7C760F8FFF2464468162", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770545118, "uuid": "a2278172-683b-4d76-864b-83ec3d40e250", "value": "1536:5ms+geQfvznpCR8ee84cNsAUiAvFI7IlNnws8R:YwfdNu4cmZvFqI3w7R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770545118, "uuid": "202d2a38-94d0-4f08-81fa-994b0a4c721a", "value": 74752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770545118, "uuid": "e228108c-0978-4d0d-beb0-2b351d6ef239", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac23ea21-04d5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770545118, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770545118, "uuid": "7828ecf5-a233-4160-9f16-89e8b8e1eee3", "comment": "Malware payload (Mirai)", "value": "6bcbc7f849f6a86d923a9b7c12a70be2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770545118, "uuid": "87c4fa48-63a7-4e49-a94d-3d06851cfecd", "comment": "Malware payload (Mirai)", "value": "96a33a462b4026fa48a0bf747fa37915c04d4bce7f9052effe1767559bf6fa24", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770545118, "uuid": "7f3adac4-e805-4a38-a8f3-a605ba475eb2", "value": "T1F2D2E12EE0DBF253C88C4D3CF9DA5A81E585B0403159176F439D8C583EA7F0FE9AA0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770545118, "uuid": "5cfdcf00-6bb8-4f69-a107-b2ed2debdee0", "value": "768:35vYZs0t2NPXxYk38qqiEViwzxJpIjVYwXf9aoN32LWWBQt:rPharifjWwPxN32RQt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770545118, "uuid": "a86e8b44-ff55-496c-8c28-bf8df845b239", "value": 30616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770545118, "uuid": "a5844f55-e490-4a62-9c98-dd9373dc6796", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac5146d5-04d5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770545119, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770545119, "uuid": "e077e476-3b02-4d3d-a7e7-079c4c42e40e", "comment": "Malware payload (Mirai)", "value": "a439ce7c9ffd7e2abe7d71f194e57167", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770545119, "uuid": "9c8d6998-c2a5-45b1-9f92-58aa3ef6915c", "comment": "Malware payload (Mirai)", "value": "7754516998ed27fc3572da4127e51c381f0ceba586e0b32da846c14fd604cb00", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770545119, "uuid": "9ae0ba2b-5e7a-4b9e-89f2-c8323c72a956", "value": "T1ED539FA5C5ACAE58CB1441B8B654CD398723F408A5A76EFBD646C796800BEFCF0187", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770545119, "uuid": "832b9b0d-24e2-4669-8583-2c8843060e0d", "value": "1536:PaAtVnz1/mUUNztiYmW6ihiYLTofs3wfpWIDNEJ7JC7:P/tVz1eUUfwN0T0f+whWONEJ7J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770545119, "uuid": "0aa0f867-ff1f-4c70-a57a-db8cea136137", "value": 63772, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770545119, "uuid": "993af8ed-7251-484f-927b-672bca990a34", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0feef4c-04d5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770545180, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770545180, "uuid": "31e0e788-9668-45a0-90bc-306ac7042cab", "comment": "Malware payload (Mirai)", "value": "8dd343e8887fef27468abb512c4baaf9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770545180, "uuid": "430cc292-c9a1-4773-bab8-277a3c307da3", "comment": "Malware payload (Mirai)", "value": "3a9659465e555c2e7d6ded5e96b14301a7a1fadc539ea6a32383db5250cd5778", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770545180, "uuid": "229ff362-3e86-4495-86fb-b1141caf887d", "value": "T13DE2F293C391B452EEBC25F1F53F82C7667D4A6CD77330B2250566186AA64436F3C4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770545180, "uuid": "563357fe-1013-4816-a5df-73b2e4273aab", "value": "768:xoiWiO031vpAPbrVWZK3XVGxm9XHD3U03wf7I+:xorm1vpALgUJyfv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770545180, "uuid": "9cc687dc-8828-44f0-ab47-aaf738c6838f", "value": 33156, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770545180, "uuid": "13d32157-4857-4639-9910-ec8bab37c39b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2a7a32a-04d5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770545183, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770545183, "uuid": "8a027206-e7e2-45d3-91b8-b11041bcf0f9", "comment": "Malware payload (Mirai)", "value": "1ba4d4f3d521938d219fa18f03e844dd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770545183, "uuid": "8e1d9448-2953-41b2-a121-67cc74bf2dac", "comment": "Malware payload (Mirai)", "value": "ee98b5fd6ee15fe38e33baf14028d87592a86b3efa666d411bc283214b34dac2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770545183, "uuid": "bd368865-50d0-4995-8987-1505d5146d0f", "value": "T15ED2E011C148A705F46F01702C97EEA50C18C9185BA9BAF163A8F8AFD469B3F7908D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770545183, "uuid": "a4665f02-d92c-4a9c-a04d-95caa37f535e", "value": "768:8h/f7b26ozVkSzYzoE5Qdn0SOknbcuyD7UM7j:8hX7i6ozlzCoOQd0Unouy8g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770545183, "uuid": "0493343f-65d6-4c99-b725-c84fbbfba997", "value": 29844, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770545183, "uuid": "6e93f699-26ff-4350-9930-7ae97bd49839", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19856112-04e1-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770550026, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770550026, "uuid": "052ea026-4b59-4cf6-93b3-dff7a71b0627", "comment": "Malware payload", "value": "b7cf87d6fd2b06414d597a2fc2b2bbb2", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770550026, "uuid": "350e650d-dbdc-4b2c-bf59-29170951beaf", "comment": "Malware payload", "value": "f79e700f76789bbcbc3c7628e81138a5b6f48421bef3335270718027174b564c", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770550026, "uuid": "15fdbba8-6a5f-49e7-97cc-9d9bad59f8e1", "value": "T1D983024F04F9F576336111268C8042297D89626CD2AE37FF8BA710FECDD0A662C67B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770550026, "uuid": "6ee40d05-433f-4daf-8ec0-73566f1d7dbe", "value": "1536:AJVMfulDyVXt+AtYGhN4y7sxml/0TogJ9v59RNiSAWBLyS9kI:A5DyVXt+AtBYy7s0coShz5d9kI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770550026, "uuid": "d4670412-171a-48c6-9544-870f51df4b73", "value": 87296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770550026, "uuid": "38f7147b-81e3-4efb-bf1d-db6ee4038844", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "50d7b75e-04e1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770550119, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770550119, "uuid": "ec378e3e-a85e-45dd-a998-3e774804bcc0", "comment": "Malware payload (Mirai)", "value": "2b1a34b3997f71fe1ca6f1d42eaaf542", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770550119, "uuid": "eccca023-4842-4075-a713-d88ed3c3a716", "comment": "Malware payload (Mirai)", "value": "77f7a2c1ab819790262ecca829e7413da2a6f4a92e57e4b762478d62d4951f5c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770550119, "uuid": "9aa3b077-0002-4eba-aeb2-ee0227d35320", "value": "T1B7734CC6E753ECF4E92209722177A7624673F43B1028DA83CFA97A36DD12602B6473", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770550119, "uuid": "d97b1542-aea5-4e1f-b6f0-a349915deccc", "value": "1536:Gin+6Dd9wH3p8XKWRS0pI/9T3zLHEyW7S+IAp6aOJ4SfAl6H6DLj:f+6Dd9wH3pYKWRRpIBjLkl7S0p8JxYlh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770550119, "uuid": "500613fd-ce55-4cfa-ada9-af555b670b25", "value": 78932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770550119, "uuid": "bb01b31e-a780-4f4c-b9b3-5e72146df6d7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "42db2bd6-04e4-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770551384, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770551384, "uuid": "61876d44-90fd-45fe-bcef-7798b0454cd8", "comment": "Malware payload (Mirai)", "value": "a1b438130b835b26116ce35a9fe898db", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770551384, "uuid": "106c44ff-e86e-42fa-b1c4-e7734284d2ce", "comment": "Malware payload (Mirai)", "value": "b6d533b6b6156624e897e30a927b874830d136be755f9338782d77c98320f678", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770551384, "uuid": "835d35fd-8481-4ec5-8124-36341cccfa9d", "value": "T100C3BE97FB4B04B1C8614AF407CB9F9E6A736111CD5B88F7AC0E74BB1A791DB09063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770551384, "uuid": "21291406-a75a-4a18-80e3-211f03dd18e5", "value": "1536:R7KHemOmpa0mm0OSxQRzjkz/yl/+/lNTgeI5hOxOdJt4grW/LWm:R+1O4a0fz4zQ/+/vgeI5hXmgiq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770551384, "uuid": "5c2c0e12-c2a5-45c7-93db-57b1a99f6c48", "value": 124188, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770551384, "uuid": "975220f5-4d54-44c1-aed6-0830f5d51a15", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aaf96a81-04e6-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770552418, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770552418, "uuid": "3016759a-ea56-4932-bf15-9a59e82dd7a7", "comment": "Malware payload", "value": "22731c89cedc609b7a5174ca5f00bbcd", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770552418, "uuid": "b71ad299-c8a6-4311-b1e5-f0ffb3e45e28", "comment": "Malware payload", "value": "d5de6d791fcebbb4a5b58b3547f2e675c88f3c8de10c744b8e2d7f50ac105593", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770552418, "uuid": "bff7dc32-bc0b-4e0f-81f4-f2571b9b5919", "value": "T1E803E1536782B6FCDC39D97689E70281D31F38055B2F97BE08A825792C76381AF23B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770552418, "uuid": "956aad12-7ac5-4c46-a213-8dc631e6c077", "value": "4b2df774f65211b4962a056c4da67248", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770552418, "uuid": "85a33c08-4b22-440c-b626-a044a936c770", "value": "768:enyJHubAUnDU+QA7EhPdkvSe5vSQE3gncL7KgXLbKwwVmusqhzLYSAH:eoObBZQA7Ehlkvh0bgcLGobKwwSAiH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770552418, "uuid": "25a7cede-5cba-42d6-906d-50cd32806b1c", "value": 37888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770552418, "uuid": "7d064cef-dc8a-44d4-8dc7-0abcee27f5c0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4068c8cf-04e7-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770552668, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770552668, "uuid": "9dc2a150-5deb-4232-8685-52fc22c29650", "comment": "Malware payload (Mirai)", "value": "a38abff24951921e7507b61860ad1e49", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770552668, "uuid": "242f88d5-60c8-4919-b578-b8867be50763", "comment": "Malware payload (Mirai)", "value": "b6713999794c074afb20cd0fddd1a2b84c3a9bbc4118cbfc7485b250ece0c5d4", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770552668, "uuid": "98d935b3-ee7b-45b3-b16e-deaff46b8d51", "value": "T113B39DEFF34B1591C8628BF013C39BDE2E2722129F6B85E73C0E567A18751DB491A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770552668, "uuid": "001e806a-6f38-47e5-a6b4-3e0b31a60b41", "value": "1536:zbOwWhgESLQT/7lY1dNlC23WXfWIiSRtgr/LWe:Gw/ESszpYdlCs2WIiotgrq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770552668, "uuid": "6e8a9e55-732f-40d7-97a0-96762e151d70", "value": 107840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770552668, "uuid": "13dc05bf-a0a3-4d71-9424-8e4d75eebeb2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fb9604be-04e7-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770552983, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770552983, "uuid": "0209b3d2-7add-4c69-a5a0-2e36068e118f", "comment": "Malware payload (Mirai)", "value": "a84cdd5c9c03165577ba9182fb158efe", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770552983, "uuid": "abf5fdcd-eba6-4256-8ad7-be2a473f4903", "comment": "Malware payload (Mirai)", "value": "f9771621dbeae85c50574ed370278e679b1b09b857b90823a28708cbdfb53a00", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770552983, "uuid": "13130be8-6227-4736-a6ce-c727fba71466", "value": "T1373302CEF24C6690EABC0C77218C0295D69CE10123A59B5DDF5389D9B97C827BC376", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770552983, "uuid": "ce5d5c39-0b25-41d6-898a-196bab38dcb3", "value": "768:KhURDQ70DNKJSF0tmxnNBuKwyXrijvAl/2ENzxGtfLOM5TPVxCDFbDOomtj8dWV:ib8imFNBurymbY/bxGtfLPPCDFbD5oZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770552983, "uuid": "e8e0a4ff-216c-42a8-8bd8-bfa1f17eca9c", "value": 53724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770552983, "uuid": "33640ad1-4dca-4c17-ba5c-24448994a2fb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0cb174d7-04e9-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770553441, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770553441, "uuid": "cde19577-39d6-4512-a989-d070ec671b9c", "comment": "Malware payload (Mirai)", "value": "bee5cd45149e2da13a6f715a8e9ac90e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770553441, "uuid": "3a532c14-050d-49c2-84ce-03bb27328c11", "comment": "Malware payload (Mirai)", "value": "9e20ba6171389eb317538e9c6e06ad1a8e62f361eff798d12dd7bccf2282f2dd", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770553441, "uuid": "ba41c4de-ea78-411b-91bc-9790975a9c4f", "value": "T1D503F10AF1E5A569F02E207A82DF35514918F60F875FC3B5F9D130961897FA8873C7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770553441, "uuid": "7547639d-eb47-44de-abea-b6dbd1880de6", "value": "768:lS2NnmEvRenE516Z4tN23Qx6lb9BO91+bBAfEFgbMrjenbcuyD7UHQRjq:llmEv8nEC4p6lbjOWsSmuanouy8Hyu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770553441, "uuid": "666ecc4c-9580-4e1b-832d-3dcd408e4fed", "value": 39252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770553441, "uuid": "cd55a0f8-e7a5-4584-86e7-6d4c6d4a65ab", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a2e43318-04e9-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770553693, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770553693, "uuid": "71422790-a6e8-41af-a8bf-666b5ef5501d", "comment": "Malware payload (Mirai)", "value": "a1e3478eca23cf6b7b28b4711ecd5654", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770553693, "uuid": "aec389f5-7587-4433-8b4b-e6a8b34e04fd", "comment": "Malware payload (Mirai)", "value": "cc65128ca415ce856ec533b877c95a4f3fdcf0b24d08a15fdf1b9a289fb37c40", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770553693, "uuid": "f8dcd684-e8f1-45a7-80b2-93f8d5be9c22", "value": "T1AB33F165654119A6DEB610F12BBA8FA1D6D006E931039C09B08DD7AACC990F331F6F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770553693, "uuid": "297c62ec-96aa-443b-abae-6d6fe8fb878f", "value": "768:2e+q02YbVNDcdExaf5Q/elhYfh8iWxKOnKgPWjRYfDHRGDJUgQJwlCBJgGlzDpbt:2V2iVNDcW8KuUh8bY+WWoJU9JTVJuC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770553693, "uuid": "eaa996dc-a501-454a-9aea-1bda4dc00654", "value": 52880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770553693, "uuid": "8a5d1620-5b8e-48f4-9010-7da4abad3958", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "10f7b33c-04eb-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770554307, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770554307, "uuid": "190f029f-f043-4997-95d1-d734cf833ca6", "comment": "Malware payload", "value": "ce18e63dec6f13b98f941e12ff63b179", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770554307, "uuid": "a19ecd22-605e-4d5a-a639-a2649f09f485", "comment": "Malware payload", "value": "48903a890b463315e083830a1f66d6ddabd5962e3d4fa74efe044fd4dda4b7df", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770554307, "uuid": "59f44ab9-4975-4ae5-b39b-c5a4ac9b2177", "value": "T1E2064913A8854876C57FF134A8A45298BA727C3A03353BC71B9925BB0D7BBC45B7E3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770554307, "uuid": "b3b140c9-4752-4b61-9454-20b7294cc97c", "value": "4035d2883e01d64f3e7a9dccb1d63af5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770554307, "uuid": "912c2b93-2e78-4f4e-89bd-d72c45e41511", "value": "24576:M9IMvnNL5AT3O4D6nF3+eDjvVtpPuZ+zQtK0Xvzvgee3+9N/vaK1gN:6NL5c3OlFOeH5uU4vzYX4NaK1g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770554307, "uuid": "4ee5ac66-c953-4257-bbf4-5fc7622a6275", "value": 3725312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770554307, "uuid": "08d605ab-084b-4089-a0f5-f7def50a13a5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c7ffbd5-04eb-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770554326, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770554326, "uuid": "a8996422-51e4-4f35-b7b8-7b9ff1ff8fcf", "comment": "Malware payload (Mirai)", "value": "2591d33b2cb00141e1cf36eb0cd43f60", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770554326, "uuid": "ae649349-f57b-4a94-932a-700139f6c261", "comment": "Malware payload (Mirai)", "value": "cdcb1ddec2f6ad49cb8aea86c5a54f73eacf08b0f52363f86fcb4199b1baee19", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770554326, "uuid": "a0c89a53-2a8b-4b73-9a7c-d5a6be06acc9", "value": "T1FCE328C7F800DEFDF80AD77648634909B630BB9255921A377317796BEC3A0E44867E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770554326, "uuid": "bd3a5cf2-75cb-4577-81ae-a1999c998064", "value": "3072:l5qa2+oF+ye1g7CA2LFoWVZjbiXLMDX4/bVAye+jhAkho:Sa2+oWg7CLFo3LwiRAye8AGo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770554326, "uuid": "b9fcb7fe-754d-4b23-a0c8-f73dcefe0429", "value": 150368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770554326, "uuid": "6e416ce7-750b-42c3-a72c-bd3dca9b02e6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7ffd5e99-04eb-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770554493, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770554493, "uuid": "79da9518-be21-4550-aa81-3d55998c0dfa", "comment": "Malware payload (Mirai)", "value": "363bcf9a13d5e8329b1f497e93755b66", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770554493, "uuid": "e00b8718-09ab-4015-9937-426b2722f8eb", "comment": "Malware payload (Mirai)", "value": "9f295bdd995f144619a52708d3539f5c7e8fb2e25d8268b5744470bf7e381648", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770554493, "uuid": "c8590496-dec8-4203-b31b-7f4b96ff74d4", "value": "T1D9B35B63CC792F98D618D1B4B1B48FB92B539921924B1FBE5567C3B48403D9CF90A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770554493, "uuid": "0eb7ce21-d5b3-4f93-b64f-e7d4ad823f95", "value": "1536:gaX881YRes+6myTxxR8Ci9pN2bTWcDXFlYcpKT62ye8nAhYV:gwYReZ6myTvR8VpNETWc7EZTYAuV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770554493, "uuid": "b7d122cb-a8fc-417a-bf44-1796da075bd6", "value": 114884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770554493, "uuid": "77a0167b-3590-4ed9-9100-3b68779f0a6b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dcec4bee-04eb-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770554649, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770554649, "uuid": "146fac5a-41e8-4025-843c-572ea17a6267", "comment": "Malware payload", "value": "dd3dbe3528c2eb94710cc217a4fb7b08", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770554649, "uuid": "17c72e1e-f89b-41ff-b042-2955d24e171a", "comment": "Malware payload", "value": "2921f1fab23133662eacf0f69290be4e3503523c5ea852c22f35b777f9a1f1d7", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770554649, "uuid": "165b1c16-af93-4e20-a39e-bbe62f812ca4", "value": "T14EE3F97F83F6313572038359F5A2A72896ADC233EB410ED2F9B69A9C8FC11A141771", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770554649, "uuid": "e80681c1-7a8d-4e7d-bf0b-8392b2ff7737", "value": "768:1ZdapEbrTXlGRNjcXscJGcz74k/tHcTwANeasfifRfiVIrePfHKIYW7uoFSnUh+f:dapArrl4k2wVaoIrU7QA4Y9hJgb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770554649, "uuid": "0858e04b-9bb3-405b-aed9-29b8f0118634", "value": 147965, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770554649, "uuid": "08fe696d-93ca-40c6-a179-a1e13f167d8f", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53765496-04ec-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770554848, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770554848, "uuid": "c882e8a6-f183-444e-bfd4-997b28432a54", "comment": "Malware payload", "value": "365046dd486a10c11c4af8d4da364cff", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770554848, "uuid": "17918ef2-8c95-408c-951f-6518c6f1cc86", "comment": "Malware payload", "value": "b276582961a807ba8e2886e9f52b75673f070912a2bf1fc7936d5a0e4380aae2", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770554848, "uuid": "61ee6e60-9f8d-411c-82f2-bd7e517789ad", "value": "T10DE3F97F83F6313572038359F5A2A728966DC273EB410ED2F9B29A9C8FC11A141772", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770554848, "uuid": "8ccd105a-adcf-4d27-8100-1fde324a602a", "value": "768:LZdapEbrcXlGRNjcXscJGcz74k/tHcTwAiKqsfifRf+VIrePfHKIYW7voFSnUh+d:7apArIl4k2w2qUIrU71F4BahYT8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770554848, "uuid": "c49eaa80-e68e-4acd-acf8-f6bef921fe1c", "value": 147850, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770554848, "uuid": "c1318743-1baf-4532-ae2a-83f2d2e4af83", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "59553145-04ec-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770554858, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770554858, "uuid": "e590d0d4-5c9a-46e1-8429-b2f43f0f913e", "comment": "Malware payload", "value": "62df31d4a0239416afe558383c955b96", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770554858, "uuid": "ad674b95-bf82-4826-8854-13206d6316aa", "comment": "Malware payload", "value": "500870206b7124b0bae9d8307af923b47cbfa7f41ae1f0fc182f3a0ff8708d18", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770554858, "uuid": "3d47b007-0e9c-4d09-bb82-f386bbaef2f2", "value": "T196F31A62A7B4197A23BB43BCE455F78879688523D74D62E1F8FEC19C42C1BD224727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770554858, "uuid": "d6dc763c-8085-4cf6-935b-031f4c407ed0", "value": "3072:EdrK2iu5mGuE/kDkank7evQ+/s4oxY+b3wyAtA+3CWPCWTn5bXZEtUioCkdGas0n:aru8GPLMWLasHlH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770554858, "uuid": "fe18777b-3a54-4495-9694-52bb1e47f424", "value": 159238, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770554858, "uuid": "94604594-5a24-4723-9e54-27484842a8aa", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac4c6d05-04ec-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770554997, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770554997, "uuid": "7485a8f3-fa87-44ab-8e6c-6bc8b099353d", "comment": "Malware payload", "value": "9962446d2c6808f512302d5b720977d2", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770554997, "uuid": "7039cfdb-3677-42b6-be8f-658d9674eba5", "comment": "Malware payload", "value": "756c16092683e7621f378846b3ad0145e304516245540749ba7460a533822975", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770554997, "uuid": "d744fd28-8a2f-43c6-8687-d45d9dff65fd", "value": "T1D303E1636782B6FCDC39D53699E70285C31F34055B2F9BBE086825792C76381AF23B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770554997, "uuid": "5e263f04-428a-453d-a1f2-e75c13fec48a", "value": "4b2df774f65211b4962a056c4da67248", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770554997, "uuid": "0a460264-f527-42e2-8955-e1c30297e582", "value": "768:GnyJHubAUnDU+QA7EhPdkvSe5vSQE3gncL7KgXLbKwwVmusqhzLYzAn:GoObBZQA7Ehlkvh0bgcLGobKwwSA9n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770554997, "uuid": "2f05ed38-d8d1-4f56-9c4a-584b29ea613f", "value": 37888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770554997, "uuid": "3e34269e-6418-4c28-9a50-2525140871ce", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1a8b9f0-04ee-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770555838, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770555838, "uuid": "bb666960-cc16-4f4d-9aad-51e23e1cdca8", "comment": "Malware payload", "value": "9abaf6e7727bbfb2ff4491aff6d33293", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770555838, "uuid": "c2d61b5f-5bb5-4f04-857c-2b3d1c99f8d5", "comment": "Malware payload", "value": "a6267537f4dad603130a59e8eaadb8532c97db918ebbe01d851788208410b35d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770555838, "uuid": "6b6cc94a-d00a-47fc-9c4e-61d1613efd15", "value": "T11C8308327589582A210B028FD263336C70EFD8E2D611E5B6F6F922344BA5EE135B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770555838, "uuid": "cb62ab94-cb01-450c-8034-bb6a8ebd5589", "value": "1536:XJyp/QdMqpYJKNoCtpxD3t2ZSDXpdyr2pbnhWaRVN/:XEKltp9t2SX/yr2pbhWwVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770555838, "uuid": "b28cb638-eea9-438a-bfa4-c8d304f2b158", "value": 85051, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770555838, "uuid": "188088cf-16a2-44be-811a-54b5bf4589fc", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eab643f1-04ee-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770555961, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770555961, "uuid": "e9668792-d0f9-4efe-993b-046ff67cfbd2", "comment": "Malware payload (Mirai)", "value": "4dd7320e64c7b8fef3d9ef07e1132876", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770555961, "uuid": "4f3d7683-5234-41f5-b848-831fd4b8e79c", "comment": "Malware payload (Mirai)", "value": "3573118eddae37e80b4e199500a1296a9b72fbb86ec93ca1aa12b70c7269cdd0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770555961, "uuid": "18e9f810-dd41-46cf-9cf2-e3924973f7c1", "value": "T17F43F17BF34EDE7AD86251BAD865E26787003F7A100EA0EB1420D6A8DBC71175F3E6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770555961, "uuid": "c3bc89cd-341e-412e-a250-3f8f7d7f37e0", "value": "1536:0tbWSTtNeNswYtv/k1OgLXGD0YLbte6LhosMH:0hWSZ4NfYRCZLXh0bV96", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770555961, "uuid": "d2b1d9a8-526b-40c4-a8a0-5e3117a1610a", "value": 60608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770555961, "uuid": "f6b2cd57-a60e-4bd9-abc2-bddeb3cca23a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6aa4fc4a-04ef-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770556175, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770556175, "uuid": "3c535690-3e1b-411c-81cc-d9cccf50375a", "comment": "Malware payload (Mirai)", "value": "acb2e93e86d6f6df0f0405f9f0baf3fe", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770556175, "uuid": "6bb676ce-b92f-46fc-bb0d-75553a62ed93", "comment": "Malware payload (Mirai)", "value": "47660b0021d466c1ad2061f2ea45f36b5ec1a036a332588290ed740f11c2dae9", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770556175, "uuid": "b0b65cf9-66cb-4d5a-a3f6-47586c93c582", "value": "T10103F14C00E7D218CA2EF03859EDB3664334AB95DA0E6399E9D731392905B4DBB7C3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770556175, "uuid": "eaf9db15-9863-4f24-adfe-540e5cd49913", "value": "768:w5zGYSTbsVsuS4pYnfCKFcH5+kjqX6SN5975vRJaIwG8JvvsJqnbcuyD7UHQRjs:qGe6EefXFaYHV50zLvvssnouy8HyQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770556175, "uuid": "3d253759-e07c-4266-9258-20bc36c690b1", "value": 39964, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770556175, "uuid": "9c43d250-497e-4202-a2f9-966328790561", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72cb2167-04ef-11f1-8369-82aee05be84a", "comment": "Malware payload (Phorpiex)", "timestamp": 1770556189, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770556189, "uuid": "eff6a76e-5b6f-4ddf-8899-9be1f0140610", "comment": "Malware payload (Phorpiex)", "value": "e7467a4d53ae1b82a890e7075f102abf", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770556189, "uuid": "7de48a47-84ae-44a3-982e-eb5d1aab5b9d", "comment": "Malware payload (Phorpiex)", "value": "02816012e5b60a4dd35390137f9bceb33752abd5a4cd5ec5794bdd3ffb7899c5", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770556189, "uuid": "9bb62cd2-fe40-4c28-9dc7-9960df92094e", "value": "T19D834900F6D0953BF4F741FBD2F75A69582CAFB4130984E7638065AB9724AD9BD310", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770556189, "uuid": "7a922e89-1b03-43f3-83ac-ca49d22a3ac8", "value": "8a17e5a35017900501d8d170aca1571b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770556189, "uuid": "707a7910-1cc6-4c0f-9a3c-db421f1e5f11", "value": "1536:3KRjxbFmavM2B1HKqtC7pHCi/cmn46bxHppO0XmY:6F2OZ1HK17R//Vn46bdppO0XmY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770556189, "uuid": "5c9b45e5-34b7-465e-8798-43a692f9d608", "value": 87040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770556189, "uuid": "826f1b67-91f7-417b-b9a6-7e10be3cc8d3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8d2d2f81-04ef-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770556233, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770556233, "uuid": "07018d36-6e36-4789-8c6e-ab1c56114ce1", "comment": "Malware payload (Mirai)", "value": "e9430d4325323f1110407b6adba83bf1", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770556233, "uuid": "49a14323-9db0-4fd6-9ff4-10b027aef2bb", "comment": "Malware payload (Mirai)", "value": "ccd150b016e80c8ddc967b068792cbec07cbec7bb9b4d75e71209b7b733715f6", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770556233, "uuid": "a3880002-470e-4e47-826d-26ae32e41130", "value": "T1F823016CD0CF4D17D9E7E4B538D547D2A3AA0BBC3FD9C8D62096BF904342C4A8194E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770556233, "uuid": "a434eaf3-02cd-4c22-a7b2-9be4767d6329", "value": "768:xW0VVsNSR1kK61r1mcklV1qfnqfN5ydD2CpvtZZi6XKHCP4uVcqgw09h:4S0/97kn1qrdaWtZZi66O4u+qgw09h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770556233, "uuid": "4dade335-2018-48be-9029-509a5ca30f16", "value": 48124, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770556233, "uuid": "950277a2-2b2e-40c6-84fb-fcf9d4157c71", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ded6f536-04f0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770556800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770556800, "uuid": "abb2eca2-9a5d-460c-8791-517ca1e30ee4", "comment": "Malware payload (Mirai)", "value": "94ee7994547e392060e94d6cd211a8b8", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770556800, "uuid": "209be5bb-b460-4392-89fd-786017ffce24", "comment": "Malware payload (Mirai)", "value": "1a530aad31e8082d833355356aa3b68df3fd4043aa08a07217ccb614da59bbb9", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770556800, "uuid": "3dd3d7f2-b87a-4b19-ba91-7cc3904890a4", "value": "T17F33F163423B93FDFD1648F42C6A0540E83A996F688717AE25C7117C4C266E2DF92F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770556800, "uuid": "11da1b28-9cfd-432a-8b3d-564e6e856022", "value": "768:zlQEuWOnM8Io+/L88u5LjFETAvELh/8Dyr8IkHorc8/spNfFmEIq1gTEzmyO7Wue:C5h+/w8qLu8MkyaB8sLfFvIqKTas47", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770556800, "uuid": "aca99324-50c1-4c34-8958-f12425cfbfa3", "value": 51332, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770556800, "uuid": "eff79e16-28a6-4a3e-bcf9-229a42a3f4aa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f37ac28-04f1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770556908, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770556908, "uuid": "89a60a0e-cbd2-491b-82d6-8b4a57a85584", "comment": "Malware payload (Mirai)", "value": "0d1d7bb19b31b04f273569d60f05106b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770556908, "uuid": "26851999-99ce-458d-906d-45dc1c467736", "comment": "Malware payload (Mirai)", "value": "262b55fe2b19f552c29edca64d09341f92a93a3f8007c67a5e31cda4679c0739", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770556908, "uuid": "1c7546b3-cf95-4c34-a17e-0a7968cf27e3", "value": "T1AE330130C34F24B4EA322CFDD9025B29B66D96FEE1BD695053E8422C95BA8019C7D1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770556908, "uuid": "f1e62fca-100c-4d79-90fa-5530557ce2af", "value": "768:Ais/Kslpa60xkQ9SSu5VS3ARlBt+k8T6jq57a0feTK++S+fOPsj5EKh5LPwtkRvK:AisS+a6U3IT+nOz+SJsjnwqReL95", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770556908, "uuid": "54af14eb-6396-4a24-8b68-c3de84b96f1a", "value": 53652, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770556908, "uuid": "3ceb08ff-d271-4420-9b49-4ecfab971bdb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a168b81-04f1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770557007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770557007, "uuid": "0d202d48-d05d-49c5-8612-df16e198e633", "comment": "Malware payload (Mirai)", "value": "5cfe02d9222c0264b6b31e9a79c56101", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770557007, "uuid": "5e471867-aa36-406d-b789-d60afa90f12c", "comment": "Malware payload (Mirai)", "value": "0b9f8a80f72c5900d1c7f5d6bc8b162c32dbce682412073521c9f9d12226cc39", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770557007, "uuid": "84d30c22-b57f-4468-932e-3ebfe34d6829", "value": "T1E823F13826CE5EB0DE680974EBA481CBA373D477D1A83A72330674B1FF02755256A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770557007, "uuid": "0e594467-ce33-448a-93ae-a54b633dacf1", "value": "768:iP6URumxuAevP+CMXSCwsL6TRofGEiWKOrlb1OZxvo2iuX/NoselTh+/zgys3UoY:E6URAX7MXcG6TRoeNOrlF2rXWHCgvzM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770557007, "uuid": "acff7e88-ba66-4ace-859a-950c1d673ca3", "value": 48396, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770557007, "uuid": "190fa688-f648-4e2b-b530-53a9485b81c3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a4cb0e5-04f4-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770558188, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558188, "uuid": "1e6a5846-dbf1-4d5f-adad-f8d343557357", "comment": "Malware payload (Mirai)", "value": "4fa853eaf73bd5e3893fcf3978e8f8a6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558188, "uuid": "16daf958-f26d-4e7a-b061-6ea7822a38fe", "comment": "Malware payload (Mirai)", "value": "09c123a7e2f6bfae5ccd7a4e762a8cb24600626ea7e7c4aa8103631465323fce", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558188, "uuid": "520eee94-2fbe-461f-ad1f-77b01f67c43d", "value": "T11D330A8EB8029D3CF91BE6BE54164E0DB93177C152830B2757BBFDA36C721945E02E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558188, "uuid": "02c78dea-aa58-489b-b676-a6fdc12937bf", "value": "768:gduPBFnHooqR8qOCKq2cH4Fje+TK806MMUVjzMfQXOtHud2oGt:r/hqaJMcjeqK806MHdMfQXoHuCt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558188, "uuid": "4a85a3a2-02da-4991-9baa-5c643116527d", "value": 54932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558188, "uuid": "abd297e2-7166-4b96-8d75-999744c5063b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a64aadb-04f4-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770558188, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558188, "uuid": "7eff2806-1053-478d-b7e5-bdc7b5b06ac8", "comment": "Malware payload (Mirai)", "value": "ad2e18267a1a2e5f70e36a84c9d445a4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558188, "uuid": "3fcb1d28-22f9-46c8-823f-9fac23f45258", "comment": "Malware payload (Mirai)", "value": "807126b58a9f678db5878f19eea0827c154149d21d519dc41b423958cf88aa27", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558188, "uuid": "9bcfcea2-13cd-4270-b511-3f66eaa381c3", "value": "T125D32A56E7418B53C0D61775B6EF42453323ABA493DB73069928AFF43F8279E0E23A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558188, "uuid": "7b63d66b-4a0c-4762-8ff5-ee59948cadb7", "value": "3072:vIWGv+30KJarvJJpDYjln8wNpYipnT+HutbM/9N8:vIWG4tJarvJJpcBn8ZanT+HuJM/9N8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558188, "uuid": "e61f1ce8-d30a-47d9-beac-3204e3df6cf9", "value": 141770, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558188, "uuid": "abbd5c63-bfe6-493f-a57a-1f8f680017fe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a6dbffa-04f4-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770558188, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558188, "uuid": "064e277d-f7c5-4b19-ac3a-e03ef064c42a", "comment": "Malware payload (Mirai)", "value": "6887ba7f71859dd0883002efef2c4df1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558188, "uuid": "b4120987-c61b-423f-b84c-08a85a6d8e68", "comment": "Malware payload (Mirai)", "value": "7daa41785c9b7b72015053e7d1284c7c1dce4f4faa3d302ef0344fd8dbdf5e11", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558188, "uuid": "eb69f1e9-a4e4-4161-9d7b-5949ad95c986", "value": "T1AD73951A6E628FADF759833447B78E21AB5833D627D1D641E26CD6002F7034E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558188, "uuid": "e1f87706-6bdb-4f72-9f71-f7ea5d2adfb8", "value": "768:uOHdEN88rdOdkr06mC/ddIgGg/vPQKTQCQczck7XDSWbT2tAjUv5yzmRef8yWRwN:aL5f5gLczT7vLU5e/W6nX9D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558188, "uuid": "57def3b6-8d18-4998-a140-2ea2e2141b67", "value": 76384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558188, "uuid": "32aea91b-ce7e-4bc4-8c98-048e4c568c66", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c0464c3-04f4-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770558191, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558191, "uuid": "0842c009-b663-4cad-9fa8-33fea908419f", "comment": "Malware payload (Mirai)", "value": "2b962ca3d5bf48e66f4dddf5e2ecb0ce", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558191, "uuid": "8b5e939c-ed0d-49e3-b67f-08b095863934", "comment": "Malware payload (Mirai)", "value": "8dce5b8e33541d3ff033966d6d0a81d82d6ee58d13ad7b98e0a2da1cc4adbca3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558191, "uuid": "945ead62-3c8c-4afd-aac6-42a69e8b6f6a", "value": "T16BB2CFCD61843084C98D7C7C178D4A664F6CA1D0BADD9B26E360CD98B3BAA8B345D0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558191, "uuid": "dcc9a019-d0a3-403c-abe9-0a02e5139e59", "value": "768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBpmeZqSWvb:4QlS07FUXqIYSXQKqumyqj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558191, "uuid": "aca16146-5ece-46f4-8bbd-a5b0e3de9d7e", "value": 24912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558191, "uuid": "c5f13669-e984-4f84-b05f-822cf0b982ac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c1a63c4-04f4-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770558191, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558191, "uuid": "50674d7e-7bbc-4555-af45-16ffbb0f22ba", "comment": "Malware payload (Mirai)", "value": "d4e4efd5b6b334d46e432dcdba47fdac", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558191, "uuid": "9a97cbca-c770-4e62-8b64-4da0f8214d07", "comment": "Malware payload (Mirai)", "value": "77008a2a7eac54640278afc50a94efd54d1d4f9d4e621eb6b0593f2472fc8701", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558191, "uuid": "8185ba4a-b39c-4c82-9706-51b087f2baf4", "value": "T172A2D01572632D96F3E91C3CC96A835BFD671BFC80F5327669405620C94D24B3E39E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558191, "uuid": "65274a62-239d-4d51-9180-823f69e955a0", "value": "384:TvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjHwhymdGUop5hI:TvQn4j+ZO5fKAlxrws3Uoza", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558191, "uuid": "b5d014de-ae97-4868-8adb-b292be4bd34b", "value": 22168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558191, "uuid": "caf7da13-d988-4b31-92fa-c9c0560170b0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c1ec150-04f4-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770558191, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558191, "uuid": "dd02dedc-70f8-4ffa-9d6e-b3b375bcb886", "comment": "Malware payload (Mirai)", "value": "2f12ff5a8f2c8dbb80ee1fbe0e097eed", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558191, "uuid": "81d068ee-c47e-490e-a34d-34fa2c08319c", "comment": "Malware payload (Mirai)", "value": "2dfd2d04eea4e0bf5a94805576e9270638319b39066f62b719a85f2970014f4f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558191, "uuid": "5906349b-f247-4538-b113-2c2821017618", "value": "T1B3042945EA414B13C0D627B9F6DF42453333AB9493EB73069528AFB43F8679E4F22A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558191, "uuid": "aa4fd1f4-6092-4310-840f-58a2d32acec1", "value": "3072:ODeCv5w8oIw7fGeSaUWzuRJrITjgtmLVY38YhTfYo+M/RQeF1TLn:meCv56Iw7jSaUWzuRJ4tLVY38+x+M/R/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558191, "uuid": "88525d51-b858-40a0-bb6d-d67baa08a0d1", "value": 181450, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558191, "uuid": "42314c89-3fe2-4fe5-a74b-49b06d89a217", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c242dd0-04f4-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770558191, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558191, "uuid": "d4738798-1a3e-4aa1-b0af-4e5b5a2eaf9d", "comment": "Malware payload (Mirai)", "value": "146b609584b6df913a14034a972a045c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558191, "uuid": "cac2264d-5d43-498d-a57b-a72a209da63f", "comment": "Malware payload (Mirai)", "value": "5a5425244f25230155752388e352fede9e0b75057abda2c91117cceafe1b8c83", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558191, "uuid": "d212d4e6-b5a8-41de-9663-f54d138132f4", "value": "T182B39CDBF24701A0C8624AF007CB4BED3E2723815F27C5E72C6A657969791CF8906F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558191, "uuid": "bcead37e-520b-482b-9350-48326b5e9255", "value": "1536:Fu27gBY9FSSpj3z5Qxw6YaWWgg18/LWy:c9sSyzz36YaWWgg18q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558191, "uuid": "4c84258e-4e8c-4eef-bb1b-bebf8a64755a", "value": 107800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558191, "uuid": "b1a3e501-09c7-4f19-a4d4-4f3ad9b315b5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c252085-04f4-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770558191, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558191, "uuid": "7a41dc28-112c-4105-ad41-7706bc483b65", "comment": "Malware payload (Mirai)", "value": "b539f97872ee33d819af1b5366aa3c79", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558191, "uuid": "37b8e245-fbb5-4b0c-89e6-f8d3b7738fc0", "comment": "Malware payload (Mirai)", "value": "baaf152a2e2dc367535b2d49b45ab42d784fd680cf441a5336b7f4e580700e82", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558191, "uuid": "5dce08fb-ff84-4768-b5f0-5511584a4595", "value": "T18F434A02B31C0E47C0A35970263F5BD097BEA5E022E4F685751F9B969672E371486F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558191, "uuid": "4eaafdb8-831a-47ad-9e4f-b2fa6b935f23", "value": "768:JfsrmjuyuRP4R1I0mQC/N4IIcBKepcC9NEys9+m1HVOjvYggGK0FRxtrSEwn59IY:VsIuy80cI0KeacmJ+MVyYgg5Ix5Ynf7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558191, "uuid": "b4ade257-a238-4031-8bd8-b8777a2aacaa", "value": 56384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558191, "uuid": "7bcf04c7-5236-45ce-ad11-38eadd594cf7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c2a9798-04f4-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770558191, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558191, "uuid": "74af0c98-1619-4558-be92-76c1bd1f6cf2", "comment": "Malware payload (Mirai)", "value": "7b540cbe43107592d5f74349707b9f72", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558191, "uuid": "0ce276bb-c130-4648-bfa7-8de0032a91a0", "comment": "Malware payload (Mirai)", "value": "b4bc67f6519184b529b022be379b22704f99857065b44bcbc1c979e010cf80d9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558191, "uuid": "a6191db3-2652-45a8-9cd8-ddffed04edf2", "value": "T140533951F8815623C6D112BBF66E428D3B2613E8E2DF73079D225F20378692B0DABE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558191, "uuid": "3490eba8-5081-415f-9bba-079c973d9f5b", "value": "1536:qfM5Ug0HC5oqTJA96BFJkGQ8DGgLgv6n/:2MfHnJ88it6n/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558191, "uuid": "0589440e-7af9-46c7-97c5-63897f682001", "value": 61256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558191, "uuid": "22ad6242-30c0-4b72-ade2-3227d81a4d97", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c2cb25d-04f4-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770558191, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558191, "uuid": "bc1adab9-4f3e-4714-afa7-480395ee44d2", "comment": "Malware payload (Mirai)", "value": "5b5c556b353436fc40e1ea0ac11ca574", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558191, "uuid": "381083a5-dc10-4dce-8bb6-acfa3707a008", "comment": "Malware payload (Mirai)", "value": "d9e9ab7b3b08ee182237dfa69a9d76912cb6fb05996c7526e96b181b26b5cc14", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558191, "uuid": "1f127e21-a15a-41c9-8c8f-9f202399e616", "value": "T149531A9AF801CD7DF85BD77F44570909B531E3D142831B3623ABBAA3BC731A91922E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558191, "uuid": "b94c4823-4195-4d68-848c-24554a04c6c6", "value": "1536:Zddr7MnROd8487KT6+1CpH7DjPApIaS48YZO:ZddnMn8d85E1IHfc18YZO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558191, "uuid": "08696790-8165-4d7f-b641-a89ff5e23cd5", "value": 62728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558191, "uuid": "1c772425-2958-4002-8f42-11ba830b1b09", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c2cd4d8-04f4-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770558191, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558191, "uuid": "fc410a4a-91a8-4115-aa88-bb0bf08db899", "comment": "Malware payload (Mirai)", "value": "7296dd0f5ed40f1fb41ed8d5b0ef67d2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558191, "uuid": "d99e651e-4319-41af-a4eb-0e6e4e40c5ef", "comment": "Malware payload (Mirai)", "value": "1344e03e5644d58416bd8b42e60dfd3963004dbe5afaeba6122bde886a546fd2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558191, "uuid": "103a0a67-72b0-4ccc-986b-a692afe129ef", "value": "T100533B31BA760E17C4D1A4B621F74B25B2B547CE26E8CA0B3DB10D9EBF61A406513E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558191, "uuid": "7e95ba68-fea4-48d4-bee8-264898f7b433", "value": "1536:bxoAQCPFKz/YcP6Drm3h/CmQ1X75Z8td5Nv5:aavIEXVgNv5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558191, "uuid": "5e450a57-2b47-4bf2-997a-2cba0ca2ae1c", "value": 61072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558191, "uuid": "f4c9a22f-09bc-470e-98fc-5c4a6c3e3f94", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c2e4301-04f4-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770558191, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558191, "uuid": "cfbd43b1-171e-4502-bd8b-19388358b7d9", "comment": "Malware payload (Mirai)", "value": "c6fd8201f02536f5794c9e0f9985106b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558191, "uuid": "4f006b39-7f7d-411a-8d5f-fe115fcdef57", "comment": "Malware payload (Mirai)", "value": "3cedd8eaebe51251ccdecfa0045c7a8fb349654e9ca45ea1f6a24dc841c72389", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558191, "uuid": "ba050984-b12a-4bcf-bcc7-2d17d70afe38", "value": "T13343181BF581C1FDC09AC174466ABA3EAD3371FD0238F2A677E4EA222D96E215D1DC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558191, "uuid": "f64cd489-f9ce-4fb8-a874-e21e2d1f60ed", "value": "1536:fzYOpW1Jq+n5BKforamophEHZa8f66YfuTeDR7CYl:7YQW1JqyPKgraVgPrY6eDR7CYl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558191, "uuid": "3ff26621-c3a3-4070-b8e6-d57f5ef96186", "value": 59200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558191, "uuid": "6a0a7ebc-f82f-4fbb-b70f-77779cf61bee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29d3e09d-3750-11f0-b041-82aee05be84a", "comment": "Malware payload", "timestamp": 1770558198, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558198, "uuid": "8abf6012-bbee-42ec-82f6-a8b7ba059965", "comment": "Malware payload", "value": "c77d47523f97b3b380b90d7ba1318087", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558198, "uuid": "adb74e7c-5683-4ceb-9b6b-95db9304e2f3", "comment": "Malware payload", "value": "52fe0b7a8502c77fb45f0e1a0ca64269a4dba00cb35b00c383396a8f148aad7b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558198, "uuid": "d0cb9b42-4a0a-4faf-9e43-3799abb8a8b0", "value": "T13DC2C60BAAADEE3CD0859370CFCFD2B0236174792732650F35D1737625969A42369E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558198, "uuid": "eabfbdca-c5e6-4b46-8162-b26590b8e17d", "value": "768:MJUvnfXPH/3vnfXPKC6yqiaSK+UbfwXZVjUCVLgJ2Amuk:lUbfwXZGqs2Amuk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558198, "uuid": "bb4e4c7e-6f80-4c40-9ffb-1cea8e027b4d", "value": 26768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558198, "uuid": "f1f13281-fa71-4c8c-a05c-728210720e8f", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "208fd456-04f4-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770558199, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558199, "uuid": "2d69db40-aca2-4d3c-b9f2-eba790b56837", "comment": "Malware payload (Mirai)", "value": "c7f4463b7231d80aedc80739e4745393", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558199, "uuid": "89530402-2382-4cdf-b910-bb878265a2ff", "comment": "Malware payload (Mirai)", "value": "d828e80fbe5ff1855b8005a066a51909a52c9e688a902631bbc83a0715fd5a1b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558199, "uuid": "19a4cdcc-3b7b-4ed7-b029-747ab0fe7a72", "value": "T185630856F8814B22C5D5027AFA2E118E332357FCE3DEB2129D216F207BC696B0E36D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558199, "uuid": "7227f432-fe2e-4d61-ac98-ba9abe8507a8", "value": "1536:jFn/XOF1Cqj+DozpprMxpbGRKYFaHU5zTI7i8YwN+2Nzz5uYon6:BONjGu8Ka/YwN+2Nzz8Bn6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558199, "uuid": "86d4a85a-9955-434e-aa5f-3e565491b97a", "value": 71228, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558199, "uuid": "7dd87368-7665-4adf-9611-6e0b41f549b0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2092b16c-04f4-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770558199, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558199, "uuid": "21667a7b-6a17-4bd9-a5e0-e95bb3326a13", "comment": "Malware payload (Mirai)", "value": "50e439fa2782e1d92a7b7f7f406f3f3c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558199, "uuid": "167289f5-1b0f-4a8b-b2dd-08ba2f156921", "comment": "Malware payload (Mirai)", "value": "d5da0536c279521ad63783cc04d44254541e0f69a9ed92ee6f2ecaa21d7f5ed8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558199, "uuid": "648d254a-198e-4630-ad81-b13d3d038ed2", "value": "T137338D66E81A6E18C0560170B9648F741F63F0C4934B2EFB19E9C2B95493EACF519F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558199, "uuid": "55e023a1-39e4-4d4d-8cb0-61e8f40bbff8", "value": "768:qIap1jeOYyLmAfxthLr5uhK0SR/NCHIDLKX54KafzozVZuVCAa8RWfgJBdwn5FI8:PaLj3/L/fxzEmlLKX549MzOVCAhJsn/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558199, "uuid": "af8cf220-805c-426e-992c-111d7989d28d", "value": 51796, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558199, "uuid": "36354f1a-febc-4521-9637-c93619f33255", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2097b941-04f4-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770558199, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558199, "uuid": "935eb9ad-bcfe-4978-9a39-d216e92ca91b", "comment": "Malware payload (Mirai)", "value": "0e1337b3d2d3a6832f31e0ef93ae5839", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558199, "uuid": "136b3ac6-8eba-4ea6-ad8d-961b377ec80a", "comment": "Malware payload (Mirai)", "value": "2a206d2434800acade591a3808223ae3c19a8f2ebb9126386f8884b8c17c8f19", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558199, "uuid": "b8a397db-b1b2-4a35-92e1-cd7cf848a26f", "value": "T1D273D715FF550FB7DCABCD3705A9170239CC558A22E47B3A7934D828B65B20B49E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558199, "uuid": "6ba9a193-d53a-4e7e-bd82-c5d47ded5ad1", "value": "768:sD7fxbOUB+goKPsJtN3hCeF56eYOiKfrwwuaYbZdkWFXi2U7n/eYYTEOCwnnvIk:snxbBq8Y56vO82wZdn+n/nYTvnv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558199, "uuid": "2b0d26b7-140b-4925-a1ee-b91749eac615", "value": 76384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558199, "uuid": "ca045abc-4dca-42d3-8081-467ef6885bcc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "20ab3392-04f4-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770558199, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558199, "uuid": "daafecdf-13ea-49f7-8836-0b360362730e", "comment": "Malware payload (Mirai)", "value": "3e834fc9b6f3ab09f722a9414590afbd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558199, "uuid": "315baca0-281b-4b46-81de-0ff49c132a8c", "comment": "Malware payload (Mirai)", "value": "59c2b7a630bcedb827261ef4cfd1f9996e23f946190390084fb2f0a8fc5861d4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558199, "uuid": "818fa5c7-65d5-4c0b-a917-4908603df60e", "value": "T1ABF2E891B8825637C2E4237AB66E5A8E337073EDD2CB7217E9214B207B8551F1D23F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558199, "uuid": "146fc794-b405-482a-969b-2120a6e64b11", "value": "768:qPdCA2q2sG5C7UdRkIyMc1Dwy5ZCavg9K6lr+OvWrY6fL4iaoDztwn5:qPGqZG5C7AyM08ri4KZ4WM60i0n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558199, "uuid": "6e731bb4-1823-4535-b066-fb595ec59e3f", "value": 36484, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558199, "uuid": "4e99cc15-9e81-4cff-b79a-58b7f22174dd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25e73284-04f4-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770558207, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558207, "uuid": "8ec50942-61d5-4cc5-b33d-eac9e81f2287", "comment": "Malware payload (Mirai)", "value": "0cf85e6f121353caf8acf80cfcd1377a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558207, "uuid": "dfbd15b6-5e84-4eaa-8c9c-48691761d079", "comment": "Malware payload (Mirai)", "value": "b4c25e9ec3d9eba70b37a88323051535bad4558b430506add69eb1da0c999e9d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558207, "uuid": "17d415bb-ba6a-4880-a127-d3a258a0725f", "value": "T175C2D1E0B726FA31C4206C3EE52B4D8A3A511A7C91FF353664258C359FC1A5B63B84", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558207, "uuid": "8bbcf16c-cbf6-4230-b614-dfc2bf6f7b4e", "value": "768:JMKyhegCCMqfizjoNpd2vJdX6vwrw9q3UELu0:OKy4qfqoeJdXWg5Lh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558207, "uuid": "0b42bac2-22df-46d4-a892-8145f203014b", "value": 27300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558207, "uuid": "a44ba967-a6ce-4f07-b50a-26b3c7c4e6e6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "260d3e6d-04f4-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770558208, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558208, "uuid": "831dc532-8c83-4698-84c0-621d170ad604", "comment": "Malware payload (Mirai)", "value": "7fa11714cd354dedc9beb7c3de59419e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558208, "uuid": "664e2abc-847f-4de0-8c89-c597b2123d80", "comment": "Malware payload (Mirai)", "value": "44b18a82a75552a96275bef8359b94301d3bf4fa927e688e30d614b96b2d917e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558208, "uuid": "ee8708df-db89-4548-ac2d-a3e9609fb5ef", "value": "T1D182DF30619B75F9CBF10430EAAE8EC6A7160BFDD1FC36D316596B78894650211F93", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558208, "uuid": "14f1b57e-34c8-4f08-8705-aa803e6aeebd", "value": "384:MnfzRV0P6iOwrkom0DRnVATuSlShu6NvmPWtUn+KMa80hymdGUop5h5lh:2dV0P6+kom0tVAoNvm+to1Rs3Uoznlh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558208, "uuid": "5194ea97-f351-4498-ba55-7d920e3c77f7", "value": 18488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558208, "uuid": "477d48e3-d7ff-4b80-b024-befdcbc3b642", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "261994bd-04f4-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770558208, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558208, "uuid": "3ca4322f-560a-41dc-8ded-abab877d0f72", "comment": "Malware payload (Mirai)", "value": "0b03e7c92d2c2b1463a0f3445ccd12e3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558208, "uuid": "d40bda55-5dfe-42a5-840b-77e5ec612636", "comment": "Malware payload (Mirai)", "value": "76bf0bda81715833be4946ddf45aa7a02d0de8cbc3738203b3015c052d4db7c5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558208, "uuid": "0e2a8e52-78b6-43c8-9616-b841a132d814", "value": "T1D7432921B63A1F13D0E0A47D21FB4B59B1A15ADE26A4C64E7D720F4FFF11680A943D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558208, "uuid": "ad87d1e5-02de-4639-bab6-a71555459bfa", "value": "768:RqowmZPu9wtnfbltWgC6BSJsBcfDSTFIuQKqgESnmC/xO+KpAwV:RqtmZPuutfbltZFBSJsBcfDSTFI+BEV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558208, "uuid": "4855d173-cdae-4005-9d21-9f7b3e933d6a", "value": 58376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558208, "uuid": "23a57bae-e379-4a2f-bbc2-00593fb8fcf1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "261ec999-04f4-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770558208, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558208, "uuid": "424951f3-ff88-4963-aada-b45d3f3d305f", "comment": "Malware payload (Mirai)", "value": "fbdada425a8529cc9dac0a182af2a70a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558208, "uuid": "104ffe4f-05de-4ace-9691-c90c80f24737", "comment": "Malware payload (Mirai)", "value": "629f9057f1c22f43d59f394d1b5dc4c6b3657a1f8aed2db8cb1a6c69d1403b5c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558208, "uuid": "c47c18c5-c07a-45df-a703-7f3d5f60322b", "value": "T13F230271850E9EB124303C76EB95D393B6E12A71C6673013DA280A3C6F75B531E5BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558208, "uuid": "c996d5f5-a8bf-4887-ae56-dd2a1cc1cba5", "value": "768:D/TYCoIxdEk+AxoTZAZHFeq8b399q3UELbUXfi6nVMQHI4vcGpv7:DECFd+A6YHAxQLRQZ7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558208, "uuid": "a7c1f224-d080-4797-b62c-dd8430a06c03", "value": 46624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558208, "uuid": "06039ae9-3668-428c-82c0-c883c07ad311", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "26251c84-04f4-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770558208, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558208, "uuid": "bbb813ba-8be0-4cd3-9ebe-879cd7df1c9e", "comment": "Malware payload (Mirai)", "value": "9f93b8097c394d4c00367ba593fd29ff", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558208, "uuid": "99c0c834-6233-48e6-9b87-ff0628d3bc9d", "comment": "Malware payload (Mirai)", "value": "eca2b235bde3d312dd8ad39c95c96553769e7fb45af8127f3ac6946b4e659837", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558208, "uuid": "b46ca81e-eca1-4382-9796-1f3e8f7c0320", "value": "T163336C36E029DED0C6560234A4E88F751F03F1C883536EBB2AE546B2645396CFA19F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558208, "uuid": "6578c261-ca89-4f12-a065-f722d77a6068", "value": "768:Oa2vU7eng2qGJert7LrLMU6fgatQh+YbT/9+m3CZQoV/bnmCozw:Oa4U7G7SvT6ftBTm3KVrmCo8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558208, "uuid": "6c8c4c35-420c-4abc-8e2e-b0b34d32d4da", "value": 50168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558208, "uuid": "9b0dc7f3-0cd6-4032-ae13-5546fee3e9bd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "26283578-04f4-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770558208, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558208, "uuid": "a10f2e5d-84c0-42ea-ac3f-098a22dc989b", "comment": "Malware payload (Mirai)", "value": "04aba95c7591cd0c8e2815bef6dd9bf7", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558208, "uuid": "643d5ca1-0275-4664-a435-94c46c294182", "comment": "Malware payload (Mirai)", "value": "b66b165e024ab81799cfaa50b722347629bdb6f1e8e08bed77612b75f3cd4bd7", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558208, "uuid": "f54f0b7c-d8ae-4bd6-bcec-7cac50bff4b4", "value": "T18D937CC4F683C4F2E84305B1507BE7375B32F1B9101AFA43D3A99A72DC91551EA1AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558208, "uuid": "42f339e6-8b35-4380-910d-0f34f8b7d8c2", "value": "1536:W/QCZaxGdvts3FVVPhEOYxPu++g7bQUIKqI4FrS4LSt:WYCZa8dvm3nVPhvYxP5RbiKfUmDt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558208, "uuid": "e5612561-16d5-46a4-aeb5-6ec7a03c2c50", "value": 89992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558208, "uuid": "253a950e-b633-401e-9e69-302771afdfad", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "262f5604-04f4-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770558208, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558208, "uuid": "da2c8f81-d45b-4777-9a62-67cd7b3a2b3e", "comment": "Malware payload (Mirai)", "value": "c93e5d8b8b8fae984da958816c5dc166", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558208, "uuid": "3c3bf119-12e0-496b-8939-c16c7cf27a05", "comment": "Malware payload (Mirai)", "value": "ba36936d085be941880ce1f3a12c2df51287c1f8f6060bbd2c515d1153cd6ad2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558208, "uuid": "85ba64dd-26d1-48bd-a4d5-00bdf2e6a490", "value": "T1BE334BC8F543D9F4E9471570117BFB379A32F1E61228E653D3A4EB32AC93601A906A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558208, "uuid": "7b84b3c3-6644-4c38-9689-e88b96e17d84", "value": "1536:L58qi4Si4A/qh3E2wI3FjrDTL4P+bSTCYR:L58qi4SiJihbwmFfHo+OCYR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558208, "uuid": "2f9efaab-eeee-4359-a5f6-515f4d7fca09", "value": 50256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558208, "uuid": "235d04c5-ef23-42cf-a47f-c1b96b9aca84", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44cdbb68-04f4-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770558259, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558259, "uuid": "bf9017d2-e45a-4c52-8b84-8de471a95510", "comment": "Malware payload (Mirai)", "value": "963b5b1519e4525e846f86965b93cd55", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558259, "uuid": "a11ff83d-cccd-4524-ad1e-392d80813d50", "comment": "Malware payload (Mirai)", "value": "96ab6353ca4e1e61da16d1c11fc79fa17d4cdf81723aeaafe22ddc2f2075103e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558259, "uuid": "32350c28-3b74-4775-bbe6-b85a9c210ecc", "value": "T1AAA2D029D349AEF4DBEF9DA052C2C2C276F947C7278AD8E240EEAF013506046B749D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558259, "uuid": "63d2778b-469a-48cb-b505-5158dc2b1069", "value": "384:m/JywWc84Tp2YshxqlDeAkSqjGJLeCE5zRW6C5aM4uVcqgw05VxJK:mRxsSVsMD6xiJJE5zRWNf4uVcqgw094", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558259, "uuid": "ac123c21-2abc-4227-8c74-0e1d74780f39", "value": 21884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558259, "uuid": "cd7ed663-0cc3-4e9f-b88a-7179feff71ab", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44d2e386-04f4-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770558259, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558259, "uuid": "77c183f8-94f5-4c8d-aa7b-4e37b4dd27e1", "comment": "Malware payload (Mirai)", "value": "9d94132d0cb398bafca823c923d29035", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558259, "uuid": "4009740f-a874-435a-92f8-51c73ba92904", "comment": "Malware payload (Mirai)", "value": "14f8adc3d3b0f826c920dd85d5ff132a8eacb4541c9dc1add9feadef31da871a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558259, "uuid": "2a71e286-477c-4309-8cb1-ee97f304a6a9", "value": "T1A6B2DF3C1B151A98EE1EC0BD83AD1B603CB41F2591429E4B6207FD97AF568747453B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558259, "uuid": "4fe0662d-a385-41f7-a52c-d0b2b2380670", "value": "384:neD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuixmdzJgGlzDpH7uNj1JA4d:neD8ZSWvZHZbs1row697qohQvg9xizJ+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558259, "uuid": "3caec1b9-0f2f-47dd-861c-9ad347eceb97", "value": 23784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558259, "uuid": "63c654fe-8ff5-473f-ae8a-5fd1ddf4cf88", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44e17ed9-04f4-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770558259, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558259, "uuid": "70292476-d9c2-4f6d-bdf0-955bf805d32e", "comment": "Malware payload", "value": "64921e34f553aa7eec41986db89c7216", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558259, "uuid": "13c32a35-909e-47e1-98d6-00d367f1b9cf", "comment": "Malware payload", "value": "0e5aeafcf6aaa473109251bb5f3d91653d32d9783f493cab33095b2fd3304c6f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558259, "uuid": "72d3bd56-9ded-4146-9eed-3df38b3f85af", "value": "T106F329167453AA7DC042C0308BFBC7A17934F4696332467F378CA7793BA0F655A2E9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558259, "uuid": "2c796ed0-da45-49ff-8a30-222c0a871777", "value": "1536:Ua3nvD8R9djTzhHNc7VvBHtQEdFspnobno4urzzdzay:U0vDEnjHhu7Vv5vspSno4Wfdz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558259, "uuid": "8197c4fe-f773-416f-8a9b-2cd7b10a12f1", "value": 163648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558259, "uuid": "b6acba90-5ccc-48b5-846e-5b15f296bfff", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "46856f8d-04f4-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770558262, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558262, "uuid": "26767c55-760b-4be4-bf42-aaf2b84678d8", "comment": "Malware payload", "value": "f6e521714f072732e7a65f504a975d84", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558262, "uuid": "25cabef9-32be-4579-b733-cb873fce4559", "comment": "Malware payload", "value": "56c128b32f46924bd1cdd7a0b899e4c5ed2dd365074450a6c9967f8cef77e42e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558262, "uuid": "9fe35811-583b-4a65-8bb9-266d401ffc99", "value": "T12C868D43FCA159E9C1EA96308A6282527B71BC485B3123D37B60F3782F76BD46E797", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558262, "uuid": "758b3829-1b9c-497f-943e-6b94b8db3e01", "value": "98304:o/Yyn9to4QoPelEEa6+nQHjn6PMoFBmaf4sdcJZu5Eg:oQQo4QoPZ4b00sdcS5B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558262, "uuid": "ca314225-f5e7-41cd-9dcd-9404f3714eb7", "value": 8406392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558262, "uuid": "232d6ea1-2cee-49de-9654-9da1f1359075", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "666b7cce-04f4-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770558316, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558316, "uuid": "674318cb-00d7-4471-a383-05bd166e3878", "comment": "Malware payload (Mirai)", "value": "1fe0693c816e7c433355778f56d2cdbe", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558316, "uuid": "b0f714d6-0adf-48c4-9b0f-c2cb35d3a6d5", "comment": "Malware payload (Mirai)", "value": "e7dc1aeefd378db04cfcbdc88a7822ff03d868fda8d4dc34e804ee6e5af4b4f5", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558316, "uuid": "b50401a2-f0e0-47d4-9d14-ec06051459ac", "value": "T1DB72BE30238E95AACD30A8B19EB8CA48BF938B71C1C235375A540559E742E4B5AFD7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558316, "uuid": "371a16a2-7295-4771-ba03-80682e8ce39e", "value": "384:57O+0tPS953YTcTKRmCDPAYSKtF33hymdGUop5hbI:tX0tPYApwEHVv3s3UozBI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558316, "uuid": "1bc030d8-afeb-4fd4-8d9d-72ef6eae3366", "value": 16640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558316, "uuid": "32253cd5-2eec-48b9-91f6-2f70f191e328", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6929d8b7-04f4-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770558320, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558320, "uuid": "1806f28c-eb0d-4967-beb0-84ff63ec431c", "comment": "Malware payload (Mirai)", "value": "e0b22208e6fdf838dc99371520c0b918", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558320, "uuid": "34c3af85-3321-4d1e-beab-b644e6a96607", "comment": "Malware payload (Mirai)", "value": "8382ea685f22b25761f3c6d9c41fd194e4e73b612832c27fc9de38bed8291bee", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558320, "uuid": "170af5e5-49d1-487b-8072-a045b05ec166", "value": "T1E9A2E115BE1C82CBC832253955D9EAD21252FC72F2DDCC193540C15FF4A33A96874F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558320, "uuid": "c1544101-1dfc-4223-9ca7-7b10aab3df8e", "value": "384:MgWLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXaqOKV14b+502F2vwA9dWuMW21bAK9:O98o08kxofBE+ZkXaqGbp2F2TWul0c5o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558320, "uuid": "0472641a-7329-452e-b5d0-ea70e8259543", "value": 21500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558320, "uuid": "b83f9338-d762-46fc-8963-e2ca9d8fdd5b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d8eddd5-04f5-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770558730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558730, "uuid": "5d4f9a9b-ad2c-49f7-b459-603d46185445", "comment": "Malware payload", "value": "d302e1dd83f8afeb4d6a015b650b15d9", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558730, "uuid": "290ce08d-4d0e-4490-9692-e788e9ffefda", "comment": "Malware payload", "value": "ef5f75d17ca3382b9978d0b5ee897df06aca7dc19c79f79064e8dcaf00b9954d", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558730, "uuid": "83506a12-1b08-4aa6-9243-52a050e85af4", "value": "T1FA41BCE1B97087327A44D33CBA8E41DA498745B785043C59BC5FEC093F2897972A67", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558730, "uuid": "8e7a5e50-e51e-4778-a223-d50f8001eec0", "value": "24:SZV3N05iDYmadeubH2Q6IU4hBeopqoDsxFzou9JCqPqg2Dy3dS0IFFzo97:IV32mle1Be+v4zJ9JrSgU2dtuzE7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558730, "uuid": "76360cd0-d3d0-4c42-be1b-000926d44742", "value": 2086, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558730, "uuid": "55ead044-c9c6-4b72-af5d-d517c268b5ee", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d979e8b-04f5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770558730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558730, "uuid": "2387c7bf-be11-4109-9d91-6c3c4196013e", "comment": "Malware payload (Mirai)", "value": "7e435708ed726797cf441728149b7a6e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558730, "uuid": "2a7ebd01-1f73-4a9e-85ee-d24314fd588c", "comment": "Malware payload (Mirai)", "value": "08a4f291c3fa697aeb28083baf378104cbb3a3dc1c5952844ea705e7ca856fac", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558730, "uuid": "17e6d04a-7dac-4a78-aacd-4a773d7a3e85", "value": "T12241BCC522465B702DE3ACE722F9CD88F2C9B5E110C79F26B5EB75E0214CD84B188B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558730, "uuid": "f24ad332-c976-4eb9-87a0-0e33f6fea144", "value": "12:q0F7LNv5mFKX0Fa2omFKX0FqiY4zmFKX0F/zmFKX0FCLgL+mFKX0Fki+ymFKX0FJ:vARfqFv4JhkDF15MZNarSKfBrH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558730, "uuid": "35aef552-3c82-4bb2-b05f-f05dcbe89199", "value": 2373, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558730, "uuid": "77f0eefa-ee84-4f75-9ef2-3d68513b38cd", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5da97b41-04f5-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770558731, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558731, "uuid": "eddcb0b9-7ed0-479e-afe9-b13ff97e1344", "comment": "Malware payload", "value": "ca3559f2d252f0adf7848636ae27b360", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558731, "uuid": "483bdaae-cb4f-44a9-9b34-b7e326b8dfa8", "comment": "Malware payload", "value": "66b5e739cdf6432034dd0074f4e51b757423d7e97be06198760cd451a3efd7a9", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558731, "uuid": "7ff9f115-b0fd-4ef3-9027-4429448370bd", "value": "T1A4B09B4F50456031E5C9704BD16C62AF441B51171FA04547651654C5553D79CD6135", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558731, "uuid": "92a096fa-2b2c-4a58-aadd-5d8b37df520b", "value": "3:TKH/T+jP0SDLVy4MEcDDDt3QJJMRBmUSxvXGcL:MKP0K9aDxgJJQwUSxOcL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558731, "uuid": "78ce826a-ef96-401c-b613-4017bbe34047", "value": 128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558731, "uuid": "79aee682-9e11-4b90-bb55-5920394ac57a", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5db18446-04f5-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770558731, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558731, "uuid": "b343a6a0-eaed-4ca2-b7fc-c214489db7f6", "comment": "Malware payload", "value": "80778bf10208c2a5f80f81e3d1d68fea", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558731, "uuid": "a92d754c-ca49-4258-b310-f38c527f5b37", "comment": "Malware payload", "value": "756f70f8147284081bea9a421fb559eee77bf168bfd2325e14649420296b003b", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558731, "uuid": "2908149c-00c0-4935-b8d9-6eaf11cd6cd6", "value": "T14C31EEE297706730300904A96AA72744B6B870866F983974B7F8CE91CACCF1A5736D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558731, "uuid": "902f0c56-805e-4376-9c70-fb8230ef41f8", "value": "48:cY8Ff44LIwNsi7t8Jvt83N5NlERVz584NK2:o1Nsi7t8Jvt83r/yNK2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558731, "uuid": "038cc311-fd75-4f3d-9b4a-920b73afd447", "value": 1828, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558731, "uuid": "c256822c-3b71-4841-8af2-4d69676bfb86", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5eb32732-04f5-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770558732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558732, "uuid": "b4ee934e-6de1-495d-b7e7-8388f7d8474f", "comment": "Malware payload", "value": "08e6bf9dd426983dbcf614d73c8f6f38", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558732, "uuid": "410f7321-0132-4239-90a2-ae391e0c5e16", "comment": "Malware payload", "value": "003cc15529a44da386d80778123058fd653f6c16ddd5698210b1e1d044dd3fb3", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558732, "uuid": "9361e960-69ae-4c03-88f0-58a2409f6416", "value": "T1972162DF94B515F2565DCFEAB3B177B8A00A83C33C6E5A44E8DA8CB1C496D053410E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558732, "uuid": "831fe80b-e1d8-41ac-b5f4-d98886e59275", "value": "24:GAPAN2a0AaeA+XAMA4ypAKAe1YA3AfJNO/AWAmNaAHxAsMmAiAQsAqAA10+KAjAy:GSfa0grDdmlDyWsJE/HJaIYmHXshJ108", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558732, "uuid": "e90ebbc5-818b-43fa-a108-bf20394b31bb", "value": 1385, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558732, "uuid": "0e183276-27b7-40dc-a13a-4c87e93a8574", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6db53bb-04f5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770558853, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558853, "uuid": "1a939df0-629b-4633-a49b-52122ab69b0a", "comment": "Malware payload (Mirai)", "value": "8cc3722b92d1c03ed9ff745d33d7be87", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558853, "uuid": "fd379ba9-39ce-44b1-8891-173adb88cacc", "comment": "Malware payload (Mirai)", "value": "a23d5faa660d3089c23b16d64b71df15fcddcaeaf6d25903880cbd5d357a25ad", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558853, "uuid": "9adff3c4-7832-4e53-898d-db02e6d78093", "value": "T19DE32AC7F800DEFEF80AE33648570905B630BBE115921B372257797BED3A1991963E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558853, "uuid": "770cda7b-0c96-4e32-a974-810c6ecf8603", "value": "3072:umhTDH80J178lKxlpjARKWidb0Q9imVvjbiWL3txyQUcrc:uETDH80JV/jARKndb9iILvyQDrc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558853, "uuid": "62688d8c-6efb-4bbf-8c5f-877bc17b977d", "value": 150464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558853, "uuid": "0d544852-4104-4760-a686-2462c8cd64ee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6e1162b-04f5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770558853, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558853, "uuid": "95d8eb65-114a-431d-83dd-fc002dd00e47", "comment": "Malware payload (Mirai)", "value": "43adf91953ce059bc84f6c4838ae7549", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558853, "uuid": "8e8f97de-e48b-4b55-b5db-8f2a36db11f8", "comment": "Malware payload (Mirai)", "value": "8b37e35c27d9333547d32f1f0f388907941f556efff9a5566c7dce943a753e4e", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558853, "uuid": "c72ba5bf-fdec-411d-8290-af0bd8bfab3c", "value": "T141D32A06730C0A47D2632EB03A3F67D193EF9AC121E4F640355F9B8A95B1E325586E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558853, "uuid": "47716102-52b8-41ff-be80-58aa1b550c11", "value": "1536:NroGHNTotNzJIBUiCxfytateQgfxTazw8o7lLkJvAhh3rp+pxQfqQLJVs9:XOCUiCxhtuqw17lbhQMS9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558853, "uuid": "65f392a3-5090-43c3-8bfa-2c6b9edd046a", "value": 134036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558853, "uuid": "76318cef-4475-4fcb-90ee-ac5aed5e263d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cec4131a-04f5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770558920, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558920, "uuid": "57eae011-4258-4bc9-9b7b-8893519bdcd8", "comment": "Malware payload (Mirai)", "value": "9678b0dc2a684f00e03e657292ecac14", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558920, "uuid": "5f6b80c1-e029-4750-b6d7-7165a11d8b8c", "comment": "Malware payload (Mirai)", "value": "aa70ed57a5a83470e7e6df9c97bbab5c97c7b4e51c0c7de97889376fb0d01a71", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558920, "uuid": "c0b2fcd8-9823-473b-9b9d-ff8c7988c136", "value": "T1FDB36BB3DC26AF98C615D074B0B48FB92F53A59482471FBE19B6C2B44443D8DF606B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558920, "uuid": "5d83a5ef-a39d-4980-a842-90e3e8ae56c4", "value": "1536:WTW/VCxsHZas92Li62C8HSKzRpv0PVmAlo2W8zDW+ztKVV:WytCxc9x62N1z+Vm12WsDb8D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558920, "uuid": "6ea2494a-08da-44ed-a5e1-73ca3bcab537", "value": 117568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558920, "uuid": "9da55b92-a962-4f9a-8705-4a98125f524f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cec57596-04f5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770558920, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558920, "uuid": "c6b725df-1c77-4bc5-9a47-4f89b7106273", "comment": "Malware payload (Mirai)", "value": "6eb6a9e4efe1b40ecd5624e12145f9c1", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558920, "uuid": "bc48a0fa-2065-4668-82ab-5756beaddbe1", "comment": "Malware payload (Mirai)", "value": "a42f30e431db856cfb34d069107790ddbe7c736207792b234b8cf6f53a0e446f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558920, "uuid": "3db5e0d5-fa79-43b1-ad35-a911ec66ebb6", "value": "T131D30945F8404B23C6C611BBFB5E428D3B2A17E8D3EF720399256F60379695B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558920, "uuid": "f30e5386-ed0b-4cef-91cd-d8fbfe25333b", "value": "1536:wKdzElm18uZJjb0AxFa8eAZHk4VB7fzTTXvpDg4CvmPeqZfJ20lC5wyw6RNPkT+s:wKpnI+U8e947LHvpDzCGtRJ65JKD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558920, "uuid": "8e490325-3621-4d72-9dc0-3154bcfa173d", "value": 133920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558920, "uuid": "11af6439-98f4-443d-a792-2fff06b577b8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cec654d9-04f5-11f1-8369-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1770558920, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558920, "uuid": "d6be851d-7ed5-448f-8718-5389cecc6e3f", "comment": "Malware payload (Gafgyt)", "value": "c9a52cbcc6e55404b2d93ac41d4395eb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558920, "uuid": "a265e44c-7517-496e-8f88-6991b4026ca6", "comment": "Malware payload (Gafgyt)", "value": "d0923867764fdfcf2c400bd8a4312f56a3116cdd527e95f0260f3f75bd61a871", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558920, "uuid": "6223acdc-144a-41c2-8baf-05171df16155", "value": "T196442A4AA8A16EF7C194FA7565F359350717E9011B0F1A8AA53EE7F0070F9CEB00E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558920, "uuid": "665c382c-be76-4941-8466-bafcb0ab3479", "value": "6144:YWM/YyoNyvtUmoiULu4CpD2cg2EnnqbrzyNFNv71NGC5ieRnDDP+4lo:ZM/YyoQmmYLu4Ct5gRnnqbrzANv71NGH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558920, "uuid": "faae23a4-87d5-4079-8b33-f57eb362344e", "value": 259958, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558920, "uuid": "c7fa78d9-6660-450d-aa75-e1a1eeb36252", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cecc1ad7-04f5-11f1-8369-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1770558920, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558920, "uuid": "01a235c0-c5e8-4724-a59b-4b5c57e3104e", "comment": "Malware payload (Gafgyt)", "value": "f21673defd9274b6ba116546ccdb3d36", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558920, "uuid": "27bf88db-189d-4c42-b2d4-fa57da361bd8", "comment": "Malware payload (Gafgyt)", "value": "cd9351ff48152ab2946f137f543c724d259c0b0d16ff244e7bc0f31c6bbda427", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558920, "uuid": "e1c461be-5a75-473c-8144-6da91d4a6e6b", "value": "T1B993122DEF8C5BCCCE5F6973FAB0266F49481090E3BD8B183162665E52B850B6BD74", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558920, "uuid": "88ed791f-772b-487b-838d-4061c0d5921c", "value": "1536:neuT7jkpBC2yM74Z3/9bvKxsW3gfWaAYGFVr0MVsJ+gEscT5uU0D2+8MwjAUa:neuTEpqrZ3FulzaXGVr0MaJe5uD2+8M7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558920, "uuid": "ab69a38d-781b-41b9-aafb-43c832205436", "value": 90336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558920, "uuid": "18c4359a-782b-4c4c-abd5-50e67f3c3907", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cecd572c-04f5-11f1-8369-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1770558920, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558920, "uuid": "77621f2c-fef2-406c-b798-55c6c826ad05", "comment": "Malware payload (Gafgyt)", "value": "ddd171110ebeae98e3854cbc3dfe98a0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558920, "uuid": "80afc90a-c74f-45df-a9f9-10347da934ac", "comment": "Malware payload (Gafgyt)", "value": "d7228a12529e07a5ce561381f1eaef4be4b8ce5b35615a1f58a5f1ffdee0d069", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558920, "uuid": "52892db9-df2a-4225-913d-5937d335033f", "value": "T14B8302348D449FBBCEF34D3217099A244FF54E78336E6C341950A683E9534A5B682E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558920, "uuid": "2d75f3dc-ebc0-4504-8b29-7de032055beb", "value": "1536:XRf7pE8OP5tMBZrIPIbdwDFK41zF9xWssue69MSF7tFIV0H4Kk/qH3IE7:h7pa3s0Ihqk41p9xVsueXK7tKViyqXIU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558920, "uuid": "f0316463-83e1-4650-b483-1630b30ac751", "value": 88724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558920, "uuid": "916be741-da54-467b-b732-050c7bee028e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cecfdac3-04f5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770558920, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558920, "uuid": "f4557bd5-134d-4dde-b7d4-2471139ddaf1", "comment": "Malware payload (Mirai)", "value": "fb3cc01cb6c62627cd82b4c626c208fb", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558920, "uuid": "20eec367-a47e-4d62-b883-9b33753672d2", "comment": "Malware payload (Mirai)", "value": "2a1fa6b56477cec0dd7d66be8e5b97fbc44e03bc362e8b2fbf33bfca238fe737", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558920, "uuid": "d25a3cac-2632-42c9-9d8e-a771687154f5", "value": "T1F1C31B45FC405B23C6C612BBFB5E428D3B2A17E9D3EE720399255F60379685B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558920, "uuid": "eea21d47-b0db-450a-9e98-d2f3ff601151", "value": "3072:pKaprehXQOXWFh4UXIkFYPpB5vW9QsiD:pKplXgh4UYkFYxB5e9LiD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558920, "uuid": "a8da5cbf-9c28-42b5-b9e2-93bb1ea2ef1e", "value": 129824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558920, "uuid": "745e6cec-9269-4e0d-b95d-9b0e86124ccf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ced29faf-04f5-11f1-8369-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1770558920, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558920, "uuid": "ebf0eb4b-2030-4ab1-b827-fef9f33b2426", "comment": "Malware payload (Gafgyt)", "value": "ce16ee3ccbfda161181f91d8ca884353", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558920, "uuid": "d0a732c2-ef04-455b-804d-4b9cf62c1a30", "comment": "Malware payload (Gafgyt)", "value": "3668a46d035359b4430234769135e47697bd06ca72f48df7255b51394e0c0bfd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558920, "uuid": "cea06eb5-1c2f-4ae7-accf-b586a8fb989c", "value": "T1EE9302B947A05DB4D52D3CF1B56A96CE07CAB964C79339A2686FBB61DCC30C303681", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558920, "uuid": "8a075821-ebf0-4ea5-b269-f274331e2288", "value": "1536:tgQ7TGP39Wv/ytO7WXrd2CFEye5ORR2m9fBIKvW6HAA17apjOASB3mtux1eGxkeo:7HGP39Wv/yteurd2CFg5q2g8LHwAQ3GH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558920, "uuid": "8a4adbee-e1bd-44e0-9ce7-a721ec003650", "value": 89948, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558920, "uuid": "1b9c328d-70c4-4205-9288-160080db3875", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ced3a860-04f5-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770558920, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558920, "uuid": "d064cf20-200b-4e2c-a6b3-ff3ebc4fec0b", "comment": "Malware payload", "value": "277dab4c48fe6e3fc501a5b0b004654d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558920, "uuid": "7b491a39-6b78-47b3-b385-f9d2ee93451a", "comment": "Malware payload", "value": "73b642965c25dc5ebbdf7c33736d35e2abe96b14bc9cce88ea88d0d43eb6d3ab", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558920, "uuid": "f00f77a9-3fa3-449e-b75a-d94990932bc7", "value": "T1A59302DFA95BB624E17848B7DA3915CCBF497C1346C50B4746BD33BE89E22C12729B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558920, "uuid": "3793b455-d004-439c-b705-ed3662e38f82", "value": "1536:YB8cM1PtBdqoyeoSBnfBG2k1fNnRq6jQWpcvEWyCckW1tYwkOcOmW/Eon:FltBdqoyMVfBG2k3PjQL+UObmS3n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558920, "uuid": "cba65420-f1b7-4adf-a90b-37177277b4f3", "value": 93228, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558920, "uuid": "744acedc-5724-4f74-8ee0-fc5215032425", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ced533e0-04f5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770558920, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558920, "uuid": "ddfb3662-8f84-49bb-b7e8-b96c63248e14", "comment": "Malware payload (Mirai)", "value": "57aeaf64c5cb5ca35fbba1924c105dc4", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558920, "uuid": "a23b12e7-af50-4ee2-8a3f-18b409983f9b", "comment": "Malware payload (Mirai)", "value": "6b0ac310ada0d89113f71de80784a2aa57b352b87208668903d1468481a99ce4", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558920, "uuid": "747770db-1f49-497a-bc88-bb8baa033c2f", "value": "T1D8E30A46F8814B12D5C111BAFE1E528E37131BB8E2DF73029D246F647B8A97B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558920, "uuid": "cf6ec648-c9bf-4c61-acde-ab4b12fdece7", "value": "3072:SneaYCpnUa0NpgX0zXzztaMf4edUskfEvLo:qevCpnt2gXeXzZaxKkfEvLo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558920, "uuid": "14a53dcd-e8ad-4fea-a663-4faf2510a5da", "value": 144124, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558920, "uuid": "03da0307-9b39-4605-b2ad-583b24acf531", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cedd9d50-04f5-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770558920, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558920, "uuid": "1751ef5c-3046-4e21-9ff1-17f42cb6778d", "comment": "Malware payload", "value": "e0ad4e9f835810f892c50be1eb6f597c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558920, "uuid": "24587262-be1c-4b66-acd5-ad719975aac3", "comment": "Malware payload", "value": "2b81fda55c3c2a7862256b0d2443c359abbf4c125ff6111823d3c6c9588bb926", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558920, "uuid": "44c08f19-e35b-4af3-a4de-56f68c803e01", "value": "T16D730221C98A0A84F528BDAA0C5C8F81EBD03F4654BA92C7974DCFD35FD896F5017E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558920, "uuid": "d4076c76-04b7-414f-b6a5-7d27a097ee4f", "value": "1536:/0hOMQGREtbHz7foCTIyKuNXGbQfv0upJoPkv4u+qgw0k4Go/r/uog5X3u1D:/+OMQyMbHvHJJNWUX0PPkv4u+qgwF4Go", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558920, "uuid": "73a4d4b8-961f-413a-b111-80005c3c2f88", "value": 78912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558920, "uuid": "bb11a928-67a3-4a3c-ad61-946823f1c8c0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cee02620-04f5-11f1-8369-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1770558920, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558920, "uuid": "d99c825e-e125-4ea8-ab92-1330b3004754", "comment": "Malware payload (Gafgyt)", "value": "72ec98d9e1f74a759cfd1eea4d49afd6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558920, "uuid": "fb8151d5-cd37-4088-ab59-2c1db3899a23", "comment": "Malware payload (Gafgyt)", "value": "d4bab3827269ef34d2504fd73edbfdc5dcdaceaac7beb14ae96ef264d060481e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558920, "uuid": "616dbe5f-2e08-457c-9b39-012de175e3d2", "value": "T167540744FE144B6BC6D237FFF78E42CE36365B29A7EB32119A345AB037C5B9825291", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558920, "uuid": "960120a5-7905-4cc3-a385-0169024f6fcb", "value": "6144:qk63ac7dnUyOxQuxt/JAH4+psyH68IImBtylznGW6pavKFY/NeEQz5DoHJ45YM:oac7dnXOxQ8+H4+GobIImBty5vKFY/NK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558920, "uuid": "7c7ff7b9-1561-4fd9-8f72-7519edcc8045", "value": 289485, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558920, "uuid": "7e45c3f8-4fcc-4e08-989a-11adeeafa49f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cee2f1d8-04f5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770558920, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558920, "uuid": "baccf586-529e-4ac9-82f7-80518bb8f298", "comment": "Malware payload (Mirai)", "value": "f555026fb83a66928e005f2430811485", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558920, "uuid": "969c809d-bc7e-44f5-9f5c-22d0c02b3e7d", "comment": "Malware payload (Mirai)", "value": "211ada4b98d8f3401f23efda10183e66b8dd88ba52d9ec088dbfbff899590fc0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558920, "uuid": "2d8aed93-c237-4fb1-a8bf-967412ffcf7f", "value": "T15E442B87FD04EDBAF80AA73204D34B247231BB524A13553BB217B96A9D3B3D51427F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558920, "uuid": "e46e5d19-9c41-42c9-85b6-193b4b57c556", "value": "6144:7pkRrQBpN8pye5WhS3rvY6rsLLiwGO97SxF0ZvtFYGN5iz4nLDP+LlM:WFv85GO97SnqvtFYGN5iz4nLDP+LlM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558920, "uuid": "86ff475a-008a-49ee-af01-f93e2a9a2af8", "value": 