{ "Event": { "published": true, "date": "2026-03-01", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-03-01", "timestamp": 1772410526, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "caaafb88-6d5e-4d5d-8ba8-2c8d37e23ab9", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "040523a8-e5c0-11ee-b38b-82aee05be84a", "comment": "Malware payload", "timestamp": 1772324896, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772324896, "uuid": "8528dd78-c10d-4121-9adb-d0b8d02695d0", "comment": "Malware payload", "value": "724f25e7f93eae0ae54a80142e11b7ef", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772324896, "uuid": "ebf3164c-be81-403c-af8f-32e8412ff9b1", "comment": "Malware payload", "value": "ab69ef32017a5365ee0e7faca03e1352382865c5672e989d99d2d77ec91c33ef", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772324896, "uuid": "7b34b383-100d-4bec-ab8e-3ec8cec1bd08", "value": "T16D356D56F9808EA2C5D8177BB75DC35833534B78D7DEB102CD08672877AB94A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772324896, "uuid": "055228ad-cb63-42c5-ac78-075bd9189975", "value": "12288:00Bw2wHeeJgR3asIAksAi0uObzkzOgFr1qwRcFjV1D7a9KbsaKjpeFmz4T28bLv:00BnRED/TwOjX0a5xTdv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772324896, "uuid": "6acd64c9-f542-4359-8243-ff44ab564e55", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772324896, "uuid": "c80e3693-d860-4052-9a17-b97fe6625de3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772324896, "uuid": "9cf97348-ab63-469e-8db5-8027f3f56ded", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a29e50-7fd8-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1772324896, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772324896, "uuid": "5b1a6cc5-7b5d-4157-8837-a607aaba9af7", "comment": "Malware payload (Hajime)", "value": "9b6c3518a91d23ed77504b5416bfb5b3", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772324896, "uuid": "7dc9346d-28ce-403f-8431-07712a2f5976", "comment": "Malware payload (Hajime)", "value": "a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772324896, "uuid": "c518e644-a455-44ba-93f6-c3f922abece3", "value": "6D7312E017B517CC1371A8353BED205E9128223972AE35302E97528DF957703BAB2DBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772324896, "uuid": "e9a2aede-6199-4c2b-8943-375d7897055b", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQAvcYkFtZTjzBht5:8D+CAXFYQChaAUk5ljnQssL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772324896, "uuid": "5c3fd90b-4f84-4369-973b-f6663c7c647a", "value": 80280, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a8bc7f01-1505-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772324947, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772324947, "uuid": "c64ef28c-e34f-49d7-9007-e3b797a844bd", "comment": "Malware payload", "value": "5631693f6c87d651e83a3f9b2faad7f1", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772324947, "uuid": "0726cfef-8989-4190-955f-52fe3a41c2a8", "comment": "Malware payload", "value": "4f68f7f94782ea754c5820de81a76b73cab025c989cda72eecd49dc9e27b7197", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772324947, "uuid": "47d49ec5-5920-4c1a-a9d3-cb0ff44ba198", "value": "T1F234238FF6A9E929E7036637815AC35101EBDDC8FB9417D9B709484CF321219A3B72", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772324947, "uuid": "f122c04f-65a2-4603-84d0-eafae0033db9", "value": "6144:qzOLOOsAYyrvbozdZ84wq2ca5TlWvRIGmbm1Sks:qpAYEvbov8Nq2T5Tl+omwl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772324947, "uuid": "792b1eac-5a72-4501-926c-3ae40e0f06a6", "value": 247977, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772324947, "uuid": "e11297e0-3520-45f6-b674-0fee2cea6758", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772326269, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772326269, "uuid": "fad55a5c-9f53-4f56-8de6-6ba1988807f9", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772326269, "uuid": "dfdf2aaa-6638-46bb-b7ad-4ed659dc903d", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772326269, "uuid": "ba5243da-9977-46eb-8c8b-7603b6749411", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772326269, "uuid": "17530b14-37c6-4458-b409-6b8a688f2a41", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772326269, "uuid": "0ec39800-6589-4385-82fe-7bb6649b2732", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fbb6e712-150d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772328522, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772328522, "uuid": "29453a12-3fd0-4144-b1a2-b4854be1440f", "comment": "Malware