278579, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558920, "uuid": "91d4a36d-b38c-456e-992d-c7ee60c88f6a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cee7eecb-04f5-11f1-8369-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1770558920, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558920, "uuid": "0201dc5f-f9ea-4572-ba64-b0afeb1828cc", "comment": "Malware payload (Gafgyt)", "value": "d6497cbd84dcbb08c90a76b54cef0fc8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558920, "uuid": "329e5a47-ba1a-4f74-bd9a-a583e2048fa9", "comment": "Malware payload (Gafgyt)", "value": "efc6c68f797adc3e490885e893eb2a980e881ba95fc01b319825b0fa13a0e8a7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558920, "uuid": "d1277542-df83-4d99-9cc5-bc4cb4b54ee6", "value": "T1EA540904FE144F6BC2D237FBF79E42CE36361B69A7EB32019A346A7037C5B9865291", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558920, "uuid": "430dffad-f08e-4e8e-acfe-66f272230654", "value": "6144:tf3xbR8pgK0WbNA/Pq5Yx94WIa09bzImBty2zhEwVVvrFY18LE8EshXIAlYlM:JxbR8p30WbQ5v4WDAImBtymHvrFY18L1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558920, "uuid": "89a22659-0b3c-4495-b4ae-44a7ab8b81ae", "value": 296908, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558920, "uuid": "f88b1d0b-7821-4132-a2d1-6a308f03c5be", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ceeb2888-04f5-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770558921, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558921, "uuid": "330b9d36-30d5-407e-893e-d326fbadb535", "comment": "Malware payload", "value": "5352af660a9cd4cd64e75c2b601c7664", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558921, "uuid": "7091d367-d1ff-465f-96f2-966628b649ba", "comment": "Malware payload", "value": "fcc9893c6761e914368d8e42dcf89c0b03142400c9c5161bb73a6145b8e86f3b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558921, "uuid": "738df575-6db5-4177-800a-147c1ce62866", "value": "T128931216C2181A98F9A46DF7EE3829FEC29E0FB931C338259F112D767784F0511991", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558921, "uuid": "25273a45-ebef-4d34-9e69-fd4d278f4718", "value": "1536:4qPeCwkQI4Px/ctv2xdSlbQ9LJodV9VNlZRaNPgEKqi9ZRNtQYGeFrwMkzQwRYGs:pNKBx/c92xdEs9WVNlZgPgErY3P23QqO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558921, "uuid": "dc316ccc-31fc-493b-bf7b-76804b853ce5", "value": 95796, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558921, "uuid": "c59b70ba-f5f1-41b7-b237-96f62bb2ebfa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d05b2757-04f5-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770558923, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558923, "uuid": "6f509691-f6a6-4833-948d-cfb4ba83a2ea", "comment": "Malware payload", "value": "01efe23a5aa03dfa33595a9dd0c585bc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558923, "uuid": "31cc0803-c1df-49fc-9015-0d9bd72575b0", "comment": "Malware payload", "value": "69444ac59bcc61e632f99e10f537cd48d08a201c175d2aa852cf2d03b7bcaeac", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558923, "uuid": "d96787d2-4896-4fe3-be8e-ca79c43b9dbe", "value": "T17D730262DAF4E155C5C9A1351CFCB61D0FAE521CB6049AD12FC93476CAA3B70FF650", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558923, "uuid": "b1956ef9-4b35-4734-b459-1c9fb13dd5e9", "value": "1536:WUor7MZceZSb0DzSicalZ1JLslHTRY6XaXnouy8l8zwb7JDc2MJI1bYU0Q:+r7MhMYDzjcaR1oFY6K3outl80xc2UUT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558923, "uuid": "6fafa19b-3745-49b3-8ed2-3693164eb0ac", "value": 79528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558923, "uuid": "1e832a9d-2d1b-4752-8d16-f61b9a463a11", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d060a60f-04f5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770558923, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558923, "uuid": "5a8204e0-9cdf-479b-85d8-2bd105aa3267", "comment": "Malware payload (Mirai)", "value": "f33aca8b60e3c2c584e1cec8542bcbc7", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558923, "uuid": "64a2f917-3f29-444e-afac-92404834da41", "comment": "Malware payload (Mirai)", "value": "7ddb979c979ad1c5e1c9ff8a49d21367c2dd901639d9ac43152991bedad21bb4", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558923, "uuid": "b6446583-9668-42d2-b4c6-cba09dd0b2db", "value": "T11C04D816AB550FFBDCABCD3702E90B1139CCA54B22A43B363674D528F55E50B49E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558923, "uuid": "03e8f64f-0a19-45e4-9550-0be71e219c50", "value": "1536:voltIeuARGmltBg1tLaEwQqGmHC6ExJQhG1DTKbU8KZ6WMhAVcURLhVDZIuC7pDT:vStIUGsqoQqeGbtKRhRLfDh744Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558923, "uuid": "a138c5c5-d6e6-46f8-aee0-10c54e4bba0b", "value": 177764, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558923, "uuid": "e9bd66ad-6532-4172-bbc3-ad5ab23c4b4b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ea67c67e-04f5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770558967, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558967, "uuid": "855ee8fc-d85a-4ce9-a972-f9a288a3d082", "comment": "Malware payload (Mirai)", "value": "5446d1959c1fa21a57a4fc01c62a9d9c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558967, "uuid": "a57a418a-aa81-4050-ae62-6ffa8a859fac", "comment": "Malware payload (Mirai)", "value": "4e5b0f47cc8521cb666757e0773d74008553baa9cfbe3535b7f7c5d0656cc760", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558967, "uuid": "2109f1f7-f339-4b20-a398-3e3fd49e69f2", "value": "T18A04971E6F228F7EF668873047B74D25A76823DA27E1D644E1ACC1105E6039E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558967, "uuid": "625ee0b6-b816-4df8-9821-c44d2c748417", "value": "3072:WuIugLmKfzVLjCtjWdu2eWBY+192huuHC+rN:JrYmKfzVLW6dPc+WhpHCEN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770558967, "uuid": "a237bd98-04a1-4242-94d1-83ad3b7dc8c3", "value": 173860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558967, "uuid": "477ad7bd-ad69-4cc9-b82e-6a815c455bfe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "58504485-04f6-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770559151, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770559151, "uuid": "5882a7c2-1cea-4a27-b3a3-37e5301f9827", "comment": "Malware payload", "value": "6cdb4c03f3733d0a450fb4d2e38865cb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770559151, "uuid": "48930cea-143e-43c3-8109-5fbe5db796c4", "comment": "Malware payload", "value": "a8608f71e175e5ea616b16fe13c2c31318027555e5129e12e3a0a86741be59e2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770559151, "uuid": "c0475363-9f1d-4663-bc98-5e7001356fb5", "value": "T187853391DD14EE0E935BD8AFF53E7372DB4668E334ED9D720F0A1850C76A6607028D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770559151, "uuid": "f28f4b50-12c0-416d-85a1-7adf9837af40", "value": "49152:Im17K4Ciz/vN7mdqSknMrH9z3QGNeTlIZSL:Z17K4CY/17md0QLQGUTlIZk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770559151, "uuid": "7354e3c8-d1cc-4046-8b49-2ce82b85c2c4", "value": 1839676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770559151, "uuid": "c63d0c4c-aa4c-4eba-a503-22eec9563d21", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76005fcf-04fd-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770562207, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770562207, "uuid": "18c0db52-523d-46af-af3f-aa428110343b", "comment": "Malware payload (Mirai)", "value": "2473c2a561acd57410f462f603dccfa0", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770562207, "uuid": "1dbc0784-d252-4fef-a710-c6e7762fff7d", "comment": "Malware payload (Mirai)", "value": "b41eb4fa4b1270f8b9f6a723d57f144f24f3f677e49cd340552aa6a4a457b251", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770562207, "uuid": "587134f8-edc2-4efb-981b-dff56e59402a", "value": "T14A510E9B01089B319F0FCB9D77F431B95306B1E396DBC644E944099E5FC698C26CDE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770562207, "uuid": "2727cf05-b4c9-4175-a317-5e5c7b4d46f5", "value": "24:oF2JM8mbiBsxuZnEKEnE2EhEy+YbwJoJUfvAhM3a:oF2JM8mbiBsxuZnncvyAYbw9AhM3a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770562207, "uuid": "64c88516-543d-4989-be00-53d4f753b742", "value": 2881, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770562207, "uuid": "841bc982-5b4e-4d92-b5bb-ddac7fcf90b4", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7613dced-04fd-11f1-8369-82aee05be84a", "comment": "Malware payload (DiscordRAT)", "timestamp": 1770562207, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770562207, "uuid": "46433d86-a16b-4921-a83d-1c85c3e40f32", "comment": "Malware payload (DiscordRAT)", "value": "44cb733020cee0f7c01d2d217cd5f533", "object_relation": "md5", "Tag": [ { "name": "discordrat", "colour": "#cc0866", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770562207, "uuid": "e1fd0117-1003-4838-9459-2c17c8277ade", "comment": "Malware payload (DiscordRAT)", "value": "037938ce1ec876a3da5071b04f579de26dbb9b28b97e8a6f107fd3ad934a6439", "object_relation": "sha256", "Tag": [ { "name": "discordrat", "colour": "#cc0866", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770562207, "uuid": "da206117-520f-425a-a964-d379fd476ac7", "value": "T14573B8C877AD8903FBBF5EBD147141524B72BB17E935F68D088C54E611B2B828C42B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770562207, "uuid": "90c0796a-223d-430e-8bbe-ac27984f3609", "value": "1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+rPIC:5Zv5PDwbjNrmAE+DIC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770562207, "uuid": "8230c4ef-7869-4d9a-b335-7720d271e578", "value": 80384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770562207, "uuid": "d3a679d3-f4ee-4e76-a386-850a7d85b0a8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "77a6f9a1-04fd-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770562210, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770562210, "uuid": "1a840eab-adc4-4793-8793-7df1b3e93912", "comment": "Malware payload", "value": "9cdf17ed5b52fac130b8f980eba24c26", "object_relation": "md5", "Tag": [ { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770562210, "uuid": "9a99e409-180a-48e4-9af1-40616885dcb4", "comment": "Malware payload", "value": "7260a1d0dabecfacdaeb0aa91fb3aecd504b5fe8cc82d36dab7d6ddbcb4c2d75", "object_relation": "sha256", "Tag": [ { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770562210, "uuid": "e1c0ebc9-0c88-4cd9-904f-c4b4e22fa540", "value": "T1D6858E5AA7A801F9D0ABC274CE03451BEBF2B8461770974F17E05B9A2F23B615B3E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770562210, "uuid": "a3893f3b-bda8-4546-bd3a-e1d3a5f8c1cf", "value": "a00843668805598b49a20448cfe31906", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770562210, "uuid": "4c5fbaee-27cb-4e00-b1ca-87a1f8244f34", "value": "24576:Bhx7bsTf5iyfTblOz5iLZbKW+b3bdJs/4S5TjGIWr3h1BK8gFY:Fgf5iOrZbH+Lvs/4W3GIWrx8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770562210, "uuid": "37253d35-d44f-4731-9b6a-3ba8158fcd7b", "value": 1763328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770562210, "uuid": "dcf4fd5d-f2b4-4158-a56b-eb26ba4cc5a4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "77d3d2bc-04fd-11f1-8369-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1770562210, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770562210, "uuid": "cff30852-0f1d-4e23-b607-13d80e199b6a", "comment": "Malware payload (CoinMiner)", "value": "e93e2a1dddb0d7defa234de22c526c14", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gitlab", "colour": "#a79648", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770562210, "uuid": "808a8e9f-d6e8-4fb9-9dbd-ff739e00c272", "comment": "Malware payload (CoinMiner)", "value": "a200e2f9035fad25d58782a9468fbe1783e54609c8d08a0cdc5911171cb40996", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gitlab", "colour": "#a79648", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770562210, "uuid": "af3d6290-ad22-48bb-96f6-195483348416", "value": "T12296CFDAD16E44D2DC053FF9A8142AC74B2547328A740028366FBD898F775FEC05EE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770562210, "uuid": "e137b4f8-2514-4c58-8b11-e015a9296cea", "value": "fcc736760ffc18b2096bf8dc1a972ac5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770562210, "uuid": "b3935809-9e0f-4dc7-9dc5-1b998c397a81", "value": "24576:Uo8xwcsbphbmanLU+G2wDgWJtyUKTnJPWp2NMb+ybkoC9g3eI3/S2abf4B5Kne3x:Uo8xwrcmHR6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770562210, "uuid": "5dc75d45-4831-4852-bc57-8390a53131c1", "value": 9422000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770562210, "uuid": "b2eea9d1-24a3-4120-b2b7-001db68a1437", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60c1d3f4-0507-11f1-8369-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1770566467, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770566467, "uuid": "48e6b2cd-eb75-4af6-ab23-080573f2cd71", "comment": "Malware payload (Vidar)", "value": "6b62dc42c83e0288d2a6f8298b864105", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770566467, "uuid": "a1ba7228-8e17-48ef-8959-0c2a8b9c3cd6", "comment": "Malware payload (Vidar)", "value": "4510f64b4bcae808385e575fdc3c7cc3f3aea43ad52585d7c68369f32cfadd3c", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770566467, "uuid": "407eaf77-da79-4e61-9309-1bc684568df3", "value": "T12E1423868B7F7E70CD9E617613C5EC01B0B6E50B8B10FB2C6C8C4ABE9D351D13A256", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770566467, "uuid": "e24340c1-e19e-4813-8420-fe480584ef7c", "value": "ee53c10aff1d01eafea53328179e33a2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770566467, "uuid": "1e00faa2-0256-4d0c-b206-f13cd440548b", "value": "6144:UudT8mchWtqVL32CUm9VfMpT9FmBi2DatSl:B1chsqh2CUm9VfMpT9FOa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770566467, "uuid": "66ae27a0-febe-40d7-99c4-51d58d696066", "value": 204288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770566467, "uuid": "ed6eacf4-275a-4cff-8113-ad92746d845e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9cea9a1-050b-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770568334, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770568334, "uuid": "1be0ed7f-cb84-4ec0-adab-c7c3d6a68fb8", "comment": "Malware payload (Mirai)", "value": "1214c46f662129b1a97b2808aafe205a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770568334, "uuid": "a5c4b4f9-dcba-4491-a18d-60680d7d0611", "comment": "Malware payload (Mirai)", "value": "94d25a3d003300a2a2492033ef563e62c537dbdb52a98f7f002faafe46324cea", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770568334, "uuid": "ae5b855f-3cb1-4853-86ca-b2f677572c58", "value": "T15ED3CF32E0086DA0DD2117B43476597C0340DEB40AD59243EFBEE5AE28B7DA57DEEB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770568334, "uuid": "918c5c4e-57c0-4ffb-82a6-4f2b20143934", "value": "3072:jNOFV2mOAc6NBmjOd1CVOHVv3WDxGGRhaUNhkv0ZP6:xOFgpOEoVv3MXL5NhGOP6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770568334, "uuid": "fd42add7-4610-4c5c-bfb7-f41d463c70e6", "value": 131656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770568334, "uuid": "6f86f233-af3b-4fd3-9a29-b2be24304924", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9d71b95-050b-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770568334, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770568334, "uuid": "8d0990be-e1e3-4ca5-9b12-2564a45423ee", "comment": "Malware payload (Mirai)", "value": "7cdb23f2a10801bf8dbb7934e893ac38", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770568334, "uuid": "732f2396-618d-490b-b8d6-330b6df1eb9e", "comment": "Malware payload (Mirai)", "value": "ad3236525ff180d2dd0e3c8827003be7b83b4fa52bb487e43c3d06b2bc056982", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770568334, "uuid": "c16d7e90-3fa7-41f7-9dcc-b04e676620c9", "value": "T14F5302F690E87DCCC1A65338160F1A833FC567B8608AA53A76C4F6654AB2340CFD8B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770568334, "uuid": "ba2ee3c8-4e1d-4d04-800b-ea7fded84357", "value": "1536:e1/S5aOdeB51F+yuXkoPgvFbFX6hTZ0f8AST+mLkg4azH/:eM5az1Fy0oPgdZX6hTo8RjLGazH/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770568334, "uuid": "ffdb219e-6650-49b6-a2eb-e8326a1042ad", "value": 60816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770568334, "uuid": "71ba0ad5-02e3-4603-b9a2-fc0f06c80e43", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9d73b01-050b-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770568334, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770568334, "uuid": "1618ecaa-994f-466f-a6e8-d079dc695be6", "comment": "Malware payload (Mirai)", "value": "efd34fb57b3c4454af4340dee674769f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770568334, "uuid": "d8f34924-d92e-4c3b-a6f4-703e15fc260d", "comment": "Malware payload (Mirai)", "value": "612a018ab8e2f3dcf91d45f001cc7fc42820a13c79deb944dec52c47ee600d4d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770568334, "uuid": "ba71d821-01bc-4b9b-bc75-f86adfec99d7", "value": "T1C2148120FA0663B1CC731A34A79A2E5A6E7704559FEB26312D1F533CDE628509B31F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770568334, "uuid": "8786af04-6818-42c6-b665-d200b5cfa828", "value": "3072:IcHZcggt1NJmeDQBwnKUDMaVsb3pjr1lCRaUKG:IcY5JpMByVs9jSFf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770568334, "uuid": "b81bd8a4-b32f-46da-988f-4f7ce33ab96a", "value": 205416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770568334, "uuid": "135338ab-701d-47b6-bcea-ddc1c57a0015", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9d790b0-050b-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770568334, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770568334, "uuid": "f1928a95-67c0-4099-91b7-7745c980b7a6", "comment": "Malware payload (Mirai)", "value": "9046520b94003e980c6f321ffabd4573", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770568334, "uuid": "fee53ebd-2ad4-43c3-bd5b-87a61fbff96c", "comment": "Malware payload (Mirai)", "value": "025f2454527adefd1dd2fd009a9f05d7a3968a01e04d7b6b7f1b3021b690b54b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770568334, "uuid": "5b8cdf75-1138-430e-a541-754ef96b5e36", "value": "T1BD146C2BB3C39CE6C51063308C316362776FD7081958EAFFDA1B3794A9977225A246", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770568334, "uuid": "2edf83ed-eead-4e00-962b-39a0d63c6eec", "value": "6144:1R9Om5159ZA0mzoWcz4Mm4ztkES7IKTtw:BZAyFzQSdS7IR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770568334, "uuid": "22700cf5-238b-4a48-9cc1-5ffb32c52b8d", "value": 197352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770568334, "uuid": "45fd366d-e0be-4abe-9424-afb62a0fa8b7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9d79338-050b-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770568334, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770568334, "uuid": "ba6fccfb-8c56-4808-85d7-9a12dcc6b64b", "comment": "Malware payload (Mirai)", "value": "216b04b06493fc7e99d938cb737c43d9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770568334, "uuid": "2691f686-a4e2-4ff0-b655-1dfede287065", "comment": "Malware payload (Mirai)", "value": "bcb2f561cf917aa6237d69267b6537c8e5be8a60a51d92d80f5a08fcfdebad37", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770568334, "uuid": "4093588c-90d8-496e-80e2-b2226a38169a", "value": "T1C7D3B021E4006DD1EC2129F578BA96B80350EE700BDE1582EFFDF95E647BD9438AD2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770568334, "uuid": "b2d82c66-39b7-4185-a373-0cbf5e3db58f", "value": "3072:PnicTtkAg7FSGp+VJE6AqUjq+c7zAbpb9/xP:PiySSGp+PMmT7zMpl9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770568334, "uuid": "a7f6d290-4406-4f9d-80f3-8c0aecc4b7b9", "value": 131664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770568334, "uuid": "76a9ec0c-9a48-4ac9-8200-6632f194e72d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9d83cde-050b-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770568334, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770568334, "uuid": "ab55836e-7939-4e64-adea-4aa30fc18678", "comment": "Malware payload (Mirai)", "value": "09ed0d33b4072d5abb9d8df867957b5a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770568334, "uuid": "43b7fc3e-65f5-4548-ad1c-189991564401", "comment": "Malware payload (Mirai)", "value": "ca7dbc085a3a78a18c90e433918e128a54683231d2dd002bec65dfa0a0a565c7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770568334, "uuid": "97f62faa-b2e9-4de5-b63c-969246e48e0a", "value": "T14A530251167CE83BCAD3D4390B6841F285D899E49896500F53CE7DF88A06C68FBAC6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770568334, "uuid": "c1a21e48-8def-4713-9721-7fb6bc0a0d72", "value": "1536:Idcqm5iERozq3p7o8FwOA4zCKOFGUfKbeH6UhV/R0TKmAQA:IaHJgMo8FwOA4zUFGUO3Uhn0KQA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770568334, "uuid": "67ae0b9c-dcec-4987-8425-7d807d1cd500", "value": 63936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770568334, "uuid": "d95f083d-82e7-4c20-9d8a-611346619bde", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9d9f3b7-050b-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770568334, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770568334, "uuid": "9d06eb9f-29ce-4a87-8505-71ef7be3d53e", "comment": "Malware payload (Mirai)", "value": "545b1b18f26d1bce3be80364f7d99bd2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770568334, "uuid": "6701aeda-9724-41cb-8ae4-e970fe58fab9", "comment": "Malware payload (Mirai)", "value": "13ad478a5b7ad2cde1f57dbc61cd3d8c2ed076246ede5cb656478402302034fe", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770568334, "uuid": "f3dbd2e4-62b4-4b7f-969a-ff9c01493285", "value": "T172631257FFDC0F9CFCDA26F907AE66CB27929430547241A409D68C8AD1AFDB1109A8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770568334, "uuid": "ca38debf-9167-4ff5-b001-37c3e113fd7a", "value": "1536:37MbwKNGjjH+Xq34n/q8Zu41zmX3sDgIrPQ:37Mbp2L+Xqdfoz2sXrPQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770568334, "uuid": "b4c3970f-77fc-42ff-8c7e-eb96eb07862e", "value": 70860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770568334, "uuid": "93b5f403-2de5-4d78-9955-07f7e2f306aa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9db9ca4-050b-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770568334, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770568334, "uuid": "6b637210-3676-42d0-806c-7bfb40a76fc6", "comment": "Malware payload (Mirai)", "value": "4c567ac83fb068f93142883c34857cff", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770568334, "uuid": "1c98ad74-0bf6-4ccd-b1bb-37fb75e5936d", "comment": "Malware payload (Mirai)", "value": "68dacae6fcfe2e84ee23cccf4b052eb438689d5349b8b775819d8e19a34ef67f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770568334, "uuid": "e93d2b24-d3ac-46cf-94ab-2ff4478b4db2", "value": "T17404392F358191F0F6411B746BCBD3976C390BBF51A9909F6B416329B6E0B7BA02C4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770568334, "uuid": "a6659575-84af-4195-bb1c-1978875539de", "value": "3072:7mPX5bl7RDfPIX5eG/L1AL0SFU66gOSNL9CnNgRdgJi55wEUXS:7eJpJUVD1A8n0YNgEJi5aFi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770568334, "uuid": "40b7ce27-e513-4408-bd19-f655f366c214", "value": 180808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770568334, "uuid": "438fd4b5-a47a-4834-92c1-adb56dabec59", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da4b6abf-050b-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770568389, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770568389, "uuid": "40877367-2b3a-4b52-a525-7615a67d8a62", "comment": "Malware payload (Mirai)", "value": "72a648a27542855c6c1476a0d23bc457", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770568389, "uuid": "24757f9d-d817-416c-8b89-772d5f56dec1", "comment": "Malware payload (Mirai)", "value": "9bd8c30f2acf743e260c70ecdcead6fcc9f32e47d1300d1c471e589604da242a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770568389, "uuid": "391f636e-c684-4fb0-89e8-0f81852bc9eb", "value": "T13EB3AF87B2907ABEF0A45E3FC4135E26A6259F705583273D71FDF9906E3A3503292E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770568389, "uuid": "533c0a4c-c9d1-40ec-a68e-e13b4a2b1599", "value": "1536:tdNSXAeuUGWnKYUqwaJ1Xq/3A5hcB57laZeCNjHWBOdiyWT15Ov6fHzO8rSR:t3SrlGWnKTU83AQB5A5Liy36fKUSR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770568389, "uuid": "9e44e7ec-c173-4495-aecd-94d50d1af252", "value": 115116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770568389, "uuid": "66782f1a-7472-425c-8bff-de40abfb7ca0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da4ed38c-050b-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770568389, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770568389, "uuid": "94ed2d4f-7e72-48c5-bffd-9ff4c76ad117", "comment": "Malware payload (Mirai)", "value": "e1d1af78d7a43863f9fb64f24f6608a5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770568389, "uuid": "f8ea1381-5eea-4b58-a01b-9be0588f8e82", "comment": "Malware payload (Mirai)", "value": "55dc4baa23959daf34e0cb449b65c676725d21152b02fd0b126a1f561aa9688d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770568389, "uuid": "abe119bb-631c-4790-8788-bc296d9ed99e", "value": "T1B47302A2216ADEA1E2B1843263833D497D32C466037452FDBC79A76EB486E50584C4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770568389, "uuid": "bd10924c-282a-4b4f-835f-7d63ea048d45", "value": "1536:a8zRnwvX0/jMQwZuOPFPijvDMwhQi1rYGhQZ9zWm23or9:hzRnwP0bMQ2RijvDZZ1rYGhG1323S9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770568389, "uuid": "65f2c3e8-1a89-4ec6-b56c-ece7df2240ad", "value": 74780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770568389, "uuid": "9ca01c54-d020-4758-830b-fa4c740c2c5e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da52c86b-050b-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770568389, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770568389, "uuid": "4dc21a48-5329-43eb-96a2-e5c17723baca", "comment": "Malware payload (Mirai)", "value": "500f5244bc2468c988aaf8e91f7a6b7d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770568389, "uuid": "6c247400-65c7-475e-975d-a1962b6fbce8", "comment": "Malware payload (Mirai)", "value": "3e01940026a57e1d67f6437a1d225cd54829f4c47e27586e38d09a0b628ee20e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770568389, "uuid": "b5d53cfb-8f84-4fa0-8ecc-072c8a73f803", "value": "T1ECB3E085B210AA55C02672FCB1870990A3B17E7B4B9A150B4473F5B46DBCCD47E0BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770568389, "uuid": "50ad7eeb-9d04-42bd-9bd4-f878d079c12f", "value": "3072:jx63zpjhO5z01nCU375P5wk5SOez7wu2:as5zqhr5Nzy7wZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770568389, "uuid": "c5eafc6d-719d-4b1d-a9dd-0f2335320fac", "value": 107680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770568389, "uuid": "2294ff22-4075-4527-ab86-f4af02f045c1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff05ea44-050b-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770568450, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770568450, "uuid": "7a524f68-f1d2-4c5d-9ddd-7dc50a022a41", "comment": "Malware payload (Mirai)", "value": "fec9829cd790f272b6631f3cf0b5addd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770568450, "uuid": "8aa3f95b-b3cd-41f7-aba6-d64c9626ae4d", "comment": "Malware payload (Mirai)", "value": "4294078f8a6f11bc1580f94b464cc5f5c58ad8b8f126116585fb6b2158bd8378", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770568450, "uuid": "6a9f264c-f38d-483b-bf7d-e66469830931", "value": "T1AE6302CB7EB02F16D0D8A1B5703815C9DC3AED8BE253869CD7D1A7950B3946351C8B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770568450, "uuid": "87468b90-7801-48e4-aa8d-d3311a22582d", "value": "1536:saxZLmYKVDNSl2y08yumeJyGYVmIMG4dNG:saxZLmYKX+t08jmeJhYTcNG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770568450, "uuid": "2890c512-e967-402c-8129-5ac77b4ecdfb", "value": 70468, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770568450, "uuid": "1e078f31-a866-41c4-807d-eed5e28ffa3a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff09ab3a-050b-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770568450, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770568450, "uuid": "47e95a1b-2643-4a73-b922-64a037959e8f", "comment": "Malware payload (Mirai)", "value": "efc8d80f5e5bc530490f668cc6c9e523", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770568450, "uuid": "f443585c-4d40-4b8f-b8e0-88031a1f1cd0", "comment": "Malware payload (Mirai)", "value": "d5099f92e118e65cdc0949fc76262956ca2b87d88f750744066b541ff099b5df", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770568450, "uuid": "b04344c5-015f-4d9c-bc30-587fca7642e8", "value": "T1D9C3F185BB6369D1C1A342BDA4C00AC387912E318BE317080699F674387DDFB1F69D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770568450, "uuid": "b38075b0-d530-487c-ab3d-816f93d33897", "value": "3072:OBb4K+nqsnSjZldbaUXGSgqTWo1OWqEwztlMMTnJ:0OCDjXG9qTWywxlxTnJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770568450, "uuid": "1564c110-878c-4d05-831e-03fb9b64b701", "value": 127816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770568450, "uuid": "8b79e4ff-1137-4446-8baa-81361679c00e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b072ef85-050d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770569177, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770569177, "uuid": "dfc90867-9aa7-4127-a5da-733bd9797a79", "comment": "Malware payload (Mirai)", "value": "c194c59b33c786f85bb35bf00b6b899c", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770569177, "uuid": "29097d8b-30b8-4f46-bfa7-81034ef13ede", "comment": "Malware payload (Mirai)", "value": "dfb29329607e0c1f0aca8c45b3f12669234c9f88a2f6404c5d333a7cf73abcf7", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770569177, "uuid": "6b9fdeb4-121b-4d1d-820e-85f3953ff28d", "value": "T15451C3C5B2966A30FFB25D5B35F5400474D0E096EAC7EE86D0EC66BC058EF09D4A4B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770569177, "uuid": "c492cb73-ae3c-45c5-9b28-171202e0b16c", "value": "48:vNoQoqo0ouoBezEoLoqolokoqoPFUfojomL:vNoQoqo0ouo4EoLoqolokoqoPFUfojoi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770569177, "uuid": "74995e51-e7f6-4b14-bcdd-2cefe6cb84bc", "value": 2891, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770569177, "uuid": "5f5598ec-5d9d-4572-829b-b130c1a9fcb7", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b074544f-050d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770569177, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770569177, "uuid": "76cda1b1-7f8c-4d6a-9315-c2829e0767ed", "comment": "Malware payload (Mirai)", "value": "840a0e6ecf9c1c4ad311006b86a94006", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770569177, "uuid": "e62df296-a804-4ccc-8d5d-839fffd5c8d8", "comment": "Malware payload (Mirai)", "value": "acf5cf671ac77737d9c62430cd9e0c19779aa6ed6cf52cf72cafd217a22ccdc1", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770569177, "uuid": "da6f7c2c-5928-47d4-81da-6f528125d669", "value": "T17F515285F3826831EFB25E5A71B48404B0D0E056EED6EE45D4EC7ABD884FF08A464E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770569177, "uuid": "b3491cab-585e-479c-9a27-17f3905803a7", "value": "24:v4OSLaIOSVOSnOSFOSFTykaUoOSZoOSVOSPMOSzOSxOS6a0g9OSCOSRrOl:v4RTRVRnRFRBURZoRVR0RzRxRPRRCRte", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770569177, "uuid": "2da6c0cd-a75f-4969-b872-378fa930b2dd", "value": 2723, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770569177, "uuid": "ee44f84b-7a3d-40f1-b559-a893998342ac", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b081dd6c-050d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770569177, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770569177, "uuid": "97960d29-d8f6-49be-a639-fa25210f706d", "comment": "Malware payload (Mirai)", "value": "6a5d5cb000147f2f858e06e3addfa26c", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770569177, "uuid": "bd3fe7c1-8764-46bf-98b1-a556d56da778", "comment": "Malware payload (Mirai)", "value": "8deb25a6fffc878eb8442e9132cba35ceb104a4baf54e42098c633e79ad80a16", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770569177, "uuid": "181619a2-6e1b-4217-b54a-953d90762d89", "value": "T1D151E2C4B296AA70FFB24D5A35F5440474D0E095E6C7EF85D0FC36BD054EF0994A8B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770569177, "uuid": "6a5309be-6341-4db0-afdd-55eb3e6cee60", "value": "48:vNUoQUoqUo0UouUoBezEUoLUoqUolUokUoqUoPFUfUojUomUL:vNtQtqt0tut4EtLtqtltktqtPFUftjtf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770569177, "uuid": "ffd46dc6-6495-4efe-b540-303b58039f80", "value": 2863, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770569177, "uuid": "b8e30859-6662-46f1-8c51-b43ba763526b", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b0825e80-050d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770569177, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770569177, "uuid": "2b83c81a-d952-4bf2-89f3-d43b140f3999", "comment": "Malware payload (Mirai)", "value": "d131e94135efc5ce710e74aa336fb46c", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770569177, "uuid": "cc11d555-5ffa-45a6-87e2-3a537d044ba2", "comment": "Malware payload (Mirai)", "value": "d6ff2fe9f33279b0d595d2bcdbb86ece447a03e8ce558e9a3b7dc12272ba5f6f", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770569177, "uuid": "30aa2269-898d-4c69-bdfc-f4c90754f7c7", "value": "T12751A3C4B3926A30FFB25D5A79F6401470D0E096E6C7EE85D0FC76BD054EF0994A8B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770569177, "uuid": "bca1cbfb-1aa3-4715-9a14-178bacbb9267", "value": "48:vNWQWqW0WuWBezEWLWqWlWkWqWPFUfWjWmZ:vNWQWqW0WuW4EWLWqWlWkWqWPFUfWjWY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770569177, "uuid": "91471373-4fd5-460d-b9ec-1f7bea3e03b5", "value": 2835, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770569177, "uuid": "86c6bbe8-5f21-4d7e-92d6-a89a2866a3c6", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b0908457-050d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770569178, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770569178, "uuid": "91b2e41d-99eb-49e5-9c23-78961d7bf43b", "comment": "Malware payload (Mirai)", "value": "9f0b20d5aa4cb467af0ae5b5382403fa", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770569178, "uuid": "2f0ca3f6-45da-45a0-afc7-676d42b587dd", "comment": "Malware payload (Mirai)", "value": "775a32a456bd818cee2b21495e177f3e7f90044241018c948bf2493d6a4539bf", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770569178, "uuid": "283d2691-5742-4887-a412-1a9c8fcd2c14", "value": "T1C651A3C5B3926A30FFB25D9A75F5401470D0E095E6C7EE85D0FC76BC054EF09A4A8B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770569178, "uuid": "bf0673a6-8918-4057-b02f-c94049b692e4", "value": "48:vNaQaqa0auaBezEaLaqalakaqaPFUfajamd:vNaQaqa0aua4EaLaqalakaqaPFUfajaI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770569178, "uuid": "28df6cc1-bd71-4d5f-a7e7-3a4f16c10ada", "value": 2835, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770569178, "uuid": "552ce3d1-319a-4e03-95bb-7347046af2c0", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b0a2acf6-050d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770569178, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770569178, "uuid": "b7ab1b7e-0760-48af-b7bc-8e2388bbb29a", "comment": "Malware payload (Mirai)", "value": "b5734b8e2199e84257260fdf6fc4cb6c", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770569178, "uuid": "fa1e740e-e9fe-4801-b49d-e865f81712d8", "comment": "Malware payload (Mirai)", "value": "8c577fa00743f9da931ae7b5d5bc5e4579eb5cdae9a45072bc77fe879fb3d4da", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770569178, "uuid": "ae04cf6c-e0af-42a2-8dcc-84fc0a37494c", "value": "T17051A2C4B2966A30FFB25D9A75F5400470D0E195E6C7EE85D0FC76BC054EF0A94A8B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770569178, "uuid": "02072aae-8c9c-45dc-a046-b196e83151fd", "value": "48:vNSQSqS0SuSBezESLSqSlSkSqSPFUfSjSml:vNSQSqS0SuS4ESLSqSlSkSqSPFUfSjSG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770569178, "uuid": "cca3a057-8304-4e12-83da-1e4219c1c348", "value": 2849, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770569178, "uuid": "fcaf0bd4-eadf-4ac9-9868-5c89daff9712", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b0b1c4f6-050d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770569178, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770569178, "uuid": "c5bb0577-ddaa-4324-acc7-6d007aeab99e", "comment": "Malware payload (Mirai)", "value": "6556b12130122e3d703d9d5618ffb92e", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770569178, "uuid": "e2e2dc2b-999d-4dc0-9a51-e4607340ad2b", "comment": "Malware payload (Mirai)", "value": "80cf925bd4f03b06764e32f51d9478a349f1053ee65042659f0b04e6d0a653b4", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770569178, "uuid": "fb2ef3f3-1045-4d1e-9d2b-f55705143291", "value": "T16851D1C4B2976A30FFB25D5A35F6405470E0E195E6C7EF91D0EC26BC054FF0A94A8B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770569178, "uuid": "4a53378b-22cc-4c29-b951-d0543b690753", "value": "48:vNgQgqg0gugBezEgLgqglgkgqgPFUfgjgmz:vNgQgqg0gug4EgLgqglgkgqgPFUfgjgQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770569178, "uuid": "6a8b6fe4-108e-4afc-9ee1-31d0c1a56d62", "value": 2877, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770569178, "uuid": "45e72609-5e57-4924-b36d-b6ada9ef978b", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b0e03b90-050d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770569178, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770569178, "uuid": "ef650206-ded8-47f1-b895-c10fe5f3001a", "comment": "Malware payload (Mirai)", "value": "64db1a7d172d9bace814ebf73bb5c459", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770569178, "uuid": "fb4f5429-c34d-4505-9b77-6b0a6c51ba54", "comment": "Malware payload (Mirai)", "value": "77724279d46695ca979728770a3fd506bf3d3ed1a68161e3b959c79de044376a", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770569178, "uuid": "40772e7c-4eca-4173-8b60-f9b7be6f6b30", "value": "T1B851A5C5B3925A30FFB25E6A79F68004B0D0E095E7D7EE81D0EC65BC494EF0994A4B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770569178, "uuid": "ea82b2e6-f81f-4e9a-ac6e-a4ea6cf789aa", "value": "48:vNBQBqB0BuBBezEBLBqBlBkBqBPFUfBjBmO:vNBQBqB0BuB4EBLBqBlBkBqBPFUfBjBl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770569178, "uuid": "f2c47c68-2d53-43ed-87b1-36a119633f0b", "value": 2905, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770569178, "uuid": "40388801-245d-4dfd-90ef-3b8a949bcccd", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b0e49cf7-050d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770569178, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770569178, "uuid": "30cc05b0-ffa6-47bb-8268-cd1ff6c1b7ea", "comment": "Malware payload (Mirai)", "value": "8a7551e396170511b7350da2aea6cfd7", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770569178, "uuid": "2838129e-5278-4f58-a7bf-92bd45a036ab", "comment": "Malware payload (Mirai)", "value": "82dd751218634bf77aab81ae285a801e7842bc9ea44e5c9285f158a7420cf854", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770569178, "uuid": "3fb19599-2fbb-475e-b3a9-38ec85b2b36d", "value": "T16651C3C4B3926A31FFB25D5A36F5450474D0E095EAC7EE81D0FC7ABC054EF0994A8B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770569178, "uuid": "7b706c6b-9509-423a-9681-76a1ef19f883", "value": "48:vNcQcqc0cucBezEcLcqclckcqcPFUfcjcmf:vNcQcqc0cuc4EcLcqclckcqcPFUfcjcM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770569178, "uuid": "d5a64312-c04c-4455-ae0c-752667623369", "value": 2821, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770569178, "uuid": "a2385214-1143-43e4-b762-cd002a335c4f", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b10e343c-050d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770569178, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770569178, "uuid": "e51273c4-b49d-4ce5-9e04-a4f3c00118c7", "comment": "Malware payload (Mirai)", "value": "1147992be8b943b9feff075603ce973f", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770569178, "uuid": "54da50ea-2893-4faf-b96c-17b9319cfafb", "comment": "Malware payload (Mirai)", "value": "4122ddc6ca9b9ce83bf29a2f98a946fb2115faa1f097f665b833fc7aecd912aa", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770569178, "uuid": "57c1f441-20ba-406e-bef6-d6e7691cd7b4", "value": "T1B65180C4B392AA30EFB25D5A75F5401470E0F095E7C7EE85D0EC66BC054EF0D94A8B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770569178, "uuid": "9c94de97-b195-4b78-8e0e-9518670fd168", "value": "48:vNKNQKNqKN0KNuKNBezEKNLKNqKNlKNkKNqKNPFUfKNjKNmKa:vNKNQKNqKN0KNuKN4EKNLKNqKNlKNkKb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770569178, "uuid": "b500dacb-a704-4b00-b94b-fccabe509faa", "value": 2863, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770569178, "uuid": "51c876d0-c5a6-4770-908e-c5156f936f16", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b11bc4eb-050d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770569178, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770569178, "uuid": "5c264577-4d3f-4ef8-a16b-1992191bb711", "comment": "Malware payload (Mirai)", "value": "0ac1df351ef7a481fe04df134ffad3ec", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770569178, "uuid": "d3053db3-706c-4452-9b70-de6143f60dc1", "comment": "Malware payload (Mirai)", "value": "302ba0bcaff824c20e1c08e08881e910829194bffe73e69e5f0f28e06146c075", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770569178, "uuid": "91b51a87-d9db-45f7-a801-35c3b3f62589", "value": "T14051C2C5B2926A70EFB24D6A35F6440474D0E099FAD7EF81D4EC36BC054FF0A94A4B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770569178, "uuid": "14af131d-58ee-4bd6-a81e-a127d9e97b44", "value": "48:vN4Q4q404u4BezE4L4q4l4k4q4PFUf4j4mb:vN4Q4q404u44E4L4q4l4k4q4PFUf4j46", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770569178, "uuid": "02942fd4-8022-4f6b-ad52-b932100ab4a8", "value": 2891, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770569178, "uuid": "28ed6dea-b521-44b8-bcc6-4e3bcf98cd0a", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b13f6e93-050d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770569179, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770569179, "uuid": "17cb0745-f383-4d80-ab1d-8dcff299e99d", "comment": "Malware payload (Mirai)", "value": "b3b9a0405a565dccdd4263df9212228a", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770569179, "uuid": "daaa6310-e5a8-43aa-9688-3e9aa0d285ef", "comment": "Malware payload (Mirai)", "value": "c09aa72d6896817ded85003d6741b26ab3b325b0a54f575efe26be983b7874c4", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770569179, "uuid": "9d0cba8d-35d2-491b-9f66-9fedfe518ecb", "value": "T14F51D5C472925A30FFB75E5A35F6412474D0E199E6C7EE81D0EC25BC094EF0994A4B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770569179, "uuid": "a39fad9a-58e4-4caf-8d03-f32e4a48ebb1", "value": "48:vNHWQHWqHW0HWuHWBezEHWLHWqHWlHWkHWqHWPFUfHWjHWmHZ:vN2Q2q202u24E2L2q2l2k2q2PFUf2j2i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770569179, "uuid": "4f15913d-48c5-4847-a7b9-621542e2ad8b", "value": 2849, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770569179, "uuid": "fbb71bc0-6f45-4f73-89c3-8aafab41e125", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d11a8125-0513-11f1-8369-82aee05be84a", "comment": "Malware payload (GoProxy)", "timestamp": 1770571809, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770571809, "uuid": "a81b6ae7-9043-4dbb-89d2-f8b8bc7169ab", "comment": "Malware payload (GoProxy)", "value": "d7ec845f42b2184ac8671a8d59ebecbd", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "GoProxy", "colour": "#48c16b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770571809, "uuid": "e2240637-cabb-4a11-8631-418c9c28bc44", "comment": "Malware payload (GoProxy)", "value": "36c82944e623ec681daeb8a13b72e6762013f321e42a7813b601a718ad782c4d", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "GoProxy", "colour": "#48c16b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770571809, "uuid": "d26e9d76-26da-4b60-aafe-fb120779d2f3", "value": "T173B65A72E454EAA2E7E898BC18D4E3497C663C0F8334DAF396C50626DBD52DCEE395", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770571809, "uuid": "63a298e3-a1ac-4a6e-9e50-7c292530aeea", "value": "4035d2883e01d64f3e7a9dccb1d63af5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770571809, "uuid": "eb4a9813-88b0-440a-b636-04757c62dc05", "value": "98304:0o30UVL+fQNTCJVOCeOs22yGlRddjNHFkgxxLC:0Q0ngTVVlXzjNHFtLC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770571809, "uuid": "46d29c1b-6192-4aa1-9c99-f5ee12b4e766", "value": 10908160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770571809, "uuid": "0c0f904d-509e-42f4-aae9-5975e1a49e37", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "37625c40-0515-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1770572410, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572410, "uuid": "d5b35cb0-7a53-4b5c-bb59-d85a27313b1e", "comment": "Malware