payload (Mirai)", "value": "94d9db622fdecb6ad1540be009cedd81", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772328522, "uuid": "c6bc8de6-e270-42f5-b214-c9312c3d17eb", "comment": "Malware payload (Mirai)", "value": "1d6309fd04e4395a2858c26b9241cd3a9bb83eb0e6baaa44ef0abe7864fb7e3d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772328522, "uuid": "52f8efe7-b988-4eb1-9162-b18f29d0b856", "value": "T118F23947E683D0F5EC6B1272447BB336C376E1AC1124CA96D7A8E833BD53510A61F2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772328522, "uuid": "907d9861-11ec-4cdc-959b-812090006012", "value": "768:xA4sw7+l5DE6XADlsZT+3Xc7VrDVcmfz76T8K9BISi:xAbE80DSZKnyDVNfv6P9BC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772328522, "uuid": "903bf6fd-eaca-4805-8a40-26b703539bc3", "value": 35056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772328522, "uuid": "2b99c294-557d-4ed5-9a23-79fe9d3b0e28", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f234957-150e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772328689, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772328689, "uuid": "44a917f3-d908-40b9-b4dc-46d4910ff0a7", "comment": "Malware payload (Mirai)", "value": "ca14590d6e67cfb67078cf3c9f9f92b3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772328689, "uuid": "073d3a43-12db-4dee-a843-69ea4d226947", "comment": "Malware payload (Mirai)", "value": "f59923efb819514495231b636f3acb3561d4b3758a9de5d125a2c5ab796ee29e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772328689, "uuid": "e66c9441-0317-4759-ad7d-f1fb77cdd6aa", "value": "T10043D709EFA50EABC8AFCD3346A80F0635DC284712B43F297574D528B75A68756E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772328689, "uuid": "d564bcf6-a537-479f-96b0-5a774495dd8d", "value": "768:LZDcukg+2c5UPhgyl7wdz5K9ZakiXivTe4ONeweOLrHrI5:LGukmPho1mZakT9ONVhLHi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772328689, "uuid": "60438d61-7788-4844-a83e-4bfc709c8275", "value": 55812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772328689, "uuid": "68c048a8-ec08-4a1e-9b87-41a5f58340c9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1772328727, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772328727, "uuid": "d77c796c-0286-4c04-8957-42982a2f2c4c", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772328727, "uuid": "485c512c-416c-4711-8f42-4e8ebc88ed91", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772328727, "uuid": "45cbbf9b-710e-4daf-bad6-ea64fa31bf56", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772328727, "uuid": "9d26120e-977e-4409-8bcb-92b8418e53f3", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772328727, "uuid": "5f8e10dc-d255-497e-ab48-5bb4b5f0bed9", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5a96295-150e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772328807, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772328807, "uuid": "6ff3860d-9e5f-418c-8344-35ad787211d6", "comment": "Malware payload (Mirai)", "value": "35f4c2529e1b0b1e582d0bf5ef0f651f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772328807, "uuid": "d5d939f7-e9d1-4032-866e-1ecee7afbe32", "comment": "Malware payload (Mirai)", "value": "5dc86c68295c993bc1bb8dc8c4f3ca55824a542d19f4f319f2e6245524424c93", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772328807, "uuid": "1601c90c-d2af-4de1-9648-21aeac0f009a", "value": "T1A943C75A2E21CFECF66987344FB34E21A6A423D623E4D685E29DC9002F6035D945F7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772328807, "uuid": "385089a3-d2d5-4644-a647-b0578a64407f", "value": "1536:ET6tGLwXLIgaX4kd8yLAG+m/LwiB3aGCv5D8pFVewrKn:ET9oR8pFZKn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772328807, "uuid": "523d1711-662d-4fba-b030-43f39f2f0516", "value": 55604, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772328807, "uuid": "8e3a9f70-5f6a-4c79-8afc-63ed9712e27d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc48b636-150e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772328845, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772328845, "uuid": "cadf86f1-fe57-4f21-847a-e7a9024f1dd9", "comment": "Malware payload (Mirai)", "value": "f4d37e3865336e28b8862607d0498b10", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772328845, "uuid": "09a635d1-1dac-4eb0-951c-8aa72a8db95a", "comment": "Malware payload (Mirai)", "value": "6b41442b2a05a4b95a27537d9f2658f3d22d700b105e7e26631ec75ca660efd0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772328845, "uuid": "3e5d9f36-4f90-4cec-84a3-554f7e988116", "value": "T108C39E32D8396DC4C1945434F8B1EE711FA1A6C441A25EBB1AE5C97900C7DA8FA0EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772328845, "uuid": "3906ffae-9cf8-465b-8aa7-be34009bd26f", "value": "1536:6aZwsA5XjVZJK0twtfXd/GW25UhMMJNu5xWKLYUIaXwDrucKygHIwS8w+NrFXww+:6f5Z5Z98XdmVMJaGaX3DymS8TXAwED", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772328845, "uuid": "c4bb37d0-328b-419d-8fcf-21ff44ab77ca", "value": 120332, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772328845, "uuid": "65eaee1d-9085-488b-8207-072e1c185273", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9b2df50-150e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772328921, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772328921, "uuid": "b896e83e-a44c-4c5c-8857-3a670be94db7", "comment": "Malware payload (Mirai)", "value": "e07bb8cfd04bff84deb0be5109511e14", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772328921, "uuid": "8ea1ccc2-9dcc-44ad-9775-99a5b7d599ff", "comment": "Malware payload (Mirai)", "value": "54c269af1eed3678e83b981aaa0cf5ac7866218ad8b90985e35db98724c689fa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772328921, "uuid": "d254ae0d-4881-4406-a312-bbecbc0ee652", "value": "T1B1D33845B9829A27C5E523BBFA6E018D332563E4D2DF71178C215F217BC681F0DB7A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772328921, "uuid": "6e8c084b-0888-46cd-be6f-c113bb0aed23", "value": "3072:snFif7apx6XS+kUgpjWXlsCM48GWoEqRziQSS:sn8ZS+dQWXlsCFEobOQSS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772328921, "uuid": "5de77375-68cb-426d-96d3-5e099f3869dd", "value": 140756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772328921, "uuid": "fa557b2a-fa85-4c91-bb35-873a8b4b47e9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "149e63d3-150f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772328993, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772328993, "uuid": "19f43460-abf1-47c2-b806-3da2fad722c1", "comment": "Malware payload (Mirai)", "value": "3f7305bdd05f4303e8a6e44de37653e3", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772328993, "uuid": "db218322-b17e-424c-8e02-f62f3628db06", "comment": "Malware payload (Mirai)", "value": "0982b6d17587ff81a61749958122ee464d687dfe3a87b2c933a1f3df4159be57", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772328993, "uuid": "96b46867-7bed-45db-8b35-cf5ccd47b54a", "value": "T177D34A2275391E2BC4D0A87E22F74361F1F167DA25A8C90E7EB20D4FFF252206547A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772328993, "uuid": "8cb5853d-ab77-4e35-97f6-a9e4b6fbb716", "value": "3072:FCldeCsOs9kzj2vV4XcZgqgCBV30Y+FelsjXjFQ:gPeCK9kzivVYHCzlmjzFQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772328993, "uuid": "532ad2a6-1df1-4e92-b856-a946b7b071e5", "value": 140776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772328993, "uuid": "32fa0d50-3207-4e67-88a3-f94d92382904", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a3dac34-150f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772329218, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772329218, "uuid": "af3b6f97-5a3a-4b57-9de1-cae717f62fb0", "comment": "Malware payload (Mirai)", "value": "5c09f30c38777dfaddf69ae622adb635", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772329218, "uuid": "326b6270-455c-4113-ae74-d6d7e8affd1c", "comment": "Malware payload (Mirai)", "value": "84bd3233c6936ee6a54f702a80bc224fc504c46dc64a178f72dd1cc7fab4fe26", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772329218, "uuid": "e76aff1f-d05e-41ec-a43e-40621d63edf5", "value": "T14C031991F9819A17C5D11572FB4D418D7B1AA328E3EF3302DA295F61378FA960F3BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772329218, "uuid": "cbfc38e1-fd3d-4f24-b571-1905146be116", "value": "768:zmj/b8tM3aL8U6FlwIfBx8ooeu8YmMjTw04/x5OyaF1ZRfKI:qjP3aJ6F/Ijm5MtFVy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772329218, "uuid": "f189b26a-e29c-44e2-a810-f12030136cd6", "value": 40908, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772329218, "uuid": "66a60cee-0ccd-4c03-8602-209e51a4c153", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "12a1a928-1510-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772329420, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772329420, "uuid": "866ac327-2067-4031-8ad3-8f1278d2d99a", "comment": "Malware payload (Mirai)", "value": "0f35745378761b33bd98c2d21634c331", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772329420, "uuid": "603a725a-ee6c-4248-a78f-177a69d7b176", "comment": "Malware payload (Mirai)", "value": "02b2bedd56fd8cfb36d46de5fbd168d64c0bc99010fe329fb6144ec46bf91d09", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772329420, "uuid": "3e392f95-87ec-4af5-8a5b-b5458150f36e", "value": "T1B3E34B55B8828A22C9D513BEF92D018E331327A8E2DF7213DD105F2577C7A6B0D77A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772329420, "uuid": "399575af-3179-49b4-805c-a13c9840b6bc", "value": "3072:MNkU+vbx7obbywHU2ADFut18CaMd7zyE6+GCoekO:o+RobbyuU27tqCagY+GkkO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772329420, "uuid": "93b99e1a-0df7-4d8b-9cea-c8a311df5be4", "value": 145528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772329420, "uuid": "06ba06c7-6ccb-4391-a476-f1d72a637dd5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2f3a099e-1510-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772329468, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772329468, "uuid": "c571fb15-271f-43fc-8040-73d675bf1c31", "comment": "Malware payload (Mirai)", "value": "2ffea6f488f67add976e8c4a7a3408d6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772329468, "uuid": "2b19a2b0-7183-4b00-adb3-3d77024ef8b3", "comment": "Malware payload (Mirai)", "value": "90bbbd6ebf0f4dd9e2f5fea0d2b27d5b856fb65bc1765a4bae1fd95c6a06733f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772329468, "uuid": "bf4b7062-f5e7-478c-be32-e14e8a589b70", "value": "T19F343B45EA418A13C4D117BAF5AF418A3332A795D3DF730699286FB43B877AF0D636", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772329468, "uuid": "8380f090-9e2d-4063-a3de-984a29604d58", "value": "6144:YIoX0lMTL8+yabqqcVRF9YnJVDuRf9ihM/95AU:Y74kg+yabqqcVv+JoSG/DJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772329468, "uuid": "6c27e4f8-8c08-47c7-8bee-89722dd3f86e", "value": 230952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772329468, "uuid": "9fde31f5-03b3-4f21-af3c-a3d5719ada3b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db13e73e-1510-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772329756, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772329756, "uuid": "6df6f1fc-790a-4765-b439-6908d7f4415e", "comment": "Malware payload (Mirai)", "value": "922d9173491f9d948502fb0dc8f66025", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772329756, "uuid": "d13a3124-74d2-4db4-9257-de6df27268a9", "comment": "Malware payload (Mirai)", "value": "f10be4b2031dee06410180daa7f6df8469f0b2ed1dbd71139ea538e3eae76a0c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772329756, "uuid": "3a60c80a-d441-4bd6-8737-1ca3ea792159", "value": "T1CC93D451BC82562BC5E423BAF6BE668D336577E5C2CF722BC8614B217B8551F0C63B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772329756, "uuid": "2a9b8771-78a6-44c1-97bd-9befd9a2d31a", "value": "1536:4d+dOKCXt3/NDDkrw24WG1uLatp60EbrT9y3kZcBuA+bYQl:C+dQXt+r6g0OcBudFl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772329756, "uuid": "e9fc2ec1-59ec-40aa-ba6c-a6faf51e0a11", "value": 93784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772329756, "uuid": "0bbd29c5-dcb3-46ab-b10f-b3e66f112b98", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1772329944, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772329944, "uuid": "f0757ab7-908b-4576-ab72-b7309ddcb79d", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772329944, "uuid": "d29960e4-697d-4f48-973f-ff66eb7e01ce", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772329944, "uuid": "6e622f5c-e2e2-4cd5-98f5-18181bc68dfa", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772329944, "uuid": "b1c8a467-28f9-49d0-bb60-9e39328366cb", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772329944, "uuid": "a1b01249-9ad5-4bb7-b0e3-78e2159ccc22", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "727c8fd6-1511-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772330010, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772330010, "uuid": "ef60d0ff-9e4d-48fc-8132-ed2a3de82eb8", "comment": "Malware payload (Mirai)", "value": "0546261d19c275d94450aa582940dbc7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772330010, "uuid": "08c1e968-9ec6-4e41-a4b1-3ed6a65bf690", "comment": "Malware payload (Mirai)", "value": "3eddfd1c17d564a1db3240c7e492159925a9a1e6712882712fd8bbb91082cde4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772330010, "uuid": "a4f0b2c3-d2dc-46c8-bf9e-8f9281f8f6fe", "value": "T194C32912F98584FCC0CAC1340B6FB63AA935F1DD1238B2EB67D4AB123D4EE615E1D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772330010, "uuid": "7e066047-5a87-4ac4-902f-b0ebd3c51db6", "value": "3072:iY83TgBMfVw+Z7cHIzO8SoMFAIRHp9hApD7bhYcPGkzQ6V8IattG4:in3TgBMfVw+Z7cHIzrSoMFAIRHp9hAJA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772330010, "uuid": "cbd07ce3-1ed1-4287-8ba5-e57a880c7d51", "value": 