payload (ConnectWise)", "value": "e636f626d0adb9b662eab991f65cbbe0", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572410, "uuid": "b4d8cce4-34bd-4d2e-bfad-b3b19296101f", "comment": "Malware payload (ConnectWise)", "value": "8ebafdc848a27308024df60901a11f6ed2ef6b737b407672490a248161513270", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572410, "uuid": "fa3b1d43-0d12-47d4-9170-3cc87f33dcda", "value": "T174A6231172E58179F1FB0B39FD3A91B16A763C699E63805F1394391E1A72E50CAB23", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572410, "uuid": "9b376c63-3fbc-45b2-bdbd-f92a511d1671", "value": "196608:XZJbjFd29kxmxZJbjFd29jZJbjFd29pZJbjFd29:X3b29kwx3b29j3b29p3b29", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572410, "uuid": "02b03673-4152-4a78-a36c-cdc9365bc26f", "value": 10067968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572410, "uuid": "b604a962-c1b3-451b-b7a7-8e96359c02f5", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ad068ee-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572470, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572470, "uuid": "24b88b6f-4fdf-47fc-aef8-e98406545839", "comment": "Malware payload", "value": "cbf69abe79d8afa69872ae239cdf177e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572470, "uuid": "4c723f2b-0d15-4d59-bd4b-1152c639765e", "comment": "Malware payload", "value": "47a20deb368d8d67663cea4e72696b07ea80b71ef6e06b39a7cae1d2bfd84174", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572470, "uuid": "a324680d-2b6b-4738-8805-0ddd6a9f79b1", "value": "T1DF54124E843C86DD08FA33BD91E4F6C0FD8EC06C9A199941F1FD025A6A9D5B2B4D0D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572470, "uuid": "7ccd0b5a-a0be-49f7-ae4c-dd55b08a5cef", "value": "6144:BHcxN8pZbuzK+Ug5xFKJopJ/PTZHgtSOPYAZ97dP4tQki3e9:B8xNS64g7FfxZ5OAY1dPHu9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572470, "uuid": "bbcf3a5e-168b-4acc-aa65-93afbd9a634e", "value": 283718, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572470, "uuid": "cfaa7c09-4a04-4aef-a198-05100a4fece6", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5af683b7-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572470, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572470, "uuid": "d84c0141-7c49-4bd0-9a83-6c7dfeb308e3", "comment": "Malware payload", "value": "62e4dcdcbac5bbd15a5b4a8c52b16646", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572470, "uuid": "1d755049-eda1-4b1e-b0e6-47d035a7e1c5", "comment": "Malware payload", "value": "f6ffd8ad900a5cb84f2d3eafa29b962c03bef13b2981d0da3b2f7c32c0270cdd", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572470, "uuid": "fc756fd7-a6d4-4893-b1b9-8ed022c32d5a", "value": "T114541331BA647CF4074C2B2119A5EF1B6C0199EBD0FD04C89F03F47E8893F99B9196", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572470, "uuid": "f71eb199-bca7-455d-b49d-c8dffb648f5f", "value": "6144:/20z5m2D6NVbyFYedFep+rolSz5cggOnpvseYdE0fcuToURj9:/L5m2D6NVbyOCeM9cggOnpIFBToAx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572470, "uuid": "cd4332de-f6c6-4d6a-8b3c-be888f8dbc44", "value": 293260, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572470, "uuid": "e0672c80-c2fb-4c02-8e7d-7c9c81193ab0", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c4478c4-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572472, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572472, "uuid": "924f4435-1efb-46c3-85f9-143cb23e3fd1", "comment": "Malware payload", "value": "93493ff3ea166ddc0c2633b5dad2ec53", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572472, "uuid": "33b813b7-d08d-4f55-bfba-13785df35b6b", "comment": "Malware payload", "value": "bbb2e2e04fb4354e11f634174fce6dcddc9e6c08e4d3082d5a3d3ef3289af4ca", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572472, "uuid": "1bbe79e2-480a-457e-b024-f4e7d87ff4ca", "value": "T1EE5423F3A73EC5F9525CA0E2C894C713E3B6E5B44CD2F9B0D6208A693D94A91F641D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572472, "uuid": "f89d7aed-9072-499b-87ba-44a3702ae19a", "value": "6144:CEI+1nfeL6hUvCdKHkJoKuposvya1rJGefPj1Y4:Cz+pfs6ZKHkJZuposv9jG4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572472, "uuid": "18d3669e-2bc5-4965-b166-2a57efedd04d", "value": 283711, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572472, "uuid": "736fde53-ba10-4569-aff8-ac1b39133d62", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c5065a9-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572472, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572472, "uuid": "5f0b4f73-2be8-4806-94e9-43771bf3d834", "comment": "Malware payload", "value": "be2d3ae26fa966082d542d4b7d6e4c15", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572472, "uuid": "470f775d-5dc0-49e5-b275-a75afe0427af", "comment": "Malware payload", "value": "993d74a02125a3de62ceaa17490021e22ed55b276f03e5f878d9e31bd2785b29", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572472, "uuid": "805ef193-e6e1-48c5-9694-5bd29adee6db", "value": "T15454121F093A947513AAA46013055F878F1858226DDCFA095E6E8327BFF7412F9B4B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572472, "uuid": "3b680d25-01f1-4565-81b1-77205ba6926a", "value": "6144:8SmphQ/hlt8MOdcvobX4K9OpG3G3DA0kpAq570HOBJ69ypw9S:8SGhmz8Mjgr4mUA0CPUypw0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572472, "uuid": "462d5ab6-077a-4640-abaf-f7edbcee561e", "value": 290703, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572472, "uuid": "46082437-21a3-4622-b66c-f8b6f9f1562a", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c60e925-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572472, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572472, "uuid": "77a3c7ab-2eb7-4d67-b5fc-063d7ae35159", "comment": "Malware payload", "value": "a54bb4fc93579a75f31d65f8ae438bbf", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572472, "uuid": "6e1a63a1-201a-4dec-996e-66ede2f6147b", "comment": "Malware payload", "value": "40c5e0001c12a6a69dc7af3ebefa72f9b643caa955afb50bf50e13e5f36e609c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572472, "uuid": "9de80ca8-0a29-419f-a726-15d2e728ba81", "value": "T11334DF264DEE9650C8F8F7C01486F51E1959CA10139CF6CFA93666E5B8FA27D9F023", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572472, "uuid": "6c973f93-ff2d-417e-930b-9e784035112d", "value": "6144:6fYXOP9LnpOiNvh4DxYdKfThecDMvcTTTTTTTTTTTTTTTTWJy:OYXOP9Dr41rU6Cy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572472, "uuid": "919c9c9c-6f83-4907-9319-4236f3a9049b", "value": 239697, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572472, "uuid": "fca82b02-ece9-4cdc-a02d-5e94e27f0c07", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2957ec61-fea0-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572472, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572472, "uuid": "99a3b6e0-e11f-48a2-b5c9-227afa0968ce", "comment": "Malware payload", "value": "6e216239e1283a1b13f2be9f054b4830", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572472, "uuid": "9a441579-320a-451e-958c-0c9499486d5a", "comment": "Malware payload", "value": "44e6478ee9b9f626656b8ab39c4e5871a446ac7bc0ef559a45cca9b497eda9ff", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572472, "uuid": "dce92f80-72e8-472b-ac82-a9447a7812d0", "value": "T1FA34F1F125A81163F3F28D7D740072F258B7C2202945BED52B49B7A6AEDDF42700AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572472, "uuid": "40b39199-bc36-4978-8103-e6c7d4283885", "value": "6144:vQoE0CxmKHbrCXjluKcJkvyzs1nAfLzzniZiW8wJ:svUluKcSaA6zzJWZJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572472, "uuid": "72911821-8c4d-433f-890f-7d2ec5d5b205", "value": 247895, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572472, "uuid": "5ac48df3-a62f-44c8-9c84-01e8ce3bbbd5", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c770860-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572472, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572472, "uuid": "2517aa6b-7926-4a81-9e18-52ea6145d523", "comment": "Malware payload", "value": "dfb992de8b986740c7d05db33e598874", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572472, "uuid": "8c7af910-796d-4d17-b646-6cecf723a056", "comment": "Malware payload", "value": "7822ea5acf4e8c336b4e332976e4d7e6db64b3d1148272d82eb309f5fcebd353", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572472, "uuid": "60f8d908-6144-43a5-86ba-468c0c7c14ce", "value": "T193541209819C2A914792AF19FC9B11454621B55BB04CD26D7E4388FCFAFEB2CDF09A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572472, "uuid": "e6dbb5ed-c4e8-4555-8a1d-741db382b851", "value": "6144:BFODLDSMlIRASZjWLJRzQZJhda4wTl777777W9cBL8L:jOf8+SZ4JUhXwTY9cBQL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572472, "uuid": "507b93e2-2a7f-4183-8bda-670c00da05ca", "value": 290705, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572472, "uuid": "036e76eb-5dfc-43d9-b419-0dfa47d32eb4", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c854453-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572472, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572472, "uuid": "811b61e5-157a-4967-bc05-c348d0ab98e7", "comment": "Malware payload", "value": "c166dbee1700726d1f712e17e9207522", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572472, "uuid": "8b539954-02ad-4db5-b2a7-b6a9edc72710", "comment": "Malware payload", "value": "7bb690e07256105e2b9d23917046ee4786ad1747509d21cc65736891fa17f53d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572472, "uuid": "d94c824d-2a0f-4aeb-9c79-9e27a83f7b22", "value": "T1AF34CF8FB488722657D428B41D47E46856CF6A89CFD4EF922AE4CE7ED251D0097F83", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572472, "uuid": "d017c408-98b8-4e34-bb91-d4ac93e6d4fe", "value": "3072:XObThcPB7NtfbBR6b3RvhIYDp/rjvxtKdGxhJUhxKQ0l16zxoJwZjWgbtNKLTzrQ:XObVM//o3phJzjvxtPhJkmOoJcgolqJs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572472, "uuid": "56e527a1-9e78-42c8-80e9-60810123ea6a", "value": 239696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572472, "uuid": "6fb4b15c-809b-478c-bc9e-1f598d8842ef", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c8a90a9-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572473, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "bedec434-384a-476d-8021-801d4021483f", "comment": "Malware payload", "value": "2d7cd22f21793e396f756885923217ad", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "5592746f-a61d-46fc-83b3-5f161d8dfa4d", "comment": "Malware payload", "value": "f46f21eb6e6e74967d731eb51f2d712aa7886a5ab1a5f53f1b11c21f1d1ba81a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "2100b2b2-2696-4b60-8afd-a9859e970365", "value": "T1575412BE60A34A7C94A46E9C57E6A45ECEA0A1121CBC7991FCF4753215DB01FEDB38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "3bece0df-4f17-4196-8226-ef5301b1dc37", "value": "6144:zlsVMTOSGHgJD8fzAZZO5I+aqSiJVXsq1gV9wlr:hUMTRG6oaWbL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572473, "uuid": "19581ddc-5ad0-48f3-8696-8406feabdabf", "value": 290684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "9c0aabf3-79d4-4b7a-88a1-c6ed6e301222", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c8c3f4e-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572473, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "9ff8f367-a5ea-4c6c-a799-10dbdf166218", "comment": "Malware payload", "value": "72963ef9650c1438d76f6f5b7d14cc79", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "76fb07ba-702b-4622-9007-5c62c61660a6", "comment": "Malware payload", "value": "d1bc0d1149418536755b00eb16ffaae1286220a7cd77ad83c012fd9be93a169b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "7d167eca-5879-4d2a-845a-60781ad5b888", "value": "T1CC24F1DB47F22D75F6B2E213FCDAC66CCCC06B5EAC0887AABA46912DA1441F50D670", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "0c5dbcb5-777e-4d2b-802b-091e7b49bef0", "value": "6144:sht/A+wBWYl1Y/CdyN+wAtsuCFwP6gG2kA+d:shtlkGadyN3Y6gVk1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572473, "uuid": "2194f653-24a3-40d9-b0db-50b664ba0373", "value": 213065, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "4f5e80c6-94c9-4813-9a7d-3107d4c2e7fc", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c8c7865-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572473, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "d2c75b28-604d-4f89-b891-b797a8e16bef", "comment": "Malware payload", "value": "ee8967301d69034ce4f372ae2a8ad0ff", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "312f3047-3904-4fe2-a225-1568d2a05ef1", "comment": "Malware payload", "value": "f625d5049cd7dc86c62db7fad8174b7ff8f862c5186f52b30c2345f5900a367b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "01c2f0b0-2ed2-451f-b9e7-be366a5cbf10", "value": "T10434F19B5B456F45A09F1F7303CC6FE489AD10CA654DE38097CEC9A186F8C7BF106A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "46e99746-29d0-40e5-98c4-b317131df02f", "value": "6144:wJghN8PKKbkUQZWlTOg5UxCKiFduNRhuom6KOlZrFQ0I7T7:wJgkPONGOg5UUb63hpm6Kkx87", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572473, "uuid": "b8b8f69e-b50e-4515-8bf6-23f8c3c384b9", "value": 247889, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "a094f925-13f0-4eff-b1eb-95825661ee83", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c8ce84e-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572473, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "6bd4cf63-9017-4932-833d-53b0de1c17a9", "comment": "Malware payload", "value": "8bdd963be10ee6199857931113c12d0f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "33ee14e3-514b-475f-a11a-89727b3a52a6", "comment": "Malware payload", "value": "117e0796a7af6b8676a3f645aaa63f94a75dc770c79a244aa0193088a350a911", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "a730d455-3461-4439-a281-d0e8b5606587", "value": "T19A34F0E7B0A73EB381174E19EFDF8F2F98120A64D16ADFF7113A915A88703645201B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "e25cf507-b79d-47e8-9b36-394a3196f1a6", "value": "6144:IPDoh4WQm3FLjOaxQwIkqVO9DnpflivDht:pj1PKwP4+p9Kt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572473, "uuid": "1f0be944-5eee-4543-a69d-7bc279dbcdce", "value": 247875, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "6f925117-1e54-4158-aef0-ee7a6c84870c", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c8fc1fb-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572473, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "75f81798-bb61-434d-a117-addaabab2a8e", "comment": "Malware payload", "value": "2b740082f8cea9cbb7968f84fbcbfe52", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "4b1462d7-bae7-4f2d-b18b-ea63d028642a", "comment": "Malware payload", "value": "0bf929ed9a3eb04dee14860ca5768cc596ddb8be07d22e06de96e3cd7d97b12e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "27003637-81d3-42b9-b578-61cba0d7e979", "value": "T1C434F04E037A107CE756085CF9C07E8FCB53A2A92D9F52C704E0E6971E6071B7A95D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "42d2be76-042b-48c5-8956-38217f77fd78", "value": "6144:5XUV2y7xSLcGBAYqL5roWyc7zzVpW8JDAzA1n1JxtJZ/TAbGzM:5ly7xLG2UczVpW8JgS1bvZyGA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572473, "uuid": "4fa2ee76-827f-4e1b-8202-385c69117e15", "value": 247892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "e162203c-36a7-4452-9e9a-e2719ad1551d", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5caa9644-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572473, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "0342bd52-8682-42bf-aa30-770880137102", "comment": "Malware payload", "value": "dec4ac3bbed05880160099769b413797", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "62b810e9-e68a-41a1-a832-9b6bf0390c1b", "comment": "Malware payload", "value": "5c78688c87e45f4acb635eaffa5123173f0eb274fe9970f88bc29d50f4939883", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "355daf0f-8999-468f-bb27-ee988fdc3114", "value": "T17034E1E8670C485B58FAE070A415F02AA35E37AA54775E387F5290CDDA598C3BD3EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "2c191703-fd05-4b36-9cb7-dabb6cc8e06b", "value": "6144:wmuqCJtZaLG++A7q5lhxPHIzSTtrK2frQRlwtLH3/:1eGLG++9lh9o+xucEYH3/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572473, "uuid": "acd1a0be-c231-43ef-9233-63c468b366e7", "value": 247892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "bb333232-88ca-479f-b6c8-eed50f4334da", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5cc219f0-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572473, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "3f8a05f8-d94a-4958-a0c3-4cdf0e35ae87", "comment": "Malware payload", "value": "c986b3e7fdd6e74217465c179cbf5a65", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "ec47b4fc-f2cf-4f38-ba41-831e75086467", "comment": "Malware payload", "value": "b9f4603efa249ba6b4ba6f432d878be6baed81c37647f6a622961423058f2303", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "3b20dfc5-ba29-43bb-9916-285f5d5ac544", "value": "T1C034E0F0DB4F47CAFE6D58D962E64D41E91B1C48A53EF13C8588221AE216F4F1FB26", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "b500da1a-2de3-48aa-9f0a-bc0a83ab2bac", "value": "3072:Nn96fI/AiqrKH+Y1WSCe5vDNY6au7ag7Vr2/ZUk/XP8XcFn0Mkw4/E/OzZBVJNMg:NntlHtW64Yu+NXc90g4/EGzZrJmYmi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572473, "uuid": "34f72440-d7ed-4821-ab5c-6de14e36d06c", "value": 247877, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "8eb698e5-478d-45df-89b3-6a56e4a803b7", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5cda94b0-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572473, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "c52d701a-54d3-42af-8fbe-d00053278431", "comment": "Malware payload", "value": "da5b655a916748b346b574d2818d996c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "b7292b4e-78de-4385-b0f7-c79a3e4b56c3", "comment": "Malware payload", "value": "4177ed4fde8eef4d7851336198217647bfea448fe0d6684a50b0c3e5a12404f2", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "a97d5a65-42bb-4588-bcf4-ef273737ce34", "value": "T15924E04E384E77FA180491AC9B52959B900F3DFC5C846B44CC2D377FAA3A61709ABB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "8fdc169a-363c-4b04-a2e1-5b3edd97dc6d", "value": "6144:EdtkbfgJHPBL8qHeOxaUYq7ApbXIdRvWB3/tsoKs:EIbohBre4wXI+VsoB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572473, "uuid": "4db19887-36b1-49e0-8cd2-470e27b28e6a", "value": 210006, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "83fce489-0466-4cea-90fd-2b6f1a839c59", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ce15c3f-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572473, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "71127cfc-ce93-4487-bd32-8771934c7e31", "comment": "Malware payload", "value": "5dea6bd75d7caa4bca8295ca038f7498", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "c18b4e74-c798-4049-97ee-76e1ce2058c2", "comment": "Malware payload", "value": "8bb2ef6891f109f0a58a599c81ffa840084cc157a74392b5c719a03ef6ffeff9", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "0983f8c1-d8b7-4b0e-a44f-c3f177d810fd", "value": "T10224DED6AFD81F1CD9003AEA4C94DA0B67CDDD7A61312C69E4A1E7E40713F6E02F88", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "71bf124d-8af2-4c76-a239-8778b8a241b5", "value": "6144:EBb7Nuk5e3xRNuPBbofPAeL+mLKTM5lq9Cnl:Euk5MfNuPBbon9+BV0nl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572473, "uuid": "4ae7cbc9-100e-4d27-b86c-d817fbf0779f", "value": 223329, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "32ab70c4-3beb-4ba5-a4a8-4c9e554f6b21", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ceb6b8f-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572473, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "f7d0b290-3c23-46b5-8354-1aa595ff8d8c", "comment": "Malware payload", "value": "09faa2753b59e1997f0d4fdee7d30064", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "fe68c644-9e39-4b5b-b9cb-de39b33b4695", "comment": "Malware payload", "value": "4c04b5890f9c266559d0a9cfe38f7c5f7a7a04385d17bb476b76104ed2a6d3b2", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "be6b502a-414d-4d3f-8323-8b0b05f166e7", "value": "T18434F1DA084DC1D9F6B937ED590391C28B2B47B21193A331C68732BECBF9401479DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "0e0ccc75-af97-41fa-b578-a4a3250a64d4", "value": "6144:EOGnTjdHiQn49UnK1uZ/b6nq8RrUGnjssssWP+wWULW2+E:jqgQn4ySuZ/b6nqQrUGnjssssWWoS2+E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572473, "uuid": "5f819dc9-79d7-42d7-ba79-36bc7d7a1908", "value": 247886, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "bc23bd09-9ecf-484a-b1dc-b719abdfda77", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ceea496-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572473, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "260724b8-524e-4d92-bff3-17ed0f0b8252", "comment": "Malware payload", "value": "c92b73e164985fe2408b26818ff6e20e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "58b23c18-abb0-4511-9f79-ac5179f779c6", "comment": "Malware payload", "value": "1738d0f6d4c5c48353e9f4bfa8cfc8074895f03c7391c6773725543967fab19e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "63f41872-091a-4241-a04e-3b5038dea6b7", "value": "T18234F011EB3BB92A1FD0F1DFFDADA99F610BD883D83624AE0514667B0D0712F86C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "2ebaf72c-d7d5-4c1c-80bf-d9528f865fe9", "value": "6144:zP9agL8kHDbb9d5x9t7smB1jXymT2HkB9oKaJYfZDFv:79a1kjVzZymkkB9oKaJi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572473, "uuid": "0fd0138c-087c-4566-b00a-0c21a959b1d0", "value": 247889, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "e510e311-a4d0-429a-a6dc-c8409d313352", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5cf4dc55-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572473, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "09c314df-cf82-4f1d-a4d0-1c9ab029361a", "comment": "Malware payload", "value": "3b9a11f29cd85d6091e8488de4309286", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "78d579fa-128a-434b-9127-f62016944a0f", "comment": "Malware payload", "value": "53b4ac22a9179819c9f7c4c25d1452eda22ffc0720be13bcdcabaeca10328ada", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "54d4e7bd-aac9-4b5d-ab39-6cc0cf2b5221", "value": "T1C214F1E7509711FD5768B48E3C33524BAB2304CF52A0CCD3EB6EA806D06A595A3E6C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "89d60a19-c5ca-442b-a08c-a66e79727fd9", "value": "6144:7N9YoGaqQeJ8e7q/B0CMUVsMQ9bi0hy71PG0NXIRiC:7N9YWqQeJRqGUyMQ1ny7tG0Na", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572473, "uuid": "0621eba9-d290-476b-ab75-4715e0f95104", "value": 208462, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "34431b5c-d2d1-43d8-a845-7c5342b6abf2", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5cfb2574-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572473, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "8031ab6e-8d0f-4458-b2f6-6457220ed93a", "comment": "Malware payload", "value": "944cd07de89ab8334c30bcbaec33e615", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "1f484c0d-99fe-4af4-b53e-fdc4db843eb0", "comment": "Malware payload", "value": "998ed3901349499962248402f66e93ae2c83fe6f10f63e64cb92806505a74f54", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "a146e085-d59d-45c7-9300-28965d9d8ad8", "value": "T14734E1CEC247B5BFFBC6368BC8EAFD72392F217B9753A0E104B854C95404460A86F6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "a1ff6ef3-d39d-45c9-b737-ec0189fce15b", "value": "6144:lns7HCI5I5DUzx/sANqm3E/Rneij4hwpxt:lns7H9yE/sAUmqeQt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572473, "uuid": "7cdf15ea-4870-4e43-9401-482538b897f5", "value": 247878, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "27ecaa42-8220-4823-9a26-624ef98ac45a", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d0479fb-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572473, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "2f7893de-467a-4c2f-ac0e-cf778986422d", "comment": "Malware payload", "value": "fd9ab174b6191d6c5544afdcb9c3081f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "839b0feb-6bac-48f4-adc4-1b4f1a89c0c3", "comment": "Malware payload", "value": "4535aa0618cd5f6f6b0f443b16db881e5698ea07c0d7630e278335e9318728ac", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "ae3dca8b-e48d-4a4e-9d6f-a903de1a7017", "value": "T1B45422C916E2B1063889202C1E63DD3177655CE3395A147ABC4774EB2364FB1D8CF9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "bcd07d35-f1e2-4147-a894-18e19b3ab301", "value": "6144:YKTQYsEo8XrlZYqBH5CEIrfqqeAv3frRlGzDuy9zBcfioYBzJ:YMsE3xZbOeAv3frR4V2fioozJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572473, "uuid": "addd9a95-b24c-444b-9fe1-eb284b6f73fc", "value": 290703, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "6952f92b-f3a1-4865-88c2-728dc079391a", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d04d754-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572473, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "6ce426ac-d426-4f68-baa1-ba33db7837f2", "comment": "Malware payload", "value": "ab157d8568e5625d19af4121b0a4cc36", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "437c9b1b-3416-4f04-ae53-a07cdbf944b8", "comment": "Malware payload", "value": "873cc698a1d6f976e8cafda1da81b89bcd68e123539c0eb4808321bfca5bf8a3", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "df6b2822-96b1-480b-b18a-151ae9386480", "value": "T1A434D029077CA4EF9109C2719C50FEB94502D46BEB477BEEC3C31A873DD505869B8E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "e5078719-b07f-45d6-9cdc-5dac1ed95e59", "value": "6144:8kCZ8L3BtF/0YbO14w/oHqO0cRmIYDH9a+7Tu:QZAFB1w/oKlZ7Tu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572473, "uuid": "6ef33d54-d6cf-4d26-867f-057719677637", "value": 239694, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "8a801cde-c833-4583-ada7-14e47c1520b0", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d1322ca-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572473, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "05958b7c-b912-4a23-9660-1264bf5bc8e6", "comment": "Malware payload", "value": "8b93f6eb07fe406f16fce79560f494ec", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "e636678e-14ce-4873-af2c-846a3656eac3", "comment": "Malware payload", "value": "138d95475652d80524b8ae3a723010b762f817a18f1fa5822c81f69c29e5b9e4", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "b8278e22-55ae-4840-9ae1-8fd5c70afd9d", "value": "T15C34F1FC13D3CF6EA3AAE1B22D0C423D22557D7965D681E941EB008127FC2179F61E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "ad44f6c7-bdca-4814-abb6-e474278d68e0", "value": "6144:j8G3f1dtTgkWdmidIgclymDl++TDgQsd5uUfgpnVQ:Xokzle+TDgQsd5uU4pnVQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572473, "uuid": "15a139dd-2aa9-47c7-b5b9-69a66409347d", "value": 247886, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "1e909136-fbb6-4b7f-9518-b68002eb74d8", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d14458f-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572473, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "b5c6c9bb-87e7-4dee-a6b6-2249a97b321b", "comment": "Malware payload", "value": "a1a5102e42fe259698cf24122d2ad23a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "b15e54a4-53c6-405a-8a66-8949729c9e7c", "comment": "Malware payload", "value": "b565cea0200de0c7e65ce76a00899c548704e77b95aee9c7db0b7de044f9b578", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "ffdf9e84-b3a2-4b4d-833a-9bb7ed09c1c0", "value": "T16F34BD6AC5537DB6E1C02E3AB9FFE34A35712A73DA3A9B23C43B71E079E909041752", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "0e5e9c00-7cb5-494e-adcc-06fad7631887", "value": "6144:/Mh1Jd2K/aCottwzDP+PJAjdQfHCtUIZNh:0ddrNotizKRGSHCtUMNh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572473, "uuid": "f45b95c0-25f6-49a5-898a-9768ecbe7b68", "value": 239684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "261134ae-25a8-4b4a-afdd-a72d59689267", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d14a68a-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572473, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "9b1c4cdb-d08c-46e4-b1e9-b4366244194f", "comment": "Malware payload", "value": "63efdaa0e409563cfe6c635da7792a00", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "a1bf97af-1103-481a-b51b-ea27477e17c8", "comment": "Malware payload", "value": "a6ab4c0c3dcb1aff81c68d8502470602680619b89bf652d9b4e6213193b5c0ec", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "45f43a6a-09d9-4d9d-b06e-fcb747257dd8", "value": "T1D45412E0E1DD7B48D9C8A46478E690F6E030873E0496AFAF9659F0D0D4CF99522B58", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "0e268beb-8e31-4a50-a70f-19ce16851204", "value": "6144:4bhGnq8Oswc5sbB7SDJLd3UbQXYRXGolsPY89tLd0AeN:UMdQB2DHEbQUVlsTtNQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572473, "uuid": "8563615c-4046-4317-aeac-e8ec02292fa8", "value": 290682, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "f0d5084e-3d19-4abc-9b43-1e38053c2782", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d27c05e-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572474, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572474, "uuid": "abb8c6d5-2f35-413a-a0d2-4b400ac18541", "comment": "Malware payload", "value": "1e2337c2937eced8af54f4265c366884", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572474, "uuid": "1ddd7288-2759-49d4-a9de-fe794dc7aca6", "comment": "Malware payload", "value": "40425fd23bcc042d976bfa1b72f5e9c6140a26f93cf4a6fe3dbeb6b127face47", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572474, "uuid": "23d577b3-33b1-497a-bd19-ba4a7ac9fb6f", "value": "T10924E073DBC74651A651BE42CECADE14748B47B060A281D9FD97AF3A3063365CE1B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572474, "uuid": "a6416d3a-f23b-4cb4-a236-6340689efcde", "value": "6144:UF0P72k7+5Z9icPG5hXujsSwfdhzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzj:UF0DtwZ9NAUI1fT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572474, "uuid": "fb226086-b77e-4e59-b1cb-40e16985e827", "value": 211020, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572474, "uuid": "d7c29cdb-d022-4e90-a39b-e449e5d51959", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d2c1dd7-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572474, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572474, "uuid": "09b2b431-3e47-4a24-8837-e66152fe78c8", "comment": "Malware payload", "value": "b7a849299993d609a71314792f92871e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572474, "uuid": "e3230108-8202-410a-95cb-4fd3889fc10b", "comment": "Malware payload", "value": "f4fe3d0e2822c6bc2fc437151323171e70206a869d269c8b53bb20a6b8809ad2", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572474, "uuid": "d7a04576-caf2-4f90-a856-53d3f62d0073", "value": "T1C624CF8E159A57E7DE11CD6C99A5BA870E33F826FE6400E80A747B6007135F3593F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572474, "uuid": "5eccc06c-7ad3-4dce-aa36-cb4452392262", "value": "6144:wVqrElHEmQtBnv8FKRyUvnWPYOAqWmgXIJt1V:4oBv8E7WPsx4r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572474, "uuid": "9dc2825d-1b99-4ab5-b613-04d49a9f4c72", "value": 211019, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572474, "uuid": "a9f26e56-cd5d-4e69-b17e-e00c3c29a49c", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d640bfd-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572474, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572474, "uuid": "068589ae-ff30-4d9b-9fcb-1de163ce355a", "comment": "Malware payload", "value": "41c17dc929d659dd158489e60a5fedbf", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572474, "uuid": "7838e95e-841f-4e5a-9676-e3c04b4dcd83", "comment": "Malware payload", "value": "35b341c0c4c7fb6584e2bfe6729a17e45854b875181050e296f6982ee90ed379", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572474, "uuid": "61aa0274-0b73-44f9-9a67-06d9cc72cbb1", "value": "T19C24BFBF0D944D84AA61534FFC0BEA1217956525893FD8044F9DA10EAE6233AFA43C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572474, "uuid": "344bd167-659f-4ba2-b300-cac679398827", "value": "6144:UXbsdPHiy8ONOpKMrEQ6TNiQHRX6R1o+KS093fzH5:UXbs5CyWAzQ65DxXOHZkzH5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572474, "uuid": "769bdaa8-c136-4d2a-864e-251cbad80038", "value": 223300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572474, "uuid": "c06e6dfa-6b0e-4558-a17f-cbbc40131230", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d8226ce-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572474, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572474, "uuid": "8c1bacf7-007c-4fe7-af2c-e4cc09a22dae", "comment": "Malware payload", "value": "c2aa2df4bbdf9fc37ad8098151bf6657", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572474, "uuid": "263b765b-bef0-4eff-901b-96f0beaab123", "comment": "Malware payload", "value": "4d7a9e499e5c4315d83a5a707cac51bb7bc50407f3884fa6517e6316a796704e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572474, "uuid": "4789eda3-d9d5-4cf5-91a3-e4c560b9c60b", "value": "T1453402AAF7DB6DACF8D15A30DBE8DC0A50BDB1349FB2863A4756610F287390C55EC8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572474, "uuid": "6d4e62b3-5877-4c75-ba31-9e826c3ca9fd", "value": "6144:v9BGNOJgVG4rtKkrni+qRZiEuGXf9cnQ/DlWH7qq:v9oN3QIKkrnVG9J7obt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572474, "uuid": "89c5dee0-153f-48c6-9c82-07381ff765b3", "value": 247878, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572474, "uuid": "427ce088-383d-4a88-95eb-10c516f2c402", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5da8595a-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572474, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572474, "uuid": "1aecb446-007c-475d-8d28-dd02c60df378", "comment": "Malware payload", "value": "4f789497fb360ccb53550748165609a5", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572474, "uuid": "3c1c569f-c5bc-4bd6-9b18-5a2340bbf4e0", "comment": "Malware payload", "value": "be34e321d2043d47d9483cc2595282747bb6eb6ca66dec6c729ce209edc56875", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572474, "uuid": "53af8be4-e7ff-4896-87fd-b331847d3a85", "value": "T12C542358C1DDFDA5EC7CE9B4389761A9828592BD0B6D7AC640CA2A521B80934F700B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572474, "uuid": "e8fd89aa-1cbd-404d-873e-f021535f6656", "value": "6144:bJrjfX9yl83BWyNv6b2A5qVSW5pMH3Uk5H7q:bJrjf4lwWyNv6b2A5qfiHEK7q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572474, "uuid": "adbe158f-fca4-47af-a563-f30822521ab0", "value": 290688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572474, "uuid": "6924c512-a1d3-4b02-bc5c-0ecfa0fc680a", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5df0c92a-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572475, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572475, "uuid": "cfbf18b0-3433-4662-b7f8-9be3217d74ff", "comment": "Malware payload", "value": "a3e0e701df2c1cbdee38b82fc7d8cc5a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572475, "uuid": "c279f56c-3154-43a9-8f12-173e5730d8c8", "comment": "Malware payload", "value": "84a9a8025960ab403829cb38bf51dd1645df14021ac2860a392c6a0ddea957f0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572475, "uuid": "30fd1cb2-5565-4506-8db0-01d4d0c4a986", "value": "T17424E03135F4DCCD506BD2F4E9D28C435AF29A6540B28D0E39F6B99B324C87B85496", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572475, "uuid": "3c9a433b-7055-4854-ae29-7604f2ffd4a1", "value": "3072:JfqtGONN0qMOml67vVwtvqPLCcoudmc2QQlx0t34jsfecXDAV0ac9k4Mk/cCf18:0f7266gPesQB244GMDA/cf903", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572475, "uuid": "a0938a56-4c6e-4a91-a762-511de2636df6", "value": 213059, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572475, "uuid": "07649fcc-6dd1-423a-af39-d98f6950e921", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5dffd47e-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572475, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572475, "uuid": "d534a580-4b0c-4ba4-aa8b-8dad2ac0b591", "comment": "Malware payload", "value": "0c3bfed14d9cb2844813eef5eb1d05f4", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572475, "uuid": "679d8acc-8e98-48de-babf-a1ccd18e1771", "comment": "Malware payload", "value": "bd30dcf28acc136db05115843c58725f9d2c38940edb0ca07da6f09f1e44327d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572475, "uuid": "067920a0-05d5-475f-a111-4365ae3e8539", "value": "T1B334E00B6928A9B73643E0A6F9F05C36DF6517DE3E963370FCD38B34828425E561EA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572475, "uuid": "30e9fab3-0346-45ea-b8a2-f4f1dd59ee72", "value": "3072:j9n9GZyDKRhZltZNEwty10y/pmsIBaB53z/yNScu0AdUfQffHtO73dDfQesU9tLk:jTmyDohFZNEMy+Nde8Qffg73dDgz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572475, "uuid": "b43679df-fb50-4a38-b43d-5ab86c90a21b", "value": 247885, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572475, "uuid": "d853bf56-2d3d-4914-988b-85252cf86194", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5fe3b3ff-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572478, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572478, "uuid": "19fd1292-2634-45b1-8a03-1ba23544b223", "comment": "Malware payload", "value": "1d4e7afab487ab1fe2f4ec2b569ba00a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572478, "uuid": "b164e936-8e87-413b-bb57-45ceba2e08c1", "comment": "Malware payload", "value": "950d6e35f40665ac662117b5166ab3b450824efd353e1fce2303d7e1352d556a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572478, "uuid": "740fcf48-484a-4a4d-ae92-5e21a4f86c8f", "value": "T192541267E14FF23AEBC735E401830FD1841B9D20D65F1042AE6FA91F847B641AAD97", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572478, "uuid": "ae759a60-057a-4777-92eb-a58a5e5983e1", "value": "6144:drN+cQO+XEIXvOn9cRJrvZ01Ntkm/fjQHbQ24j+ZKi/sYQqQu7gYwc:dsfpXEqkWg/TQHbQ/SiYQqQu7gvc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572478, "uuid": "a65487d5-8f09-4202-a4f4-3f4729521cb2", "value": 290689, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572478, "uuid": "9536bdc9-5f79-46d9-a08e-94247c3042ff", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "601bad93-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572479, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572479, "uuid": "d132700d-8dc7-4a42-b787-0ca146acf186", "comment": "Malware payload", "value": "ffce40049cedbfd5f0687415b84d8b33", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572479, "uuid": "4061e2dc-6160-48e3-93f9-bd3342d79379", "comment": "Malware payload", "value": "0c6c9ac87aad18dfb8e99c2a694fbcb570a7891c9d905df58c59f024e98998c5", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572479, "uuid": "f49776f2-6ea4-47fe-8300-8f3e84d7aa9d", "value": "T1B53401618727BD49D7AB867CDFE520227BE911030446E3E982FD51365D0CCAB0BADF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572479, "uuid": "e5ce3f8f-f356-44ea-b52e-7eaed3b5fec7", "value": "6144:S18Br+W28LRLoO5Vwj7FTjWN5rL///////////jeO7AwNhY6:S1UrzbRl6xjQ///////////KO7Awo6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572479, "uuid": "f213083b-9e03-4f4d-86fd-033afc4bf355", "value": 247884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572479, "uuid": "9347eaf4-0a8a-4e1d-bdc3-d8a71ee98fa5", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "602cff8f-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572479, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572479, "uuid": "47320f3d-d4cf-41f5-8799-fbd2ad044fa3", "comment": "Malware payload", "value": "82165487da08d037956c1bc0ad5fe235", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572479, "uuid": "c2dad996-f8d4-48e6-bc2c-7c19177562a7", "comment": "Malware payload", "value": "311ebb71042eb52c5546ca279b869712f823ed73ad8243d3f8bb5b4fd5d5d7f5", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572479, "uuid": "cfcb0e02-3cf4-4899-81d0-e6c42cca5f49", "value": "T1DE34CE4B3496EF440E39B2566BC1DF217F76A9827381F5B353097A0B22C4E2B0B973", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572479, "uuid": "b5856e21-beae-4c0f-995e-dc7810c7d029", "value": "6144:4ZupznLCauOlyOWqPSQMgFo9VRp0pdiq1/DO:g8kOlyTqKtTVRp0eq1K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572479, "uuid": "55b160b9-b6eb-400f-8388-e26d5502b926", "value": 239680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572479, "uuid": "0438649b-6b50-410a-987a-c915f58906bc", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70281738-bb53-11f0-b161-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572479, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572479, "uuid": "95da97bf-1f62-4883-b262-d5f75e62ef5b", "comment": "Malware payload", "value": "48fac59837f1256a42765083ef740501", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572479, "uuid": "41164f01-126f-4deb-9a97-e20870bcda01", "comment": "Malware payload", "value": "f97fdd1525fd9658352b793dc2e1a9b5ddac9ea24e95f8fc7d1780ef39d0960e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572479, "uuid": "d9c923c2-2ffe-4863-ae82-3cb4aa3bed3f", "value": "T19334CE4C7D43DDA1D8E86101A524D0DAEDA35396B3EC07B38CBBD40B986F1E9F8539", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572479, "uuid": "d443d76a-bf53-4287-8b83-3dd8ff9b90c9", "value": "6144:V2bJhTsAmXU/tAK+EzJxqj9bDHLIeNFzq:OhuE/mKrxqjJHk8zq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572479, "uuid": "44c42bac-c7c3-4fea-a6f3-fdc47c6f76c0", "value": 239701, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572479, "uuid": "4c8b2aec-f414-4999-a330-64f0b937ac7a", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "602e4ea9-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572479, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572479, "uuid": "297934bb-05f8-4948-be5f-2075f68e2e74", "comment": "Malware payload", "value": "48cb8484685df51a1291fc988c30751c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572479, "uuid": "86da5dff-dd2e-41c2-a1a8-bc9aa4ec85c2", "comment": "Malware payload", "value": "f17c4c796b969cf73950361600fcb341604e64d1893c279e16748eb3cceb7310", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572479, "uuid": "5946680f-c310-4a7c-96eb-8b43579647cd", "value": "T1D734F1E8997C8B478F171C89FC7D0D1F89F2D2853663A3148184CF90D9DAEE512B7A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572479, "uuid": "fd75a3f1-0fbc-45d1-a980-bb7e741d1bf5", "value": "6144:DE43F9+AzNJ+ND+xnqmPdXEEIoKvnxcEB+1lcb0xOnI:A4FkeN0YxnqmPdXEEIhvxpGl+oiI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572479, "uuid": "929bd35c-3bfc-4369-8997-f1b053b11f0d", "value": 247887, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572479, "uuid": "f98de2d9-e1a7-466a-96f2-a80817a13d00", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6041d62d-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572479, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572479, "uuid": "8161e9d4-e706-4056-b258-86f7ba2a5464", "comment": "Malware payload", "value": "a2028c7d8c38d7d0cda77e7792f05e4e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572479, "uuid": "88e5b5c3-81fb-4d7f-92a6-03f232281160", "comment": "Malware payload", "value": "7dbc5d640acd494de2c644bfec26a6256c0dea6f60ddbcd5337e334b88db57c5", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572479, "uuid": "1d892a73-cca7-4613-9df9-d00d590666e6", "value": "T15924CF4D81E689632677BBA1A13DE4B134CC012453D1E8FBC9E245AFA7E6538317CB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572479, "uuid": "de36e716-d316-4db8-9bf9-7af276a970b3", "value": "6144:DV8wps0Kzvn8oOFxJigsP0YMBVEaeylmxzUUUUUUUUUUUUUUUUUUUUUUUUUUUUUX:J8aKD0FxJigCtiNetxZoJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572479, "uuid": "19aed067-36ae-4d36-904f-75375894a101", "value": 213083, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572479, "uuid": "6ab2db3e-1856-4e46-9cc1-e15ee63acb62", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "604f250d-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572479, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572479, "uuid": "439bd4b8-1724-4211-b7a3-7a293666492e", "comment": "Malware payload", "value": "0dcc27f992e3c7034bcb0df7969a31a1", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572479, "uuid": "10b7845a-b808-42b9-9086-c3ce13a68492", "comment": "Malware payload", "value": "d39f0b6dc73c5ac2d5ab80e1302eb92006059b503ddc5a703dc4e3b19f48ce55", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572479, "uuid": "e3748125-9791-4a43-9040-a543328c9878", "value": "T1E334E040DC3B7C424C87D862BA81739C09D3E00A7296D9C72611BB28D6EC16B5BA35", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572479, "uuid": "e10cae9e-6c99-4d85-8b69-e1133395b0f1", "value": "6144:aDotexOpA4f60tF2BNzN74t8PV7Hkj0ZWZf6:a8teL4fVQrO8PV7H20ZWg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572479, "uuid": "b9c2a8d7-219d-4554-9622-9e9d344d2874", "value": 247898, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572479, "uuid": "d0869ade-a316-41f6-adf7-9a7205ba22e2", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60532d8b-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572479, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572479, "uuid": "e79be313-3bb0-41d9-9a82-717599e8ffe9", "comment": "Malware payload", "value": "3dbe787a2be1abe60bea0e4bc245e2a6", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572479, "uuid": "a304ec4a-1fd2-409d-8858-047245c111e8", "comment": "Malware payload", "value": "e4d52073ca64de5e3f4650c7516485faa70a52b273a0bc7edcc46b5fc58e9b04", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572479, "uuid": "3bcbde36-5c7e-4a18-8390-575d17e27a07", "value": "T11C541260784A83EA1F5106C6817C7A4E8F52DF8B872801BD87663BDB378F5C745AB1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572479, "uuid": "a373057c-2d63-4644-a8e8-424ce4b92791", "value": "6144:VwI3BKrYmFpf80xI9c3tvfVyIivT+mcnxMZiBq1xN4BIy7D6dncHk:VwI5mFB80dHjiimcxY1cBRDcz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572479, "uuid": "39a1e417-2905-47eb-94e5-5bd8e7dbc766", "value": 289209, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572479, "uuid": "1e5f56cc-401b-42a0-a2c7-3d0cb5bf136b", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6056f5c1-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572479, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572479, "uuid": "3fcd2453-5927-4c78-bfdb-e104035431d7", "comment": "Malware payload", "value": "6559f050cc51d3b68a2e384d359ec5e1", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572479, "uuid": "2a6ed5ab-0bc7-4b55-ae39-ae85e02015af", "comment": "Malware payload", "value": "b93c48a76e1af0e4ae8994bccd5bda4faa1f4207571f64c9e3fa2fb384c0adb3", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572479, "uuid": "b3ce6388-9334-4792-834a-5280f606ee2f", "value": "T16014E0F0BA7D6E00A04ED1B3FC24BB87962FDD387D7644E29740E95294ED9C0B9191", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572479, "uuid": "dd5fcfcd-afca-42b9-a6e2-b65c530f0b72", "value": "3072:dYFxX3gaWinttlTgiyXYmYJTAiAFgB1eJeQWXLZ5mCM1OOl+:iFxBDnX2vX3iTAiAFJJeVX01Oj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572479, "uuid": "2adba661-fdee-4e46-97ef-538fee2dd67e", "value": 208968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572479, "uuid": "79b96d20-9f2c-4148-a81a-e541e8537e5d", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0393ed39-992f-11f0-91a8-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572479, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572479, "uuid": "6cd008d7-785d-4efc-9b71-6ee14ffe2789", "comment": "Malware payload", "value": "3a45698c778a9b9640aeba1a98d63f17", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572479, "uuid": "bc3990de-6bde-412f-9c86-87c286765c50", "comment": "Malware payload", "value": "3e6654d75f7b37cd5420e66b8a8a42458134f131762841fe15d6e752242b7f50", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572479, "uuid": "c6e9529e-2874-4e5e-81cb-73955bd2dbfe", "value": "T1E434BDCEB466C9F8F8B8F24E52BC39DD67E05EC045F5A8D6033562CA12924963CE05", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572479, "uuid": "5f2460fc-8119-4e22-9e56-caafca5372b3", "value": "6144:hhaOSmYSnWiP5hbBrKO/qdpYWKdQjBs9RWnHfMF4Ttm4U:mORzbQj7RKdYIW/MuO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572479, "uuid": "88857d8f-4f9e-4653-ae82-7e389946e8ba", "value": 239682, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572479, "uuid": "e89b2184-8c2d-47b6-9abc-9e54628ea3b4", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "605b0c68-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572479, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572479, "uuid": "7ec0c432-b7a8-4c7f-ab66-539d799051be", "comment": "Malware payload", "value": "bf8a4361d5debf79db3f58b305bde5ba", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572479, "uuid": "8e66870c-7356-4f70-b3a8-edf0a781af97", "comment": "Malware payload", "value": "4b5859829eb8fbddb0d98e493ebb15a2d5b0ee4525d77715b44cc1e2507ea6cf", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572479, "uuid": "a8b5f778-e26f-4e68-8faa-952bb784d534", "value": "T17134F1A855BADBD0F232E5D8B1E2F4D7099FD73CE9FD04F884006968C94F649314E5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572479, "uuid": "b32efc96-5327-456c-bb52-798a7c6e1c0b", "value": "6144:SYnrnjN2SZwzG3UoQSGJlqp3RPd52Jf2HTo3h:ftZwzyUJJlqp3Nd52JfqTEh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572479, "uuid": "85fb82af-c5a1-4b06-911b-06a254fab5d9", "value": 247872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572479, "uuid": "6b039901-f2a2-432b-a6cf-de4f25b3a1e7", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "605d7e3a-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572479, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572479, "uuid": "782e38f4-e147-44cd-9114-8a03f34eb676", "comment": "Malware payload", "value": "c22202f0896b470690ed434be8fffcda", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572479, "uuid": "6cbb7ac9-2b92-42c3-af01-ed8c8ac3481f", "comment": "Malware payload", "value": "90a5033c6c8cfdce65da4aab04a804425b685cd018ebdb2d6b42b3addbd4409b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572479, "uuid": "f3e4b757-4501-4c8a-bc5e-624d1654eb83", "value": "T13C34F1A8612FEFDF79C10AC8ECA30C86F87367C3B59E0B9F61998DD550D5106C0662", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572479, "uuid": "8e3ede8f-66c4-4681-be80-9cd8f26cffe4", "value": "6144:uqMf1MPEmekozmV9qTZ4O2M0628bDxXPJ1eMHYByJIy:LvPYxI9LOdTZeMWgIy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572479, "uuid": "d6bdab68-cd62-456b-9a2b-42f474458488", "value": 247900, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572479, "uuid": "55fe6191-7728-40c9-b2a0-0769ae62980e", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "605fed16-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572479, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572479, "uuid": "0c3e7a00-8d68-4072-a324-60ab6bfc4bd9", "comment": "Malware payload", "value": "43141b8abd5415e83cfb522481c0e753", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572479, "uuid": "9a775a0f-833a-4f08-a593-0636bc3a0566", "comment": "Malware payload", "value": "9c3406298c63d66c3a7a8d7bcabc619961a15b44703152b5788b110b276cb217", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572479, "uuid": "8f08eac3-3496-4a28-9ae2-a30b79fcb7d5", "value": "T17434E0BD1FCEE46B98749607C029600897069FE1FBAB6D1B1A9C72D33B611027C79E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572479, "uuid": "3732950c-949a-4611-bf32-cf16aa8cb2fb", "value": "6144:SNFQAyWDu91DFrkb8Gc64Np89mjT9e1ecMhlJ8iy0Wo:SN2ARy91xrkIGc64Np89mjTB980Wo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572479, "uuid": "6436fbdc-be28-456d-9834-b554659a2b59", "value": 247887, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572479, "uuid": "6598f6d4-f329-4dd8-bf00-1515a7732d9e", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6060bd90-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572479, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572479, "uuid": "f7b85be3-3076-4895-87ef-d4ea74b08e91", "comment": "Malware payload", "value": "d786dec52e18f9f621f6dce78323c55d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572479, "uuid": "5d05287c-d727-4e98-ad71-3f0cb607d63c", "comment": "Malware payload", "value": "0560fa3e880a0a8d0298f7c7618f6e3ccbb6f31cc53d9987eb4503558d5d61a1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572479, "uuid": "d75afc4f-68ff-4b64-8ed1-7e38ff2fd65e", "value": "T19D54129324DE9F276FA00096796761AF19D19DFC75BCD058CCB0C2D0869EFA0891BC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572479, "uuid": "8f36ec54-45a3-4f22-8c64-03231df32ea1", "value": "6144:7ox8VjALMT/uRaqLcUEODGcnuHF7nJHVrq4I8e:vjAUqLnEODTuHDHVrqwe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572479, "uuid": "c6c3236b-c897-4812-8859-1bc37e9e49fb", "value": 290693, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572479, "uuid": "94910c6c-9588-4485-af5e-ecfea4769501", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6070ae25-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572479, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572479, "uuid": "15388bab-1240-45f8-aa17-d41aa3d0b858", "comment": "Malware payload", "value": "f027b6c156876ab13849e178a67e8002", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572479, "uuid": "6f097bb4-a046-45a9-a24f-4751ab6b17df", "comment": "Malware payload", "value": "e744e7d443263e2eab32d882a89c5d28b0429168726b260908c1cdb3aa3866dc", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572479, "uuid": "55a12eea-12c6-469c-975b-d66841182437", "value": "T13F34F18679920CD65023A9E6D6FDCEFF4684931D5ED4573A1781EA09B00C66F2A3CC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572479, "uuid": "999148b5-4921-4816-9d02-e7e8233cbee4", "value": "6144:Wp6wxcXtjJ1toQ30CVrgXiC6FcpfVNkYwL:I6wxEj+QEwqiIpfTkYwL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572479, "uuid": "565e1bba-7277-4457-9905-804c1b72459e", "value": 247875, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572479, "uuid": "b37dc1be-cdcc-468a-8684-493429d6da80", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c205b02-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572526, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572526, "uuid": "fb3b8a28-67fc-4d28-865f-edfad258d1af", "comment": "Malware payload", "value": "0bbdaca7798a8cb607669401111e6893", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572526, "uuid": "df9c7d97-b79d-48e7-8fa0-97d7ea7a5bf9", "comment": "Malware payload", "value": "720a4eb42c78dcb38171e20eb669e8b9600ba6ed571f49c16ac902e1c077f9b7", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572526, "uuid": "1c730dc2-6d45-4b09-8bb9-436205e13536", "value": "T19054233F47DF7F2ADC8A6736CCA6F61E4C8E6E508832A052DD2D45997D1BE1502708", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572526, "uuid": "6c252893-7609-4f56-a278-fc09aa298146", "value": "6144:cWQ7hYvPdC9LqRvYHtyqWejvE0xdAG1bL5q6WSjK:CevoEx+3vE0xh59i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572526, "uuid": "ab7d1c9a-f59b-4dd4-929d-877b24c2d5b7", "value": 290688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572526, "uuid": "42d68c92-8345-4a65-9e43-a5c555573cbe", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93bcc9ec-0515-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770572565, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572565, "uuid": "1d259e55-d372-4448-b738-ee63f6e870d1", "comment": "Malware payload", "value": "a5dccc395eeff70f539d172ca6146dca", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572565, "uuid": "b075857b-f550-47bf-8fae-939869a4e14c", "comment": "Malware payload", "value": "3790c6a5f4ca6e27d1a67b387ddc6f1dd473ebed2ecfbb1846b6ef234022cb4f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572565, "uuid": "a6384698-70b1-418c-a8ee-c3d8651a812d", "value": "T14734E098D417F87BB4FBF68B11A604B841993B5133089993BCF808DA57B2BD6F4358", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572565, "uuid": "13039567-9b76-49f8-9727-6d3ee37bc19b", "value": "6144:M3yFYVRq7A6N1Y22zYAVsCd8109vA7Eoj4M:8yF+sA6C2Cd7AD4M", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770572565, "uuid": "27ada72f-9c49-44f5-9109-3fe1d564e5f5", "value": 239691, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572565, "uuid": "b2d5dafe-7845-400f-8d2f-facb383d30dd", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19258105-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1770574146, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770574146, "uuid": "436ebbc8-9abd-47ff-a853-481b2bd55795", "comment": "Malware payload", "value": "f860c4318ab1cfd43fafd24f99c176cb", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770574146, "uuid": "8d1ef20f-5403-4d87-b14e-1ae75c55e370", "comment": "Malware payload", "value": "d8430372204682e98e75cdf589ab45e2f09960cd0aff5af741341671481b3656", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770574146, "uuid": "2fa79720-0fb1-4179-aa27-d14aea7d4ac0", "value": "5972E18A2EAC3B07F4B296F2F33C7E58F3052E9D76679817D199712350A301AA114C6B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770574146, "uuid": "d8d3dcff-546f-4266-a66f-903c30c4c928", "value": "384:YTYXvQDuYY2xZ6VTgDK4mpwTl5yejHSDeWBbo7hcn:YTYIDfYG6ZmewZ59+n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770574146, "uuid": "0d57b7de-cf10-4f0c-8e8e-3add4aecd14e", "value": 17376, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7bac0725-051d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770575961, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770575961, "uuid": "1cc03d54-5443-4290-97a7-7c970f983c1b", "comment": "Malware payload (Mirai)", "value": "0271e5ca730d6c7caa5486cbdfc5e882", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770575961, "uuid": "6bb3c02d-eca2-41b1-ab9d-c458768c3acf", "comment": "Malware payload (Mirai)", "value": "2d5986fdd8a3daf52cfa06137b23f4eb488db18d10f84b3051a05d392b8c93a0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770575961, "uuid": "db22cfc3-0663-400c-a77c-5e78ff200e72", "value": "T11CF34C46EB414A13C4D62775BA9F42453323AB54D3EB33068928BFF43F867AE0E675", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770575961, "uuid": "2f75853d-c54d-4fb2-bbaa-4087e8120679", "value": "3072:rS33y6kKNV2B/dF/aLmy0tuzA6JycBOYruxvezIM/9wknJ:rOHkMUB//aLmy0tuzvJy6qxveUM/9wkJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770575961, "uuid": "05843385-9a3d-4c0b-b8ad-95824c41acca", "value": 167579, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770575961, "uuid": "fb248dd2-48ec-4433-84d6-b4b2b34c5725", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3300a746-051e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770576268, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770576268, "uuid": "0b56f3d5-5696-4129-acc0-b59f5b5c22e7", "comment": "Malware payload (Mirai)", "value": "35f625028d9a1b77889e8b9653cf5f68", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770576268, "uuid": "89b285bb-4cd3-439f-8e40-898c335b38ff", "comment": "Malware payload (Mirai)", "value": "d75451a6d40afff263575518f6c45316e4b853b34cf0aca37f6a030d1401e222", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770576268, "uuid": "a9a57956-b3a0-474b-b898-409d0673ee92", "value": "T166734907798084FDC099C27447BBB23AD433347E12B9B2EA67C4FE162D89E601F6D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770576268, "uuid": "52b0d6c2-a54f-458f-850e-e64c22a6aa9d", "value": "1536:jVEzBq0BT2Qws0M8TeH1mVPk5lk16L12SnnDg39ugRhS:xEk0BqQHv4OMVPkQ1m12SnM39ughS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770576268, "uuid": "67685bad-4fd3-4110-82bd-05805a5ddb81", "value": 79264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770576268, "uuid": "46b907c0-da4a-41e8-a78e-27e11c2464dc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86992528-0522-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770578127, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770578127, "uuid": "69540232-b731-47d1-8754-1000ee0d90e6", "comment": "Malware payload (Mirai)", "value": "f0a785f1fe46b4bc11c43bc91d91b7e7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770578127, "uuid": "c1d2cc91-b424-4411-91d5-4210fb80aefb", "comment": "Malware payload (Mirai)", "value": "1f6da033aa1a2592091d75feee1bd75070200980ca04f977439f99659e53cf95", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770578127, "uuid": "816a4574-c37d-4236-ac56-07b87c94f384", "value": "T1FDF34C46EB414A13C4D62776BA9F42453323AB54D3EB33068928BFF43F867AE0E675", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770578127, "uuid": "338a3a82-81ad-4153-a370-c22733c8fc05", "value": "3072:rS33y6kKNV2B/dF/aLmy0tuzA6JycBOYruxvmSIxVwknJ:rOHkMUB//aLmy0tuzvJy6qxvmSIxVwkJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770578127, "uuid": "ddf19cfe-f476-4a8e-9e1d-2b0e0da4ff8e", "value": 167579, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770578127, "uuid": "162966ea-5746-4703-a0db-c203e383b20f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0382d7f7-f58b-11ee-b38b-82aee05be84a", "comment": "Malware payload", "timestamp": 1770578959, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770578959, "uuid": "f6dbd72b-37db-4428-b9ae-bbc7ec6c3642", "comment": "Malware payload", "value": "e24d678d9c18c7811e16f4755dfd1e19", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770578959, "uuid": "ecb6ff87-4bed-4a0a-93e4-edd4ae2f2814", "comment": "Malware payload", "value": "8fceda57d83418bb288de0aef3c6df5e9421344ed0515c90fa5206f15c50f7e4", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770578959, "uuid": "0f5906df-fcaa-4d7d-b8ed-aa8dca8cc17f", "value": "T14635395AF9819F65C5C0AABBFF5D828A33131B78E2EE711399145B2437CB85B0E7E5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770578959, "uuid": "077a6901-a949-4f8d-a550-c502dff5ab72", "value": "24576:o042ExWKNDAw8rO9zIzVX2HHCDKu+jnp/+YQS0PRqESRu5:5oxWK3xcSB+W0PRY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770578959, "uuid": "0b3e3c40-ef66-43e4-8c55-30b3b4da761f", "value": 1109128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770578959, "uuid": "a118536a-8e95-4933-9ed5-2999b51eec10", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770578959, "uuid": "e0736655-5ecd-43c3-aaa7-4106793aa2e3", "value": "t198f08b92ce0d26e8a1d1563685fe37222968e1f539015c1535aaae0bc031a4db0718", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c2a3e64-f6a9-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770579014, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579014, "uuid": "8ab1c709-749a-4d30-ba60-382fcafaa076", "comment": "Malware payload (Mirai)", "value": "3cd55809336bb3564bcf736bff73f601", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579014, "uuid": "a404f858-461d-4172-938f-2eb22a4c909d", "comment": "Malware payload (Mirai)", "value": "7e9f6d938f9a646812f5689172c76d7268fa6408b4014dc5f0c3039dd5dcb43c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770579014, "uuid": "94c97835-7a6c-4d31-a7a8-5739fd66a737", "value": "T14803F14071E52654E24F203F125DEA340CA5B7AC977CBF4BCA66E2775836E5534F83", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770579014, "uuid": "b773b4d8-d6db-4bd2-b1cf-d11a9196fd35", "value": "768:75zGYSTbh7UYV5nw7dZf5K6jMFhnt5krp7jvxh7qa0nEKnbcuyD7UHQRj8:RGRPwr9jMzt5kr9v37N0Dnouy8HyI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770579014, "uuid": "b938ffa0-ad62-481d-aa72-620a3840e698", "value": 39980, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770579014, "uuid": "720c2e24-6cc9-4460-9f6f-ca486d160153", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e34548b-f6a4-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770579021, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579021, "uuid": "737f10b1-2708-41a4-a940-d684dde70d59", "comment": "Malware payload (Mirai)", "value": "1803a5e29af4b6e97e4d30cafbd553c5", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579021, "uuid": "c73fc891-08a0-47ba-a4d7-4b0cb769e160", "comment": "Malware payload (Mirai)", "value": "f0c00c47ab00f051efa5776deaac34d0ccd2ebb8a9fff90db83cb877c50732b1", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770579021, "uuid": "b110a444-ae27-4d47-88c5-46e1adc16dac", "value": "T11A430176F708DE53D8A0BE7CE49F48A7D796AC68C259B4C214D8C7C88C93447077AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770579021, "uuid": "3734c449-b121-41fe-a105-749a0ef08339", "value": "1536:PLUtm4L4R66+xeaBbZub+S6TPyLjGD0YLbte6LholhXS+:Pmm4L4R66+AaBbZLnyLjh0bV9ik+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770579021, "uuid": "fc225132-0e40-423b-bd48-8e9156fd7a4a", "value": 60572, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770579021, "uuid": "ed9cccdb-ed4d-4799-851f-c9ca69731478", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c34afef-0524-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770579022, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579022, "uuid": "e6b8a1fe-4a0b-4cc6-bc37-6060cf252b34", "comment": "Malware payload", "value": "d9fae63af4a78bbe3c460146bfef65e2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579022, "uuid": "6587ad19-162d-42a3-9270-cda42c06e7ef", "comment": "Malware payload", "value": "0a2430c448c8a49dd1a881d68b36c2915e4b291ddb8411145beccc0ad50365eb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770579022, "uuid": "a3e41fee-45be-4ffe-99b1-ab6f2dd490da", "value": "T15A067E15B9B264AEC4B5C534976FD532BB30B85842117A3F22909B743FA3E281F1DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770579022, "uuid": "afc22507-6973-40c1-958e-8644345363b6", "value": "98304:wQObRCXiegk6+zUU+xi+C6PV2YktBRSaUBsNAWzYOs9Z7Ddko8o:toaUBsPYv9Z7Ddko8o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770579022, "uuid": "5b9103cd-b2fd-49d0-8010-5f9dc86c9d36", "value": 3672720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770579022, "uuid": "ad012b59-d221-442f-ae5f-bfa3c50ec839", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d978ef6-0524-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770579024, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579024, "uuid": "732f402d-2c46-4bf2-81aa-3b7173100fec", "comment": "Malware payload (Mirai)", "value": "db3b6f79e1fcd23913773236a034478e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579024, "uuid": "396795e6-5e2d-4cd5-a25c-877f59feac16", "comment": "Malware payload (Mirai)", "value": "425e9a15d42bb30b9d2109288945ec759eaaa2e7c503612fc2ca9e32d995573e", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770579024, "uuid": "95075701-4252-4768-986e-70501155541b", "value": "T163D34B07B5C180FDC4DAC1744B9BF53AED32B1A91238B26B27D4AE232E59E305F1DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770579024, "uuid": "2838c09c-ee3c-4c5e-b9dc-03ab74a11ce6", "value": "3072:09/SOyAEvjt6qkWsDR6sjafoH0FdBugQyDueMEPG2CGa:09/SOyAEvjt6qkWsC18tlGa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770579024, "uuid": "26a71c6b-d386-4015-addc-94f5dcc744da", "value": 139768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770579024, "uuid": "80bb51a7-db5c-49e0-84ce-f28aca8a2652", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9dd8c18f-0524-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1770579025, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579025, "uuid": "00bf8bdc-3fdb-4439-822e-b96ecc870753", "comment": "Malware payload", "value": "ca64b1ac85fcce6d245e04660ebcc139", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579025, "uuid": "3b1b8c59-e30b-4b03-95af-0f4785757494", "comment": "Malware payload", "value": "fb6747123398bd31435ae6bfc869d6813544fe5c69ed936f4a22da100408e832", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770579025, "uuid": "99f2992e-d70e-49ca-a2ae-bb69485be2ba", "value": "T15E15174BB2E264BEC19EC470474BD5A7AC3178540632293B7A84ED350EB6E246F7DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770579025, "uuid": "970f6b31-5f18-462e-a4de-11e497f1b907", "value": "12288:jFKf2d5qE9/E4AD4Ry8PMOlw7HFXa1U6kGEzEp3HLS1bj:jI2d5qE9/E4AD4Ry8P5w7Hs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770579025, "uuid": "4c9cf9a2-5a3a-4514-8238-9dc0518b5f46", "value": 952728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770579025, "uuid": "fc5b19e0-6648-4c80-b276-010a6ac81e19", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a0babb48-0524-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770579029, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579029, "uuid": "47f4e42c-e949-4cd7-b19c-17a83f64050f", "comment": "Malware payload (Mirai)", "value": "a0776a4495579a8bbe85fc06fc4ca816", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579029, "uuid": "aa8dd916-90ba-4a18-b9a9-475b33b4e7e0", "comment": "Malware payload (Mirai)", "value": "ee6deb679815cf992af8322c646fb087c78976c25581a6bd73fb50ee0563036d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770579029, "uuid": "3e4408be-4600-47a0-b7bd-131c22e69a51", "value": "T1C9D57C57BCD108B9C0AAD23189A642927B71BC891B7063D73F50B3BC2E767D89E393", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770579029, "uuid": "2a33b1c1-587e-4aa1-b352-92b5ee5d9fbd", "value": "49152:SgM+OVUrg0sQrb/TqvO90d7HjmAFd4A64nsfJpM+uXG2L6ag3gUKbjbYJD1IiRbi:VcUfk1XiRAYGNa8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770579029, "uuid": "33cc7ea5-9848-4376-ad95-bb99d51a63b0", "value": 2862846, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770579029, "uuid": "2811c75d-8348-496e-ab2b-e115e14750e6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dfdf9eb8-0524-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770579135, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579135, "uuid": "55176b09-045c-4c5e-93ba-159696e3b71a", "comment": "Malware payload (Mirai)", "value": "ed81069244326d1ebabba196be4069fd", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579135, "uuid": "f62d8c8b-5068-4241-81e4-27b83403c80c", "comment": "Malware payload (Mirai)", "value": "d22fcc5283f27fdb4c682e3679a59e1b0996c1ea90f2f738c26eab3a1c07bb8c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770579135, "uuid": "03202324-2e78-4a5d-b058-98875c7d5b44", "value": "T1E141BDC913429B726DA39CD722B9CD48F2E8B4E110C79F16F5EB35E0254CD847188B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770579135, "uuid": "14da4670-f719-466c-b6f0-4c921e398c22", "value": "12:q0F7LNv0pFKX0Fa2RpFKX0FqiY4GpFKX0F/GpFKX0FCLgL3pFKX0Fki+TpFKX0FH:vIRhqFxwJfkDbLnMZNGVSKhBr3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770579135, "uuid": "191032e6-d58c-4900-b66f-e70f82e83428", "value": 2386, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770579135, "uuid": "19c5d1e4-5d71-46a1-81ab-4bd0cd8f6730", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dfe1e39f-0524-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770579135, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579135, "uuid": "e84b7f27-7d57-48d9-8105-b5cf5fcc5d1a", "comment": "Malware payload (Mirai)", "value": "c3e21124d6935ef859cd4c77739487f2", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579135, "uuid": "bfe2278c-ff15-41f1-8083-60eb12087bf5", "comment": "Malware payload (Mirai)", "value": "c1f3a5bdb3f4fa417fb637c7c3825d1fe603158b08b766723868d2ccdc0af921", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770579135, "uuid": "873d930d-1d0d-4d1b-842a-e51349bd6c7c", "value": "T112417AC622465B712DA39DDB32B98D88B2C8B4E250D79F12B5FB35E0158CD44B188B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770579135, "uuid": "3c0ddcf5-0c75-42b9-9339-aeedc3b3b70f", "value": "12:q0F7LNvqFKX0Fa29FKX0FqiY4cFKX0F/cFKX0FCLgLjFKX0Fki+PFKX0FaoFKX0d:vWRLqF7uJdkDhx1iZNInSKLBrt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770579135, "uuid": "befb6833-44f7-4012-bab9-91dde4dc96ba", "value": 2412, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770579135, "uuid": "ffd5e920-4d09-4083-9046-3494a80db035", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f730b619-0525-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770579604, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579604, "uuid": "e3eb4f30-6c07-4c1d-b7af-3059f61d4f8a", "comment": "Malware payload (Mirai)", "value": "ef7ebb0d79d7568ea7e368d3fe8c2b1c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579604, "uuid": "3ac115ae-0677-4f72-905d-e4ef37ad8a8a", "comment": "Malware payload (Mirai)", "value": "ddf300e980ba1b38aafb54c8a255da32afc46933dd91dedf09fac445dc4fa64c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770579604, "uuid": "de61ef6f-d9bd-44ff-a65c-b84d64179c2b", "value": "T1A2A3D84D7E619FBCFBAD833457B34B21965C33D52AE1C684E19CE6011E7024E642FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770579604, "uuid": "b221f032-e9b6-4ac4-8d11-4bbfc27a2a7f", "value": "1536:mtEbSknSjem2vmalSPM3Lc3LVZ3LxT39LhHG1qdWEk3yAKrxr4jtVoeKmm3g8:muDSjz2e9PBaqdWEkiAKrxrktVrsB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770579604, "uuid": "27f95254-14b3-40c2-974f-5b250a8b3fb0", "value": 105052, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770579604, "uuid": "1d8d3d72-cc4d-4d9e-aee0-2f96ed03043b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dfe29b83-0524-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770579973, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579973, "uuid": "beeda2a1-aaaf-4bf6-8b4e-2b4ae681c125", "comment": "Malware payload (Mirai)", "value": "faa5eb6c5a64c2d7674da36de59ee30c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579973, "uuid": "4be97abd-229f-46e7-af73-e1cc84ec16c4", "comment": "Malware payload (Mirai)", "value": "43b13455cf286e49a8a8019c08790e179c5871747738ea59d7e925970dc02ca7", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770579973, "uuid": "9f7f7a89-d67b-4268-9640-5918a806eecd", "value": "T1BC41DFC516525B742DA39DD722BACE48F2C8B5F110C79F12B6EB35E0154CD85B188B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770579973, "uuid": "c18eb540-56ba-4693-9f7f-23e21574505d", "value": "12:q0F7LNv0FKX0Fa2NFKX0FqiY4mFKX0F/mFKX0FCLgLzFKX0Fki+PFKX0FayFKX0p:vURbqFL8JtkDhx1AZN2nSKbBr7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770579973, "uuid": "ea935487-ced2-4af6-9aa8-55ab89244c46", "value": 2373, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770579973, "uuid": "2c2bb8ec-4fc0-4790-82e8-f56665b7d21e", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a483103-0534-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770585729, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770585729, "uuid": "d60d45ce-f9fe-4aa3-bec0-a30ca23a481b", "comment": "Malware payload (Mirai)", "value": "e82e5d1a060b6c097373f9529b0aca91", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770585729, "uuid": "48cc87d1-935d-4ebf-8098-5f7fcba2b6f2", "comment": "Malware payload (Mirai)", "value": "9befb1af09a1e11dba5a83839534a1f744fca3b53815278578c86ed3b75b6189", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770585729, "uuid": "4baded03-55e7-422b-96e6-b793018f576c", "value": "T135833ADBF800EDBDF80ED77B44530A0AB231E39149931B366757B967ED321E54826E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770585729, "uuid": "610472a9-420d-4da5-ad7d-9afb5eb6c717", "value": "1536:LWOLMPybZ5AiGIZW2d+Pw81y1jFRt5FZah2szX6NLLMdgKVgLskbXyn:LWOLIybZbc2d+Pjy1jFRGhrzXKIVgL/w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770585729, "uuid": "569c92fb-c22b-4ad2-93ea-7be53c953053", "value": 81476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770585729, "uuid": "034bf4d5-93af-45da-9d72-fd682ba8b537", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770508873, "uuid": "4814fa81-0481-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.99.48:43760/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770509294, "uuid": "4338698c-0482-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.181.183:52300/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770509595, "uuid": "f6cf84ad-0482-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.159.25:40593/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770509833, "uuid": "8488c7a1-0483-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.77.17:38596/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770510015, "uuid": "f0e8cfab-0483-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.159.25:40593/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770510193, "uuid": "5b1a5da3-0484-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.77.17:38596/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770510736, "uuid": "9ede42cb-0485-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.181.183:52300/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770511509, "uuid": "6b634d14-0487-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.91.79.204/bins/sora.x86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770511814, "uuid": "21323710-0488-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.33.217:38075/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770512590, "uuid": "efce105f-0489-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.71.115.223/main_arm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770512590, "uuid": "efce96c3-0489-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.71.115.223/cnd.sh", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770512590, "uuid": "efce9a19-0489-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.71.115.223/main_x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770512590, "uuid": "efd196af-0489-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.71.115.223/main_arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770512590, "uuid": "efd63c19-0489-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.71.115.223/main_mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770512590, "uuid": "efd7ac5a-0489-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.71.115.223/main_arm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770512590, "uuid": "efd7ef76-0489-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.71.115.223/main_mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770512590, "uuid": "efd8554c-0489-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.71.115.223/main_sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770512590, "uuid": "efdcc0e1-0489-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.71.115.223/main_ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770512590, "uuid": "efdeba8a-0489-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.71.115.223/main_arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770512590, "uuid": "efefc3c2-0489-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.71.115.223/main_m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770512646, "uuid": "11633c7b-048a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.71.115.223/main_x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770512826, "uuid": "7c72c2b9-048a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.89.175:46500/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770513429, "uuid": "e3d0f5bc-048b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.29.112:59738/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770514148, "uuid": "90510430-048d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.99.48:43760/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770514267, "uuid": "d79a34fd-048d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.132.220:47985/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770514567, "uuid": "8a2566ec-048e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.213.75:57114/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770515408, "uuid": "7f45f2e1-0490-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.29.112:59738/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770515967, "uuid": "cc58c2ca-0491-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.213.75:57114/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770516502, "uuid": "0b9677f4-0493-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.218.241:33373/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770517271, "uuid": "d5f4eeaf-0494-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.213.215:58972/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770518354, "uuid": "5b729c9f-0497-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.200.118:33019/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770518713, "uuid": "3141f2c7-0498-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.213.215:58972/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770519067, "uuid": "0488ccec-0499-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.91.79.204/bins/sora.arm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770519067, "uuid": "0488d2c5-0499-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.91.79.204/bins/sora.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770519067, "uuid": "049df735-0499-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.91.79.204/bins/sora.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770519067, "uuid": "04a2d4c1-0499-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.91.79.204/bins/sora.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770519068, "uuid": "04e07a8e-0499-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.91.79.204/bins/sora.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770519069, "uuid": "054cd58d-0499-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.91.79.204/bins/sora.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770519069, "uuid": "055d46bf-0499-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.91.79.204/bins/sora.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770519074, "uuid": "08acbbeb-0499-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.45.75:45313/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770519428, "uuid": "dba81384-0499-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.78.80:58591/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770520768, "uuid": "fa157ec2-049c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.45.75:45313/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770521468, "uuid": "9b5986e4-049e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.231.122.208:52085/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770522319, "uuid": "967e7f73-04a0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.168.43:40498/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770523212, "uuid": "ab1dfa8c-04a2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.255.155:36247/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770523394, "uuid": "17909558-04a3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.144.13:42324/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770523461, "uuid": "3f281604-04a3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.40.152.179:54349/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770523994, "uuid": "7cf16c74-04a4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.255.155:36247/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770524297, "uuid": "316de808-04a5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.27.230:43364/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770524955, "uuid": "b9e5f469-04a6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.144.13:42324/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770525190, "uuid": "45fce442-04a7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.40.152.179:54349/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770525615, "uuid": "43520ef4-04a8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.24.80:46924/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770525734, "uuid": "8a1b3557-04a8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.28.169:56055/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770526092, "uuid": "5f7c61c8-04a9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.177.98:60041/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770526093, "uuid": "5ffbc5bc-04a9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.240.219:47117/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770526392, "uuid": "125edaef-04aa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.31.102:58323/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770526511, "uuid": "599cd7bf-04aa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.205.79:60976/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770526686, "uuid": "c1cb0206-04aa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8516978252/RKXRn1l.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770527352, "uuid": "4ee6d56d-04ac-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.177.98:60041/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770527778, "uuid": "4c9c1ae5-04ad-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.10.196:45031/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770527886, "uuid": "8d1a5757-04ad-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.205.79:60976/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770527886, "uuid": "8d2de1e3-04ad-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.24.80:46924/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770527954, "uuid": "b573d70b-04ad-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.158.27:58817/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770529215, "uuid": "a4fc15e8-04b0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.175.15.47:54526/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770529576, "uuid": "7c2b8da9-04b1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.22.194:44372/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770530656, "uuid": "ffba7530-04b3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.175.15.47:54526/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770530829, "uuid": "6734f97c-04b4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.146.85:55026/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770531557, "uuid": "19274f8e-04b6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.111.14:39508/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770531787, "uuid": "a1cd5f6a-04b6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/keys53/c10ud/vik", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770532337, "uuid": "ea0fb039-04b7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.18.90:40374/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770532867, "uuid": "25e4362d-04b9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.158.27:58817/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770532877, "uuid": "2be3a3b5-04b9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.72.40:53660/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770533175, "uuid": "dd2ed78e-04b9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.59.0.186:43445/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770533235, "uuid": "010e4ed0-04ba-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.118.90:58921/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770533656, "uuid": "fc24c41b-04ba-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.1.35:52082/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770533708, "uuid": "1b5b5cf8-04bb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.111.14:39508/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770533891, "uuid": "881e4678-04bb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.27.59:51321/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770534071, "uuid": "f37b7d39-04bb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.18.90:40374/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770534127, "uuid": "15163039-04bc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.99.143:34496/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770534496, "uuid": "f0c00fbf-04bc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.118.90:58921/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770534609, "uuid": "344530d4-04bd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.72.40:53660/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770534858, "uuid": "c88b3962-04bd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.247.121:44296/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770535207, "uuid": "98d8657d-04be-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.1.35:52082/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770535807, "uuid": "fe534129-04bf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.99.143:34496/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770536224, "uuid": "f6faf3a7-04c0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/keys53/c10ud/oph", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770536229, "uuid": "f9b9ede4-04c0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.103.245:38717/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770536350, "uuid": "4199b664-04c1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.71.228.38:41655/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770536350, "uuid": "41a563ab-04c1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.40.14:49466/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770536536, "uuid": "b0d52f2c-04c1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.74.167:34378/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770536892, "uuid": "851eda15-04c2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.110.27:45380/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770537257, "uuid": "5e50bade-04c3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.247.121:44296/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770537432, "uuid": "c6fdfb8d-04c3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.103.245:38717/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770537511, "uuid": "f5b7149d-04c3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.160.224:52726/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770537554, "uuid": "0f374146-04c4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.125.202:37221/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770537677, "uuid": "58a7d6f4-04c4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.217.63.147:47958/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770537915, "uuid": "e69a4bb2-04c4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.46.23:59243/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770538266, "uuid": "b7f55d28-04c5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.74.167:34378/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770538569, "uuid": "6c83f150-04c6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.254.62:49369/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770538994, "uuid": "697df9b3-04c7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.217.63.147:47958/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770539474, "uuid": "87f53ea3-04c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.46.23:59243/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770539765, "uuid": "3550d5ff-04c9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.254.62:49369/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770539955, "uuid": "a655c974-04c9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.253.108:48135/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540129, "uuid": "0e1a73ce-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.7.84:37056/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540129, "uuid": "0e8e1111-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.133.139.91:53098/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540130, "uuid": "0e9b8f75-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.139.107.233:56142/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540130, "uuid": "0e9c9342-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.190.54.34:4693/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540130, "uuid": "0ea6b495-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.255.240.195:31790/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540131, "uuid": "0f75cca1-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.103.70.96:61365/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540141, "uuid": "15861fa2-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.126.142:12618/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540192, "uuid": "34125696-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.36.197.3:61741/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540193, "uuid": "34931517-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.83.216.226:36902/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540194, "uuid": "34d5a6c4-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.220.163.1:56268/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540194, "uuid": "34da6682-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.160.223.169:30596/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540194, "uuid": "350aff67-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.171.188.254:17418/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540194, "uuid": "350f0ab3-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.109.73.17:43046/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540194, "uuid": "35189735-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.166.103.98:24408/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540194, "uuid": "353609db-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://24.245.129.91:21220/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540255, "uuid": "597cd51d-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.75.110.142:30823/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540256, "uuid": "59df11ae-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.155.128.195:63831/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540311, "uuid": "7aead954-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.11.69.45:19918/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540312, "uuid": "7b23a2d9-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.28.238.16:54495/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540312, "uuid": "7b23d125-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.29.91.102:12520/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540312, "uuid": "7b23da43-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.82.189.229:3535/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540312, "uuid": "7b9ff8f6-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.175.253.88:10847/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540313, "uuid": "7bc32bbf-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.217.84.226:61943/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540313, "uuid": "7bd24595-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.210.62.39:22997/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540374, "uuid": "a09a8b6c-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.255.245.170:61653/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540375, "uuid": "a106fa9b-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.112.69.96:41037/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540376, "uuid": "a13b2253-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.237.242.31:28217/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540376, "uuid": "a16861c0-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.28.227.58:45942/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540376, "uuid": "a1829b49-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.128.66.193:23490/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540376, "uuid": "a1899195-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.30.92.188:46300/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540376, "uuid": "a1a408df-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.148.121.247:25958/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540376, "uuid": "a1b816cd-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.16.251.131:36612/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540377, "uuid": "a1e7f3b6-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://186.39.18.40:32222/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540428, "uuid": "c07d08db-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.21.31.221:50383/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540434, "uuid": "c3fa0487-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.217.16.24:36010/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540437, "uuid": "c5a43e2f-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.13.192:9701/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540492, "uuid": "e6860f72-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.27.87:55791/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540492, "uuid": "e6b4a54d-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.97.36.202:48031/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540492, "uuid": "e6dbbe7e-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.119.108.21:40462/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540493, "uuid": "e704cc73-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.222.209:48204/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540494, "uuid": "e78f94f6-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.245.96.246:18909/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540494, "uuid": "e7c62b17-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.30.46.167:23802/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540494, "uuid": "e7efe84a-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.207.243.122:32173/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540495, "uuid": "e84d733d-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.2.218.40:30952/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770540495, "uuid": "e875fd02-04ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.167.249.58:7541/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770541091, "uuid": "4b9b1c23-04cc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.192.241:37258/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770541431, "uuid": "163050d5-04cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://47.60.155.144:49580/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770541636, "uuid": "90a76f81-04cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.184.31.239:45531/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770541637, "uuid": "90e19b38-04cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.1.226.106:33380/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770541995, "uuid": "66aec236-04ce-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.222.209:48204/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770541995, "uuid": "66cbd3e9-04ce-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.77.250:45047/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770542468, "uuid": "807a6aed-04cf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.192.241:37258/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543135, "uuid": "0e0c9206-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.27.87:55791/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543135, "uuid": "0e12cc3e-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.7.84:37056/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543135, "uuid": "0e25914a-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.184.31.239:45531/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543192, "uuid": "300160b1-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.146.23/bins/mao.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543193, "uuid": "30806bd3-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://1158.94.210.68/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543195, "uuid": "319f7873-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.146.23/bins/mao.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543197, "uuid": "32eb2294-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.146.23/bins/mao.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543197, "uuid": "32eb4026-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.146.23/bins/mao.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543197, "uuid": "32eb451e-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.146.23/bins/mao.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543197, "uuid": "32f1691a-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.146.23/bins/mao.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543197, "uuid": "32f17440-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.146.23/bins/mao.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543197, "uuid": "32f1adc5-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.146.23/bins/mao.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543197, "uuid": "32f7b59e-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.146.23/bins/mao.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543197, "uuid": "32f8ea2d-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.146.23/bins/mao.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543197, "uuid": "32fb7e34-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.146.23/bins/mao.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543197, "uuid": "32fba243-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.146.23/bins/mao.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543197, "uuid": "32feedcd-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.146.23/bins/mao.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543205, "uuid": "37adbe95-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.71.115.223/main_spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543255, "uuid": "5569e72f-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.146.23/bins/mao.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543255, "uuid": "556c5319-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.146.23/bins/mao.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543365, "uuid": "97333d43-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.106.81.175:5002/download/Roblox_Executor.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543367, "uuid": "986e448f-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.106.81.175:5002/download/Syntex_Spoofer.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543368, "uuid": "98d339f7-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://136.113.36.100:8080/bot.arc_gnu_2017.09_prebuilt_uclibc_le_arc700_linux_install", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543368, "uuid": "98e2056b-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://136.113.36.100:8080/bot.mipsel", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543368, "uuid": "98eed67e-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://136.113.36.100:8080/c.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543368, "uuid": "98f41b27-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://136.113.36.100:8080/bot.sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543368, "uuid": "99191b2c-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://136.113.36.100:8080/bot.x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543369, "uuid": "9951c366-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://136.113.36.100:8080/bot.i586", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543369, "uuid": "99853b90-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://136.113.36.100:8080/bot.powerpc-440fp", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543369, "uuid": "99aa0ced-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/ahwsuidahwiduawh/yyy/refs/heads/main/Client-built.exe", "Tag": [ { "name": "discordrat", "colour": "#cc0866", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543369, "uuid": "99b7ab35-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://136.113.36.100:8080/bot.mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543370, "uuid": "99fda3cb-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://136.113.36.100:8080/bot.m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543370, "uuid": "9a474db3-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://136.113.36.100:8080/bot.armv4l", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543377, "uuid": "9e0e26cb-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://136.113.36.100:8080/bot.powerpc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543377, "uuid": "9e447b4f-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://136.113.36.100:8080/bot.i686", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543378, "uuid": "9edb5650-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://136.113.36.100:8080/bot.armv5l", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543380, "uuid": "a050b3d9-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.106.81.175:5002/download/KeyGeneratorPro.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543380, "uuid": "a050b942-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.106.81.175:5002/download/37KKS9R5AOV0.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543381, "uuid": "a0b22bae-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.106.81.175:5002/download/xa29d6ca899a2a2c1497b192dc8aeb1cb6290109c347ffe3bc66d950dc0b0f1a6.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543381, "uuid": "a0b23dc4-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.106.81.175:5002/download/x554650562de7ff4b0a266857cdd8bad5c3445dbe23816c7898eb679d34652391.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543384, "uuid": "a247bf9e-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.106.81.175:5002/download/Y3593UGC11D2.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543389, "uuid": "a580080e-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.106.81.175:5002/download/Setup.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543400, "uuid": "ac1da0a4-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.106.81.175:5002/download/xQ4gNK9auvFo4.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543406, "uuid": "af6eeddf-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.106.81.175:5002/download/install.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ScarfaceStealer", "colour": "#660BB4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543454, "uuid": "cc09ee98-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://floral-king-36d7.michaelleclair1997.workers.dev/", "Tag": [ { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543454, "uuid": "cc1177c7-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://gist.github.com/soontaylor1946/7c09f788d97c44cfeff0507b21db77d9", "Tag": [ { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543455, "uuid": "ccee9e17-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://aktivates.fun", "Tag": [ { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543458, "uuid": "ce68f524-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://i.404.pm/2025/09/27/1758984967-5707.jpeg", "Tag": [ { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543458, "uuid": "ce76847e-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.232.165.152:8080/xoner_arc-snps-linux-uclibc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543458, "uuid": "ce7835f0-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.232.165.152:8080/xoner_armv4l", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543458, "uuid": "ce7ae5bf-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.232.165.152:8080/xoner_arc-linux-uclibc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543458, "uuid": "ce7aea83-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://i.404.pm/2025/07/24/1753356830-1481.jpeg", "Tag": [ { "name": "pe", "colour": "#8df5e8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543458, "uuid": "ce7d8f86-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.232.165.152:8080/xoner_armv6l", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543458, "uuid": "ce80548d-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.232.165.152:8080/xoner_i686", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543458, "uuid": "ce81fa8b-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.232.165.152:8080/xoner_armv7l", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543458, "uuid": "ce852f76-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.232.165.152:8080/xoner_arc-linux", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543458, "uuid": "ce864429-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.232.165.152:8080/xoner_armv5l", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543458, "uuid": "ce8a311d-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.232.165.152:8080/xoner_powerpc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543458, "uuid": "ce8ceaa7-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.232.165.152:8080/xoner_mipsel", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543458, "uuid": "ce8d513b-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://i.404.pm/2025/11/12/1762933913-224.jpeg", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543458, "uuid": "ce9d8421-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.232.165.152:8080/xoner_armv6l-unknown-linux-gnueabi-armv7l", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543487, "uuid": "dfc392dd-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://wispy-butterfly-ed72.michaelleclair1997.workers.dev/", "Tag": [ { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543487, "uuid": "dfccc91d-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.232.165.152:8080/xoner_i486", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543487, "uuid": "dfd313f5-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.232.165.152:8080/xoner_i586", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543487, "uuid": "dfe46ff1-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.232.165.152:8080/xoner_sparc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543487, "uuid": "dfe48f02-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.232.165.152:8080/xoner_mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543487, "uuid": "dfe61dc6-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.232.165.152:8080/xoner_x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543487, "uuid": "dfe6de28-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.232.165.152:8080/xoner_powerpc-440fp", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543487, "uuid": "dfedab11-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.232.165.152:8080/xoner_m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770543487, "uuid": "dff9fde9-04d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.232.165.152:8080/xoner_sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770544341, "uuid": "dcc1c5a9-04d3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.248.66:60964/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770544517, "uuid": "45837439-04d4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.87.189:56295/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770544570, "uuid": "65941b63-04d4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.22.117.42:55323/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770544995, "uuid": "6279e178-04d5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.21.224:33276/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770545118, "uuid": "abf16e60-04d5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.210.195/bins/sora.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770545118, "uuid": "abf46c28-04d5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.210.195/bins/sora.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770545118, "uuid": "abf4de45-04d5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.210.195/bins/sora.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770545118, "uuid": "abfcaa30-04d5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.210.195/bins/sora.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770545118, "uuid": "ac001f67-04d5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.210.195/bins/sora.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770545118, "uuid": "ac03425d-04d5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.210.195/bins/sora.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770545118, "uuid": "ac111580-04d5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.210.195/bins/sora.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770545118, "uuid": "ac183307-04d5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.210.195/bins/sora.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770545118, "uuid": "ac1ac692-04d5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.210.195/bins/sora.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770545118, "uuid": "ac28cce2-04d5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.210.195/bins/sora.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770545119, "uuid": "ac566254-04d5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.210.195/bins/sora.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770545180, "uuid": "d104dc9d-04d5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.210.195/bins/sora.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770545183, "uuid": "d2b3f133-04d5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.210.195/bins/sora.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770545411, "uuid": "5a607b5e-04d6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.181.224.7:49926/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770545411, "uuid": "5aa46584-04d6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.231.21:55172/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770545711, "uuid": "0dafc26d-04d7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.13.248.176:36465/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770545894, "uuid": "7a782581-04d7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.231.138:52055/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770545956, "uuid": "9fa28df4-04d7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.17.92:55141/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770545956, "uuid": "9fbf4112-04d7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.90.100:46189/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770546071, "uuid": "e41befad-04d7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.248.66:60964/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770546138, "uuid": "0be90089-04d8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.225.143:59986/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770546189, "uuid": "2a0e84a6-04d8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.178.91:42593/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770546968, "uuid": "fa6e220e-04d9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.125.131:43652/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770546969, "uuid": "fb23037d-04d9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.230.2:58126/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770547029, "uuid": "1f3a28e9-04da-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.48.199:53383/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770547095, "uuid": "4693b566-04da-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.178.91:42593/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770547274, "uuid": "b0f2de20-04da-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.174.123:40438/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770547634, "uuid": "87d76b80-04db-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.90.100:46189/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770547646, "uuid": "8ef926fa-04db-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.13.248.176:36465/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770547938, "uuid": "3cd40867-04dc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.231.138:52055/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770547940, "uuid": "3ddca873-04dc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.48.199:53383/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770547985, "uuid": "58c07d97-04dc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/keys53/c10ud/bez5re", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770548232, "uuid": "ebfb23bc-04dc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.92.131:54734/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770548412, "uuid": "572b2535-04dd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.184.128:51989/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770548413, "uuid": "58285018-04dd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.230.2:58126/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770548530, "uuid": "9da83b4a-04dd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.49.207:55845/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770548660, "uuid": "eb4a12ed-04dd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.125.131:43652/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770548832, "uuid": "518a297f-04de-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.193.178:33431/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770549082, "uuid": "e6717057-04de-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.251.136:36058/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770549437, "uuid": "ba8b9320-04df-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.192.157:45541/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770549967, "uuid": "f5fb8dbb-04e0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.195.163:35985/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770550026, "uuid": "198d97ca-04e1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.109/grolo", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770550458, "uuid": "1ac35cb1-04e2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.184.128:51989/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770550695, "uuid": "a8056626-04e2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.192.157:45541/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770550751, "uuid": "c9560af5-04e2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.85.30:59492/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770550771, "uuid": "d5a04064-04e2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.225.50.134:37071/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770551232, "uuid": "e7fe0929-04e3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.232.115:54528/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770551350, "uuid": "2e6a91a0-04e4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.195.163:35985/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770552128, "uuid": "fe1c7aa9-04e5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.225.50.134:37071/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770552256, "uuid": "4a6dd1ef-04e6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.143.81:55596/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770552613, "uuid": "1f4a3621-04e7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.194.161:60319/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770552809, "uuid": "94616955-04e7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.232.115:54528/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770553520, "uuid": "3bb3cc12-04e9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.17.92:55141/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770553588, "uuid": "645215a8-04e9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.31.197:45708/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770554008, "uuid": "5e9e6db8-04ea-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.106/jklarm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770554008, "uuid": "5ea2d483-04ea-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.106/jklarm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770554305, "uuid": "0fb56ad8-04eb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.35.154:50130/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770554543, "uuid": "9df6d005-04eb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.17.232:51741/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770554612, "uuid": "c69fb093-04eb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.31.102:58323/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770556279, "uuid": "a8526548-04ef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.53.251:44221/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770556506, "uuid": "2fe64479-04f0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/stp26det/logging/SysUpt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770556823, "uuid": "ecd8f7aa-04f0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.65.118:57796/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770557541, "uuid": "98a77f25-04f2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.20.207:54772/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770557722, "uuid": "04cbaa4e-04f3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.143.3:48530/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558142, "uuid": "fec68a4d-04f3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.39.188:40164/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558189, "uuid": "1a9f12af-04f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.230/hiddenbin/boatnet.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558189, "uuid": "1aac5056-04f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.50.201/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558189, "uuid": "1aaf5655-04f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.50.201/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558191, "uuid": "1c1289ea-04f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.230/hiddenbin/boatnet.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558191, "uuid": "1c22756f-04f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.230/hiddenbin/boatnet.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558191, "uuid": "1c279a13-04f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.65.118:57796/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558191, "uuid": "1c2d2753-04f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.230/hiddenbin/boatnet.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558191, "uuid": "1c326653-04f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.50.201/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558191, "uuid": "1c32b0cd-04f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.50.201/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558191, "uuid": "1c36fde6-04f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.50.201/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558191, "uuid": "1c37042a-04f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.50.201/spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558191, "uuid": "1c370bb2-04f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.50.201/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558191, "uuid": "1c50f30a-04f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.225/bot.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558199, "uuid": "20972b2d-04f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.50.201/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558199, "uuid": "20983202-04f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.50.201/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558199, "uuid": "20a06b3a-04f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.50.201/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558199, "uuid": "20b193e3-04f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.50.201/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558199, "uuid": "20cc5a54-04f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.8.78.15/mig", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558208, "uuid": "25efb5fc-04f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.230/hiddenbin/boatnet.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558208, "uuid": "2615af64-04f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.230/hiddenbin/boatnet.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558208, "uuid": "2620f09b-04f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.230/hiddenbin/boatnet.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558208, "uuid": "2626f250-04f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.230/hiddenbin/boatnet.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558208, "uuid": "262efc42-04f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.230/hiddenbin/boatnet.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558208, "uuid": "2634be02-04f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.225/bot.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558208, "uuid": "263a96d9-04f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.50.201/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558259, "uuid": "44d57de6-04f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.230/hiddenbin/boatnet.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558259, "uuid": "44d6e318-04f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.230/hiddenbin/boatnet.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558260, "uuid": "44f9b193-04f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.182.100.55/mig", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558262, "uuid": "468da590-04f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.182.100.55/miner", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558321, "uuid": "6965e7ff-04f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.230/hiddenbin/boatnet.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558730, "uuid": "5d9ff550-04f5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.225/jaws", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558731, "uuid": "5dcc9142-04f5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.2/wget.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558731, "uuid": "5dddf9e6-04f5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.8.78.175/linux", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558731, "uuid": "5de88538-04f5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.59.136.111/1.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558733, "uuid": "5ef3c432-04f5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.181.87.103/cat.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558852, "uuid": "a5e4f325-04f5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.225/bot.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558852, "uuid": "a5e55608-04f5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.225/bot.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558852, "uuid": "a5eb11fb-04f5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.225/bot.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558852, "uuid": "a64aab50-04f5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.8.78.175/miner/z0mbie", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558853, "uuid": "a6611d95-04f5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.8.78.175/miner/fudg3", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558853, "uuid": "a661f36a-04f5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.8.78.175/miner/d1ddy", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558853, "uuid": "a6e1ee0c-04f5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.225/bot.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558853, "uuid": "a6e575ca-04f5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.225/bot.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558920, "uuid": "cece8816-04f5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.225/bot.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558920, "uuid": "ceceafe1-04f5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.225/bot.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558920, "uuid": "cecfdc90-04f5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.2/libraries/s7n.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558920, "uuid": "ced28063-04f5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.2/libraries/s7n.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558920, "uuid": "ced42731-04f5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.2/libraries/s7n.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558920, "uuid": "ced5b264-04f5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.225/bot.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558920, "uuid": "ced81e96-04f5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.2/libraries/s7n.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558920, "uuid": "ced841d6-04f5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.2/libraries/s7n.armv6l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558920, "uuid": "cedbecd9-04f5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.225/bot.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558921, "uuid": "ceef44bb-04f5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.2/libraries/s7n.armv5l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558921, "uuid": "ceefab73-04f5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.2/libraries/s7n.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558921, "uuid": "cef34618-04f5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.2/libraries/s7n.powerpc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558921, "uuid": "cef357db-04f5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.2/libraries/s7n.armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558921, "uuid": "cef4b1a7-04f5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.2/libraries/s7n.armv4l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558923, "uuid": "d086c9c3-04f5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.2/libraries/s7n.i586", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558923, "uuid": "d08d1fb9-04f5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.225/bot.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770558967, "uuid": "ea709b96-04f5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.225/bot.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770559039, "uuid": "1560f6d0-04f6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.20.207:54772/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770559151, "uuid": "5859a76e-04f6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.59.136.111/get", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770559222, "uuid": "82b262bb-04f6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.219.78:59365/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770559398, "uuid": "eb78669d-04f6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.143.3:48530/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770559448, "uuid": "09462b33-04f7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://aixcijiax.mcv.kr/bot.spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770559449, "uuid": "09ccd0a3-04f7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://aixcijiax.mcv.kr/bot.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770559449, "uuid": "09d1ced2-04f7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://aixcijiax.mcv.kr/bot.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770559451, "uuid": "0b3bda50-04f7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://aixcijiax.mcv.kr/bot.arc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770559453, "uuid": "0c10b40a-04f7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://aixcijiax.mcv.kr/bot.i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770559453, "uuid": "0c637702-04f7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://aixcijiax.mcv.kr/bot.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770559453, "uuid": "0c63793e-04f7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://aixcijiax.mcv.kr/bot.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770559453, "uuid": "0c68143b-04f7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://aixcijiax.mcv.kr/bot.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770559453, "uuid": "0c7bedad-04f7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://aixcijiax.mcv.kr/bot.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770559453, "uuid": "0c7bf27e-04f7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://aixcijiax.mcv.kr/bot.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770559453, "uuid": "0c7ffb74-04f7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://aixcijiax.mcv.kr/bot.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770559453, "uuid": "0c83cc49-04f7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://aixcijiax.mcv.kr/jaws", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770559466, "uuid": "14428267-04f7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://aixcijiax.mcv.kr/bot.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770560349, "uuid": "2223695b-04f9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://aixcijiax.mcv.kr/bot.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770560349, "uuid": "222719fc-04f9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.1.224.71:49803/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770560349, "uuid": "222c3633-04f9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.67.188:37410/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770560349, "uuid": "222cc533-04f9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.219.78:59365/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770560349, "uuid": "223567a9-04f9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.197.178:47269/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770560350, "uuid": "22b4b362-04f9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.255.45.233:53303/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770560479, "uuid": "6fd6dda1-04f9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.77.112:58842/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770560651, "uuid": "d6968c5f-04f9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.1.226.106:33380/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770562154, "uuid": "5675f673-04fd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.1.224.43:40161/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770562207, "uuid": "760c0f8c-04fd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.232/run.sh", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770562208, "uuid": "761e5a47-04fd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/ahwsuidahwiduawh/w/raw/refs/heads/main/Client-built.exe", "Tag": [ { "name": "discordrat", "colour": "#cc0866", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770562210, "uuid": "77b2cd7f-04fd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/mollyjaw/stuff/releases/download/Version_data/version.dat", "Tag": [ { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770562210, "uuid": "77dde1cc-04fd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/bland3h/d3d9/-/raw/main/ZUV9745L7374.exe", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gitlab", "colour": "#a79648", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770562220, "uuid": "7d6853ee-04fd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.215.43:52037/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770562388, "uuid": "e1670d9d-04fd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.67.188:37410/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770562518, "uuid": "2eed2b3a-04fe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.181.87.103/sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770562518, "uuid": "2ef136d2-04fe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.181.87.103/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770562518, "uuid": "2efb76cd-04fe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.181.87.103/armhf", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770562518, "uuid": "2efde342-04fe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.181.87.103/powerpc64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770562519, "uuid": "2f8fe4f4-04fe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.181.87.103/arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770562519, "uuid": "2f911691-04fe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.181.87.103/aarch64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770562519, "uuid": "2f942594-04fe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.181.87.103/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770562520, "uuid": "303244ff-04fe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.181.87.103/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770562520, "uuid": "30326937-04fe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.181.87.103/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770562520, "uuid": "30778ab1-04fe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.198.78:40042/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770562520, "uuid": "307e2bac-04fe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.181.87.103/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770562521, "uuid": "30cd421e-04fe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.181.87.103/i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770562525, "uuid": "33422020-04fe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.181.87.103/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770562824, "uuid": "e5d00ec9-04fe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.218.229:53154/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770562950, "uuid": "30728695-04ff-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.218.229:53154/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770563059, "uuid": "71600cb1-04ff-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.71.70:48168/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770563470, "uuid": "66df316a-0500-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.191.22.109:39791/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770563533, "uuid": "8c3c6f7f-0500-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.215.43:52037/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770563782, "uuid": "20e095e4-0501-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.31.205:54186/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770563904, "uuid": "6902b64d-0501-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.194.77:53027/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770564137, "uuid": "f422d527-0501-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.160.224:52726/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770564321, "uuid": "61c22851-0502-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.249.99:51344/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770564432, "uuid": "a3b9a0ad-0502-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.78.80:58591/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770564671, "uuid": "32addcc6-0503-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.71.70:48168/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770564849, "uuid": "9c9e54b1-0503-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.191.22.109:39791/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770565385, "uuid": "dbd86404-0504-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/stp26det/fallback/base", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770565387, "uuid": "dcfc7487-0504-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.194.77:53027/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770565455, "uuid": "05db039b-0505-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.7.119:46025/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770565455, "uuid": "05ea6307-0505-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.123.64:45402/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770565521, "uuid": "2cefeee7-0505-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.31.205:54186/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770565702, "uuid": "98f7e341-0505-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.191.124.27:33511/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770565809, "uuid": "d8da42ae-0505-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.59.0.186:43445/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770566289, "uuid": "f72b6bba-0506-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/748049926/GoU81HQ.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "GoProxy", "colour": "#48c16b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770566467, "uuid": "60c9e84e-0507-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/6608710704/z6HdLiH.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770566482, "uuid": "69d5fe7a-0507-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.80.161:58512/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770566715, "uuid": "f4e672ba-0507-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.31.197:45708/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770566949, "uuid": "8056b516-0508-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.191.17:55682/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770567195, "uuid": "12c893de-0509-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.123.64:45402/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770567196, "uuid": "13454d32-0509-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.224.215:36413/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770567487, "uuid": "c112e151-0509-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.191.124.27:33511/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770567559, "uuid": "ebdbbde9-0509-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.80.161:58512/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770567678, "uuid": "32f2f8ad-050a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.253.108:48135/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770567858, "uuid": "9e5098a8-050a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.176.122:39594/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770568334, "uuid": "b9d8dd4a-050b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.232/bins/xnxnxnxnxnxnxnxnsh4xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770568334, "uuid": "b9e310da-050b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.232/bins/xnxnxnxnxnxnxnxnloongarch64xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770568334, "uuid": "b9e31d02-050b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.232/bins/xnxnxnxnxnxnxnxni386xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770568334, "uuid": "b9e32003-050b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.232/bins/xnxnxnxnxnxnxnxnmicroblazexnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770568334, "uuid": "b9e365ca-050b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.232/bins/xnxnxnxnxnxnxnxnsh2xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770568334, "uuid": "b9e366ea-050b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.232/bins/xnxnxnxnxnxnxnxnx86_64xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770568334, "uuid": "b9e3801e-050b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.232/bins/xnxnxnxnxnxnxnxnpowerpcxnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770568334, "uuid": "b9e4baa0-050b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.232/bins/xnxnxnxnxnxnxnxnor1kxnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770568389, "uuid": "da581dad-050b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.232/bins/xnxnxnxnxnxnxnxnmipsxnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770568389, "uuid": "da582a18-050b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.232/bins/xnxnxnxnxnxnxnxnm68kxnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770568389, "uuid": "da5a85c9-050b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.232/bins/xnxnxnxnxnxnxnxnriscv64xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770568450, "uuid": "ff114592-050b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.232/bins/xnxnxnxnxnxnxnxnaarch64xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770568450, "uuid": "ff11812b-050b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.232/bins/xnxnxnxnxnxnxnxnriscv32xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770568582, "uuid": "4d7d9f86-050c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.118.141.22:35996/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770568833, "uuid": "e338b57c-050c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.176.122:39594/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770568879, "uuid": "fe9567f2-050c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.182.166.140:54627/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770569177, "uuid": "b081aaad-050d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.210.195/yarn", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770569177, "uuid": "b08203dc-050d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.210.195/goahead", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770569178, "uuid": "b09bdd1c-050d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.210.195/zyxel", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770569178, "uuid": "b09bf9aa-050d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.210.195/zte", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770569178, "uuid": "b09ceb43-050d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.210.195/aws", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770569178, "uuid": "b0ac169f-050d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.210.195/jaws", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770569178, "uuid": "b0cf24d4-050d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.210.195/huawei", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770569178, "uuid": "b0f484d6-050d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.210.195/thinkphp", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770569178, "uuid": "b0f4bea4-050d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.210.195/lg", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770569178, "uuid": "b115c5bb-050d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.210.195/pulse", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770569178, "uuid": "b11e9d07-050d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.210.195/sora.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770569178, "uuid": "b12490a0-050d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.210.195/gpon443", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770569179, "uuid": "b146dbde-050d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.210.195/hnap", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770569230, "uuid": "cfa56e6f-050d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.210.195/pay", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770569230, "uuid": "cfa5914c-050d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.210.195/bin", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770569230, "uuid": "cfd1d484-050d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.210.195/realtek", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770569409, "uuid": "3a9ed1f9-050e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.193.178:33431/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770569536, "uuid": "86844686-050e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.0.170:60238/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770570079, "uuid": "c9c1bb65-050f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.87.108:52286/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770570377, "uuid": "7b4651fb-0510-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.182.166.140:54627/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770570737, "uuid": "5249accc-0511-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.132.185:55030/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770570859, "uuid": "9abb2fc1-0511-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.0.170:60238/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770571223, "uuid": "73cbd3dd-0512-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.87.108:52286/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770571223, "uuid": "740ed9a8-0512-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.132.185:55030/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770571517, "uuid": "2319bb9e-0513-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.198.116:34903/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770571809, "uuid": "d125c00c-0513-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/748049926/rl0ab2A.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "GoProxy", "colour": "#48c16b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572049, "uuid": "5ff0b6e8-0514-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-253a2792b258475090b37e696b124d1f.r2.dev/kuri-9.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572067, "uuid": "6add1b46-0514-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.223.246:35790/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572165, "uuid": "a56d2674-0514-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://2wjmdomc.breathforgiv.digital/?=check&&actmn=GdDTxbxDMAYbyRXo", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572411, "uuid": "37a28be6-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://35.192.164.94/Claim-Form2025.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572465, "uuid": "57c51837-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.110.28.230/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572465, "uuid": "583b10c8-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.147.172.92:8081/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572466, "uuid": "587f7829-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.79.251.70/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572466, "uuid": "58945ab2-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.76.141.175/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572467, "uuid": "5908d165-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://38.147.172.92:18443/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572467, "uuid": "591e8950-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://43.134.61.180/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572468, "uuid": "59bc27d4-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://176.65.151.201:4443/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572471, "uuid": "5b909ee3-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://172.208.108.15/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572471, "uuid": "5b9d5292-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://54.85.23.82:8443/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572472, "uuid": "5c61d328-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://188.166.178.198/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "5c9fcfc5-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://51.79.251.70/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "5ca0dd21-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://35.199.157.76/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "5ccd4b5f-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.150.108.229/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "5ccd7af0-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://vitoboy.com/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "5ccf4bff-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.zyhservers.top/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "5cd5da03-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://52.248.41.253:8443/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "5ce1240a-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://banner.patch-support.com/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "5ce256c7-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://39.104.78.25:8443/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "5ce42e36-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://124.222.218.20:2345/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "5ce674bb-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://120.27.211.70:18443/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "5ce69d55-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://18.119.116.151/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "5ce711f1-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.190.160.206/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "5cecc129-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.3.233.166:59850/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "5d09d3a1-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://101.200.193.211:8088/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "5d13607e-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://120.27.211.70:18444/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572473, "uuid": "5d1cc263-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://47.109.48.57/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572474, "uuid": "5d2833b4-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://39.98.51.2:18443/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572474, "uuid": "5d2d7505-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://8.219.76.168/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572474, "uuid": "5d380396-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://36.140.162.173:4433/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572474, "uuid": "5d389921-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://47.105.36.109/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572474, "uuid": "5d392cbf-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://47.120.46.230/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572474, "uuid": "5d3f0436-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://zyhservers.top/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572474, "uuid": "5d43787e-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://54.170.125.202/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572474, "uuid": "5d443676-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://170.64.234.187/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572474, "uuid": "5d56d466-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://170.64.221.190/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572474, "uuid": "5d6ae39d-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.149.192.54:7443/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572474, "uuid": "5d783fbe-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://202.146.218.74:2024/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572474, "uuid": "5d866249-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://150.109.244.222:8888/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572474, "uuid": "5d8cb683-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.151.201:8080/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572474, "uuid": "5d97d51d-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://223.26.63.57/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572475, "uuid": "5dc92765-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://165.245.141.24/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572475, "uuid": "5dd7a79a-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://111.228.55.96/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572475, "uuid": "5e3d0e57-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://38.147.172.92:8443/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572476, "uuid": "5e6a5391-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://8.152.99.85:8443/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572476, "uuid": "5e8e6485-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://113.45.155.146:4433/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572477, "uuid": "5f133ec2-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://115.190.233.79/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572478, "uuid": "5f97c74c-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.118.124.53/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572479, "uuid": "60255bae-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://3.66.49.194/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572479, "uuid": "6030466d-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://8.152.99.85/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572479, "uuid": "603a0f82-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.feft234321.xyz/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572479, "uuid": "603a3cc3-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://179.43.186.214:7889/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572479, "uuid": "60445046-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.149.192.54:8080/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572479, "uuid": "605d8fc7-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://212.14.244.222:808/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572479, "uuid": "605e472c-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://tr0ff3.cn/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572479, "uuid": "606784b0-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://39.98.51.2:18444/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572479, "uuid": "608f9007-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://172.190.244.213/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572479, "uuid": "60927b65-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://8.138.222.215/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572479, "uuid": "6099d155-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://47.92.82.162/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572479, "uuid": "60b08328-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://103.69.194.63/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572479, "uuid": "60b204d8-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://38.38.250.99:5800/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572480, "uuid": "60bf73ed-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://115.120.245.134/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572480, "uuid": "60e6e89f-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://138.124.15.54:63798/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572484, "uuid": "6366e96c-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://117.72.79.68:30001/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572485, "uuid": "63b2be55-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://123.58.64.57:34567/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572487, "uuid": "64e9a01d-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://115.190.140.220:1443/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572496, "uuid": "6a5492eb-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://117.72.181.104/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572526, "uuid": "7c2a280a-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://13.41.96.167/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770572536, "uuid": "829b866c-0515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.223.246:35790/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770573674, "uuid": "289e898e-0518-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.210.195/bins/sora.ppc440fp", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770573674, "uuid": "289e8a4f-0518-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.210.195/bins/sora.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770573674, "uuid": "289e8a88-0518-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.210.195/bins/sora.i468", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770573982, "uuid": "e08745c9-0518-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.198.116:34903/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770574167, "uuid": "4e5ebb62-0519-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.231.21:55172/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770574340, "uuid": "b58eb08f-0519-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.76.237:52745/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770574447, "uuid": "f547bc54-0519-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8346450916/1H6Ggm3.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770574582, "uuid": "45cd89f1-051a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.220.69.49:42873/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770575002, "uuid": "4061a608-051b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.210.36:52944/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770575475, "uuid": "5a53aef4-051c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.118.36:53884/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770575476, "uuid": "5ac4704c-051c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.76.237:52745/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770575723, "uuid": "ee1d1fcd-051c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.207.60:55505/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770576266, "uuid": "31649948-051e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.55.61:47029/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770576575, "uuid": "e9a95287-051e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.124.236:47461/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770577165, "uuid": "495ab3c5-0520-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.202.19.232:60344/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770577331, "uuid": "ac94055c-0520-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.93.91:44388/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770577334, "uuid": "ae070598-0520-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.57.67.51:64237/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770577339, "uuid": "b1745744-0520-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.70.241:53035/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770577451, "uuid": "f40e6081-0520-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.183.163:57322/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770577511, "uuid": "1794cd0e-0521-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.12.22:59593/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770577950, "uuid": "1d85328b-0522-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.89.197:50388/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770578122, "uuid": "83e77943-0522-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.174.101.236:58160/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770578359, "uuid": "11228280-0523-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.241.244:34610/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770578485, "uuid": "5c40046e-0523-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.213.89:54795/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770578603, "uuid": "a29c7186-0523-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.207.60:55505/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770578782, "uuid": "0d62d2bc-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.229.188:54078/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770578957, "uuid": "7567ac1a-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.59.136.111/client", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770578958, "uuid": "75f63e35-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.59.136.111/dns", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770578959, "uuid": "7685f9a8-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.246.93.156/busybox-armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770578962, "uuid": "78c2ae0e-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.162/lol", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770578962, "uuid": "78c2b3a0-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.162/qno", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770578963, "uuid": "792e025d-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.50.201/mips64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770578964, "uuid": "79b04fad-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.59.136.111/check", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770578964, "uuid": "79f547e6-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.59.136.111/aws", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770578965, "uuid": "7a57b27f-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.246.93.156/proxy", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770578967, "uuid": "7b6d3013-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.162/test", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579014, "uuid": "97890e6b-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.188/i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579016, "uuid": "98988a4b-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.8.78.15/err", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579016, "uuid": "98c02968-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.8.78.15/root", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579018, "uuid": "9a35e1aa-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.78/qs", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579020, "uuid": "9afab4e2-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.188/ub8ehJSePAfc9FYqZIT6.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579020, "uuid": "9b3d5147-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.188/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579020, "uuid": "9b44b6fa-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.59.136.111/ntp", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579020, "uuid": "9b4618cc-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.188/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579020, "uuid": "9b4a1e3b-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.188/arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579020, "uuid": "9b4a3aa2-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.188/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579021, "uuid": "9bc11233-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.188/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579021, "uuid": "9bc2cc4e-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.188/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579021, "uuid": "9bc54338-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.8.78.15/xpl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579021, "uuid": "9bd7f307-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.188/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579022, "uuid": "9c17660b-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.8.78.175/systemd", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579022, "uuid": "9c49693b-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.8.78.15/gs", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579023, "uuid": "9cf14bb5-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.188/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579023, "uuid": "9d037c86-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.8.78.15/system", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579024, "uuid": "9d5f87fa-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.188/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579024, "uuid": "9d95929b-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.188/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579024, "uuid": "9da073bd-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.225/bot.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579024, "uuid": "9daf04f0-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.86.210:58097/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579025, "uuid": "9de36a01-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.8.78.15/ss", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579025, "uuid": "9dff71bd-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.182.100.55/dec", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579029, "uuid": "a0c34b07-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.59.136.111/tcp", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579072, "uuid": "ba5df831-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.210.68/u.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579073, "uuid": "ba867f96-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.89.197:50388/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579081, "uuid": "bfc72544-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.126/ftpget.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579091, "uuid": "c580425b-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.162/bee", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579091, "uuid": "c58642e2-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.126/x", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579091, "uuid": "c5879ddd-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.126/av.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579091, "uuid": "c589a390-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.126/geo", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579132, "uuid": "ddf45b09-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.59.136.111/cf", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579135, "uuid": "dfe4dc5e-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.225/realtek", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579135, "uuid": "dfe52852-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.225/gpon443", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579135, "uuid": "dfe97064-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.225/lg", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579135, "uuid": "dfec3cdf-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.225/pulse", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579135, "uuid": "dfec4aa2-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.225/goahead", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579135, "uuid": "dfec576b-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.225/huawei", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579135, "uuid": "dfec7f40-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.225/hnap", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579135, "uuid": "dfec9307-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.225/thinkphp", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579135, "uuid": "dff10112-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.225/zte", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579135, "uuid": "dff10ff6-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.225/aws", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579135, "uuid": "dff74a7c-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.225/zyxel", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579136, "uuid": "e00530c7-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.59.136.111/cc.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579136, "uuid": "e007b0c8-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.225/yarn", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579136, "uuid": "e007e2e1-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.59.136.111/ds.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579138, "uuid": "e1ac9426-0524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.182.100.55/deploy.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579200, "uuid": "065b201e-0525-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.249.140:52666/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579202, "uuid": "0772e353-0525-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.183.236:47301/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579263, "uuid": "2c0c2eea-0525-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.190.137:55179/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579318, "uuid": "4cdc1111-0525-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.201.248:51113/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579562, "uuid": "de55950c-0525-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.8.78.15/miner/start", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579562, "uuid": "de5cbdd1-0525-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.8.78.15/miner/fd-monitor", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579563, "uuid": "deb34fad-0525-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.8.78.15/miner/java.err", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579687, "uuid": "287c8f02-0526-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.60.248.104/ss", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579689, "uuid": "29f1dbad-0526-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.8.78.15/watching", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579689, "uuid": "2a198d8c-0526-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.8.78.15/gs-netcat_linux-x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579725, "uuid": "3f9901d3-0526-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/6832239903/1prxghq.ps1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579853, "uuid": "8be7d871-0526-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.123.228:49862/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579854, "uuid": "8c6de75c-0526-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.86.210:58097/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579911, "uuid": "ae72471e-0526-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.213.89:54795/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579917, "uuid": "b1b44f61-0526-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.242.247:44108/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579973, "uuid": "d36ace43-0526-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://aixcijiax.mcv.kr/thinkphp", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579973, "uuid": "d36ae6f2-0526-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://aixcijiax.mcv.kr/bot.x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579973, "uuid": "d36ae9fb-0526-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://aixcijiax.mcv.kr/pulse", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579973, "uuid": "d36af439-0526-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://aixcijiax.mcv.kr/realtek", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579973, "uuid": "d36f2477-0526-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://aixcijiax.mcv.kr/goahead", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579973, "uuid": "d3783eb0-0526-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://aixcijiax.mcv.kr/hnap", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579976, "uuid": "d51ce1bc-0526-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://aixcijiax.mcv.kr/huawei", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579976, "uuid": "d52f6116-0526-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://aixcijiax.mcv.kr/gpon443", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579977, "uuid": "d54b560a-0526-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://aixcijiax.mcv.kr/yarn", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579977, "uuid": "d5daab01-0526-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://aixcijiax.mcv.kr/zte", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770579977, "uuid": "d5dac368-0526-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://aixcijiax.mcv.kr/zyxel", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770580028, "uuid": "f41b25c9-0526-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://aixcijiax.mcv.kr/aws", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770580037, "uuid": "f9580b79-0526-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://aixcijiax.mcv.kr/lg", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770580567, "uuid": "3579296a-0528-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.242.30.234/c.sh", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770580568, "uuid": "35bf9715-0528-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.242.30.234/bins/frost.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770580568, "uuid": "35c15573-0528-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.242.30.234/wget.sh", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770580569, "uuid": "36ae4208-0528-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.242.30.234/bins/frost.arm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770580570, "uuid": "371ce75e-0528-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.242.30.234/w.sh", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770580572, "uuid": "38543e0b-0528-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.242.30.234/bins/frost.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770580572, "uuid": "3865d229-0528-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.242.30.234/bins/frost.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770580573, "uuid": "38a2e0e7-0528-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.242.30.234/bins/frost.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770580878, "uuid": "eee22aa3-0528-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.115.1:50434/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770581054, "uuid": "579d2670-0529-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://s.na-cs.com/b2f628/b.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770581242, "uuid": "c76b58d2-0529-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.171.82:55233/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770581531, "uuid": "73f21628-052a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.201.248:51113/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770581712, "uuid": "dff71d37-052a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.115.167:58524/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770582018, "uuid": "95d24ff4-052b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.242.30.234/bins/frost.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770582018, "uuid": "95d253f4-052b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.242.30.234/bins/frost.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770582018, "uuid": "95d255c7-052b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.242.30.234/bins/frost.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770582018, "uuid": "95d26384-052b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.242.30.234/bins/frost.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770582018, "uuid": "95d26a66-052b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.242.30.234/bins/frost.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770582018, "uuid": "95d29054-052b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.242.30.234/bins/frost.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770582018, "uuid": "95d2a53f-052b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.242.30.234/bins/frost.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770582193, "uuid": "fe8c880c-052b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.115.1:50434/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770582314, "uuid": "46427ab0-052c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.4.76:55681/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770582493, "uuid": "b16b201f-052c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.115.167:58524/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770582858, "uuid": "8a842a08-052d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.166.68:37668/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770582858, "uuid": "8a949704-052d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.185.242:41989/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770583216, "uuid": "6041bc38-052e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.117.157:43244/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770583400, "uuid": "cdb04142-052e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.208.111.37:48834/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770583700, "uuid": "80e1e1cb-052f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.180.85:56793/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770584174, "uuid": "9af5f215-0530-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.4.76:55681/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770584357, "uuid": "086e4dcc-0531-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.178.146:53085/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770584538, "uuid": "742aea33-0531-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.208.111.37:48834/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770585137, "uuid": "d9506abe-0532-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.229.188:54078/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770585193, "uuid": "faa105e9-0532-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.231.213:46892/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770585489, "uuid": "aaae4075-0533-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.235.46:35372/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770585617, "uuid": "f7362b3a-0533-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.56.214:59564/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770585729, "uuid": "3a232d44-0534-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.21/bins/1mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770585729, "uuid": "3a261907-0534-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.21/bins/1arm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770585729, "uuid": "3a2e7058-0534-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.21/bins/1ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770585729, "uuid": "3a301c89-0534-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.21/bins/1arm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770585729, "uuid": "3a34fd1a-0534-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.21/bins/1x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770585729, "uuid": "3a40e9e7-0534-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.21/bins/1arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770585729, "uuid": "3a40f227-0534-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.21/bins/1sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770585729, "uuid": "3a45a470-0534-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.21/bins/1spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770585729, "uuid": "3a45aa28-0534-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.21/bins/1arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770585729, "uuid": "3a4aa010-0534-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.21/bins/1mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770585729, "uuid": "3a4e561a-0534-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.21/bins/1m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770586025, "uuid": "ea4d78e4-0534-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/6832239903/1prxghq.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770586514, "uuid": "0deee0c4-0536-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.202.19.232:60344/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770586576, "uuid": "32b37d3e-0536-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.231.213:46892/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770586693, "uuid": "789135ce-0536-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.230.233.55:58283/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770586695, "uuid": "799c6ea0-0536-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.222.35:45200/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770587117, "uuid": "756e35cc-0537-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.138.134.90:50454/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770587290, "uuid": "dc92ed40-0537-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.179.81:60855/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770587595, "uuid": "91f216fd-0538-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.173:38125/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770587717, "uuid": "db13cb72-0538-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.138.134.90:50454/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770587718, "uuid": "db5ef776-0538-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.170.122:38144/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770587776, "uuid": "fe472463-0538-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.35.154:50130/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770587836, "uuid": "21f9cbed-0539-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.56.214:59564/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770588308, "uuid": "3b5b84a0-053a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.222.35:45200/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770588320, "uuid": "42a72287-053a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.125.202:37221/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770588727, "uuid": "34b1bd44-053b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/504463127/BU3o4QJ.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770588930, "uuid": "ae3ee833-053b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.235.46:35372/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770588965, "uuid": "c2e02565-053b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/stp26det/fallback/Write12", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770588977, "uuid": "c9b02806-053b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.173:38125/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770588977, "uuid": "c9b72632-053b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.179.81:60855/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770588985, "uuid": "ce7d2623-053b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.49.72:50921/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770589150, "uuid": "315a2379-053c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.230.233.55:58283/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770589512, "uuid": "08ffeb5a-053d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.81.252:50232/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770589567, "uuid": "29d5efb7-053d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.70.206:56049/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770589934, "uuid": "0435a556-053e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.245.10:54093/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770590674, "uuid": "bda24c2c-053f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.102.101:41910/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770590957, "uuid": "6619f1e2-0540-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.237.192:43874/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770591152, "uuid": "daa416b2-0540-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.3.202:38375/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770591797, "uuid": "5a89a893-0542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.237.192:43874/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770591930, "uuid": "aa0dc5bd-0542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.2.23:35787/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770591934, "uuid": "ac9ef6ea-0542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.1.224.43:40161/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770592576, "uuid": "2b51dbb5-0544-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.85.30:59492/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770592822, "uuid": "bdc833ea-0544-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.3.202:38375/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770592942, "uuid": "051ea1b4-0545-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.192.125:48571/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770593181, "uuid": "93d8ca72-0545-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.123.31:56420/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770593182, "uuid": "9468ea75-0545-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.2.23:35787/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770593839, "uuid": "1c2d61b6-0547-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.53.55.126:39417/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770593961, "uuid": "64608f9c-0547-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.64.36.143:47548/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770594194, "uuid": "ef53446e-0547-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.236.140:51649/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770595157, "uuid": "2d9288ec-054a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.133.112:42211/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770540484, "uuid": "e1c6f83a-04ca-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.2.218.40", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770540305, "uuid": "77568345-04ca-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.217.84.226", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572474, "uuid": "5d3ed2f8-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.69.194.63", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770533165, "uuid": "d7652900-04b9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "106.59.0.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572464, "uuid": "578f8248-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.149.192.54", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770589563, "uuid": "277e74ee-053d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.70.206", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770509825, "uuid": "7fc3b7dc-0483-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.77.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770536344, "uuid": "3e867bb9-04c1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.40.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770577924, "uuid": "0e0c2bc2-0522-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.89.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770546964, "uuid": "f873c9fd-04d9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.39.230.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770589925, "uuid": "febdb45d-053d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.39.245.10", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572467, "uuid": "594b2cb3-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "111.228.55.96", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770550745, "uuid": "c5ade680-04e2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.225.50.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770537484, "uuid": "e5c4fac3-04c3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.160.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770587106, "uuid": "6e99d8f5-0537-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.138.134.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770586684, "uuid": "7356e66f-0536-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.230.233.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770583205, "uuid": "59b2d04d-052e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.236.117.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770567184, "uuid": "0c2c29eb-0509-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.239.224.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572471, "uuid": "5b82435b-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.45.155.146", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770537664, "uuid": "5153c7f7-04c4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.217.63.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572474, "uuid": "5d619290-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.120.245.134", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572473, "uuid": "5cf91a80-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.190.140.220", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572464, "uuid": "578aadfd-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.190.233.79", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770574324, "uuid": "ac1d98cb-0519-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.76.237", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770519424, "uuid": "d90159b7-0499-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.78.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770579185, "uuid": "fd8300cb-0524-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.183.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770545406, "uuid": "577c526c-04d6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.231.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770566944, "uuid": "7d23e0d2-0508-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.191.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770563885, "uuid": "5df1572d-0501-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.53.194.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770557525, "uuid": "8f3f2ae8-04f2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.20.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770509584, "uuid": "f0069f78-0482-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.159.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770513424, "uuid": "e11815c2-048b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.59.29.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770522305, "uuid": "8e9f1418-04a0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.168.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770523384, "uuid": "11901d2f-04a3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.144.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543184, "uuid": "2b77a5c9-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "1158.94.210.68" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770527764, "uuid": "4408ef2a-04ad-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.10.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770589505, "uuid": "047149af-053d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.81.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770588964, "uuid": "c25923de-053b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.49.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770591124, "uuid": "c9dfb665-0540-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.3.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572474, "uuid": "5d2c57b0-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.72.181.104", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572464, "uuid": "5789d96b-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.72.79.68", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770585485, "uuid": "a8547c74-0533-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.116.235.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770523205, "uuid": "a70dd25f-04a2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.179.255.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770568865, "uuid": "f64de177-050c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.182.166.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770541625, "uuid": "89b8104b-04cd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.184.31.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770579906, "uuid": "ab07f677-0526-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.185.242.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572464, "uuid": "5788a69e-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.27.211.70", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770532325, "uuid": "e2b085e1-04b7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.18.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770552606, "uuid": "1aee7b0c-04e7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.194.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770565444, "uuid": "ff3d697a-0504-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.7.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770581224, "uuid": "bc9bee2a-0529-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.171.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770545885, "uuid": "74f8a36c-04d7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.231.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770595145, "uuid": "263f1fb1-054a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.129.133.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770525605, "uuid": "3d982074-04a8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.13.24.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558125, "uuid": "f4a5f2ca-04f3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.13.39.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770574985, "uuid": "360160bb-051b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.210.36", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770549064, "uuid": "dc2a7de8-04de-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.251.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770591905, "uuid": "9b73e53c-0542-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.188.2.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770544984, "uuid": "5c6203e9-04d5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.189.21.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770537904, "uuid": "e024cfdf-04c4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.46.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770533224, "uuid": "fad667a8-04b9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.118.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770546964, "uuid": "f873aaa4-04d9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.125.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770537544, "uuid": "09584d94-04c4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.125.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572464, "uuid": "578d3dc7-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.58.64.57", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572464, "uuid": "5789bb51-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.222.218.20", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770568565, "uuid": "4354cc37-050c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.118.141.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770582305, "uuid": "4140c4b5-052c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.4.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770579244, "uuid": "20b64a3e-0525-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.190.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770545945, "uuid": "991a47cf-04d7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.45.17.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543364, "uuid": "96b1954d-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "136.113.36.100", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572464, "uuid": "57b4176c-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "138.124.15.54", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770540364, "uuid": "9a2a1fd8-04ca-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "141.237.242.31", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770540364, "uuid": "9a2b002c-04ca-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "146.255.245.170", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572464, "uuid": "5795f2ee-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "150.109.244.222", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770580564, "uuid": "33b329fe-0528-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "151.242.30.234", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558724, "uuid": "59edcabc-04f5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "158.94.208.2", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770545105, "uuid": "a3fde0d1-04d5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "158.94.210.195", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543453, "uuid": "cba5a2fb-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "165.232.165.152", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572469, "uuid": "5a9e903b-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "165.245.141.24", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770512585, "uuid": "ec91c4af-0489-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "167.71.115.223", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572464, "uuid": "57968d1e-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "170.64.221.190", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572464, "uuid": "579c1a19-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "170.64.234.187", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770521464, "uuid": "98fcb982-049e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "171.231.122.208", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572474, "uuid": "5d2e1669-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "172.190.244.213", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572464, "uuid": "57921f4f-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "172.208.108.15", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770578106, "uuid": "7a16aeb1-0522-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.174.101.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770529206, "uuid": "9facaa1b-04b0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.175.15.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770540424, "uuid": "be4e3517-04ca-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.13.192", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572464, "uuid": "578d433a-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.151.201", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770540244, "uuid": "52be30be-04ca-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "177.155.128.195", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572464, "uuid": "57879592-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "18.119.116.151", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770565685, "uuid": "8ea19cfe-0505-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.191.124.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770563465, "uuid": "63969647-0500-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.191.22.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770540124, "uuid": "0b94982d-04ca-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.7.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770549963, "uuid": "f3fdde7a-04e0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.195.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770549424, "uuid": "b2ac1853-04df-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.192.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770548525, "uuid": "9a9b399e-04dd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.49.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770562505, "uuid": "278a6b7d-04fe-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.198.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770547024, "uuid": "1c54be22-04da-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.48.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770565444, "uuid": "ff3d5e0e-0504-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.123.64", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770546184, "uuid": "2778758b-04d8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.178.91", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770594184, "uuid": "e9dec919-0547-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.236.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770539945, "uuid": "a079151f-04c9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.123.253.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770580864, "uuid": "e65b6490-0528-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.115.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770576544, "uuid": "d7757ed1-051e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.124.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770583685, "uuid": "777f2cea-052f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.180.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770508863, "uuid": "42261385-0481-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.99.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770593825, "uuid": "136b0d2c-0547-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.53.55.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770540484, "uuid": "e1c6ce57-04ca-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.30.46.167", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770540244, "uuid": "52be251c-04ca-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.75.110.142", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770540364, "uuid": "9a2a1b82-04ca-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "186.39.18.40", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572464, "uuid": "57917e9f-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.3.233.166", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770540124, "uuid": "0b948b63-04ca-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "2.103.70.96", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572464, "uuid": "57955daf-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "202.146.218.74", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770540424, "uuid": "be4e611e-04ca-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "212.21.31.221", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770593945, "uuid": "5af6f8eb-0547-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "213.64.36.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770582844, "uuid": "82b10368-052d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.154.185.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770540484, "uuid": "e1c68186-04ca-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.222.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770551224, "uuid": "e3ad2606-04e3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.232.115", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770538565, "uuid": "69e767ff-04c6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.254.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770541625, "uuid": "89b80bdf-04cd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.1.226.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770545705, "uuid": "09b545e1-04d7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.13.248.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770554525, "uuid": "92f13a40-04eb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.17.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770548824, "uuid": "4d0372d9-04de-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.193.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770577144, "uuid": "3cea6e2a-0520-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.202.19.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770544504, "uuid": "3e2d936e-04d4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.87.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770562206, "uuid": "7517129d-04fd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.215.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770536224, "uuid": "f6c9475b-04c0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.103.245", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770575706, "uuid": "e41fd5f5-051c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.207.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770526084, "uuid": "5ad3f30a-04a9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.240.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770583384, "uuid": "c4796b71-052e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.208.111.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572464, "uuid": "57b389ab-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.26.63.57", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770540184, "uuid": "2f1771fa-04ca-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "24.245.129.91", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770587284, "uuid": "d8dd2759-0537-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.179.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770509284, "uuid": "3d53afe0-0482-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.181.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770514564, "uuid": "8896b1b1-048e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.213.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770519064, "uuid": "02b20add-0499-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.45.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770524284, "uuid": "29dcff06-04a5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.27.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572163, "uuid": "a40dbd43-0514-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "2wjmdomc.breathforgiv.digital" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572474, "uuid": "5d64c320-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "3.66.49.194", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770540364, "uuid": "9a2b0aac-04ca-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "31.148.121.247", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770540484, "uuid": "e1c6feb5-04ca-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "31.207.243.122", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770540305, "uuid": "7756adbe-04ca-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "31.28.238.16", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558185, "uuid": "185b4fe2-04f4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "31.58.50.201", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558724, "uuid": "59eddc47-04f5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "31.59.136.111", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572404, "uuid": "33f59ab4-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "35.192.164.94", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572464, "uuid": "579bf16b-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "35.199.157.76", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770540305, "uuid": "7756a00f-04ca-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.29.91.102", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572464, "uuid": "57870b95-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "38.147.172.92", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572474, "uuid": "5d259113-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "38.38.250.99", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572464, "uuid": "57987fa9-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.104.78.25", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543364, "uuid": "96b20a5b-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.106.81.175", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false }, { "name": "ScarfaceStealer", "colour": "#660BB4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770523444, "uuid": "352d5e38-04a3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.40.152.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770533644, "uuid": "f53439cb-04ba-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.79.1.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572464, "uuid": "579a859d-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.98.51.2", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770587705, "uuid": "d3b76976-0538-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.178.170.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770571506, "uuid": "1c29a17f-0513-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.198.116", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770556806, "uuid": "e28cee95-04f0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.65.118", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770579306, "uuid": "45a7544b-0525-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.201.248", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770526505, "uuid": "55a53acd-04aa-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.205.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770554285, "uuid": "04118fd5-04eb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.35.154", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770553566, "uuid": "572b4cf3-04e9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.31.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770536525, "uuid": "aa53fc22-04c1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.74.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770582844, "uuid": "82b0e9f2-052d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.166.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770585184, "uuid": "f526ccd4-0532-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.231.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770570063, "uuid": "c0951f11-050f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.87.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770534124, "uuid": "13548117-04bc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.99.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770562805, "uuid": "da5a2ab1-04fe-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.85.218.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572464, "uuid": "578d38d0-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "43.134.61.180", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572465, "uuid": "580b744d-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.150.108.229", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770540484, "uuid": "e1c6dc77-04ca-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.167.249.58", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543184, "uuid": "2b6c3a14-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.95.146.23", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770540184, "uuid": "2f171e8a-04ca-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.109.73.17", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558185, "uuid": "185b4d80-04f4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.151.182.225", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558185, "uuid": "185c4150-04f4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.151.182.230", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558185, "uuid": "185ce738-04f4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.8.78.15", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558724, "uuid": "59edd97a-04f5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.8.78.175", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572464, "uuid": "57969191-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "47.105.36.109", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572464, "uuid": "578952f7-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "47.120.46.230", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770541384, "uuid": "fa5c19ef-04cc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "47.60.155.144", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572474, "uuid": "5d2e4789-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "47.92.82.162", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770540305, "uuid": "7756b92e-04ca-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.11.69.45", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770540124, "uuid": "0b9439ff-04ca-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.133.139.91", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558724, "uuid": "59eddf54-04f5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.181.87.103", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558244, "uuid": "3bcf876d-04f4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.59.248.237", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572464, "uuid": "5796aee1-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "51.79.251.70", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572464, "uuid": "579e135c-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "52.248.41.253", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572467, "uuid": "591a4c3b-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "54.170.125.202", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572464, "uuid": "578a8c77-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "54.85.23.82", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770560345, "uuid": "2016f0d2-04f9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.255.45.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770540124, "uuid": "0b9413df-04ca-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.126.142", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770516484, "uuid": "00bc9b36-0493-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.218.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770534844, "uuid": "c01f33f5-04bd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.247.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770559206, "uuid": "79487a98-04f6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.19.219.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572044, "uuid": "5d48c46b-0514-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.19.223.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770586684, "uuid": "7356d839-0536-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.222.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770557706, "uuid": "faf09d82-04f2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.137.143.3", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770518344, "uuid": "559295ca-0497-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.137.200.118", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770529564, "uuid": "755aa8d4-04b1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.22.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770527945, "uuid": "aff76a34-04ad-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.158.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770570724, "uuid": "4a9ddda3-0511-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.132.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770550745, "uuid": "c5adcbfc-04e2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.85.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770540305, "uuid": "77563f5b-04ca-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "62.175.253.88", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770540305, "uuid": "77560968-04ca-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.82.189.229", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572474, "uuid": "5d243016-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "8.138.222.215", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572464, "uuid": "578a5b98-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "8.152.99.85", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770511505, "uuid": "695af696-0487-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "80.91.79.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770540364, "uuid": "9a299fc0-04ca-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "81.16.251.131", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770540364, "uuid": "9a2a892e-04ca-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "85.112.69.96", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770540305, "uuid": "77569019-04ca-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "89.210.62.39", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572474, "uuid": "5d2f3b4c-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "92.118.124.53", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770540184, "uuid": "2f16ef64-04ca-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "92.83.216.226", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770540124, "uuid": "0b946c65-04ca-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "95.139.107.233", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770558244, "uuid": "3bcf3cb7-04f4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "95.182.100.55", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543307, "uuid": "74bc2af7-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "aft.aicyberconsult.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770559445, "uuid": "07ce14db-04f7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "aixcijiax.mcv.kr" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543453, "uuid": "cbbb9f75-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "aktivates.fun" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572464, "uuid": "57bfee43-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "banner.patch-support.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543453, "uuid": "cbc8f76c-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "floral-king-36d7.michaelleclair1997.workers.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543453, "uuid": "cbb837d3-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "gist.github.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543453, "uuid": "cbd34a4c-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "i.404.pm" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572044, "uuid": "5d580f53-0514-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-253a2792b258475090b37e696b124d1f.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543364, "uuid": "96c9084d-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-4d163d98fea2481681223bee3f402224.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770581045, "uuid": "52044085-0529-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "s.na-cs.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572475, "uuid": "5dce3af4-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "tr0ff3.cn" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572466, "uuid": "586513c2-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "vitoboy.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770543453, "uuid": "cbc7fc61-04d1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "wispy-butterfly-ed72.michaelleclair1997.workers.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572474, "uuid": "5d6d48ca-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.feft234321.xyz" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572465, "uuid": "582a6140-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.zyhservers.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770572466, "uuid": "58c69383-0515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "zyhservers.top" } ] } }