125440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772330010, "uuid": "539b76cf-6c16-4cd9-aebd-609b31664034", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f5529193-1511-11f1-8369-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1772330229, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772330229, "uuid": "4734cc5d-6a3e-4a28-9249-5fae764016f1", "comment": "Malware payload (CoinMiner)", "value": "a2469178e1b6390c84b85d39ec3f62fe", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772330229, "uuid": "046e89cc-3e72-47fe-a6fa-b853cccbeeb3", "comment": "Malware payload (CoinMiner)", "value": "32abad75f05c8dc9d23acf284ff59debc8dc95542c36c85bc8e9c06313152f49", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772330229, "uuid": "659feade-11fe-46f6-929c-d7d70b2fd7ab", "value": "T13B263361F4809031E03A143A14E949F2B07CFC719725968BB3AD2E755E383D9267EE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772330229, "uuid": "3b20bf44-70c8-460a-b7c1-1ef4458354d2", "value": "91ae93ed3ff0d6f8a4f22d2edd30a58e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772330229, "uuid": "4fd68796-ff37-40f1-9e72-fdb0a8fee2d2", "value": "98304:RLVSThOfTCiFBXmfFs+JMHpCVoR8oMEOJ6TX:HBfTCiUswVSLOJgX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772330229, "uuid": "236120dc-d2cb-49c0-a815-a012e6d3aa46", "value": 4580804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772330229, "uuid": "835934dd-9e59-4f5e-be7e-64a15470bbc5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "778040dd-1513-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772330877, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772330877, "uuid": "1c909af8-642c-4fcb-bc31-079a3df8c67a", "comment": "Malware payload", "value": "4f295a78a2df349d64099f2ba5aab96d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772330877, "uuid": "75afca23-ae2b-4284-8322-015597e4e36c", "comment": "Malware payload", "value": "0e82eea88c18f24c01fd00b508b3ba8a7fcc3a31fe654d67aca31e1dc67d23e5", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772330877, "uuid": "b7ecf781-b0c3-4d80-bd6a-b75f4d46b40f", "value": "T1BA8309327488582A210B428FD267336C70AFDCE2D611E5B6F6F622344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772330877, "uuid": "27e5589e-3cf7-471f-bf0e-6bc2741bcbea", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnZWaxVN/:XEKltp9txAX/yr2pbZWcVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772330877, "uuid": "eb382045-6207-4e02-b911-8c3ff823a729", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772330877, "uuid": "612dc565-0883-4d4d-a3b4-d27bffe5592f", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "076cdfb5-1514-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772331119, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772331119, "uuid": "a436c6c9-afe1-404d-9889-640efea82848", "comment": "Malware payload (Mirai)", "value": "b73157b9e3e42c2ba62bdaf267061ccc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772331119, "uuid": "be483541-aac5-4a67-aef2-5845cd13d0d0", "comment": "Malware payload (Mirai)", "value": "c42ef522347cda9e7c035dc850a14d1b734b92ada54d66a4add6eeffff94f4b9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772331119, "uuid": "5737aeb2-0361-4679-9b5f-c3db3bcaeee6", "value": "T166D35C0677180E17D5A34AB0263F1BE087FED4D121F4BA89291F9B6A4672D3B1582F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772331119, "uuid": "2ad1e4ca-44bc-4f10-8709-e67fd605b3d7", "value": "3072:i1kzeSFZhMHJqA+Kr5UbeU73HegqM89VkJA:7PFY+cqbeU73+gqM8XkJA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772331119, "uuid": "0d6e1a58-7906-49fa-bbd3-bb23cd60c5a8", "value": 134320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772331119, "uuid": "93f6d26b-0f46-4bb8-8864-5f6d3c3b3c53", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4baacb41-1515-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772331663, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772331663, "uuid": "97b9903c-2069-4b0f-9ef4-c985de12df5b", "comment": "Malware payload (Mirai)", "value": "b02a3a4232f949de89a6107860b6f5e2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772331663, "uuid": "9bcb810a-2164-4c8c-8b4d-864fa2730610", "comment": "Malware payload (Mirai)", "value": "448d10cc0e0652674d8eafc37a3fba3937114fc3d2c2fef7aca659b43cf182af", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772331663, "uuid": "d6610230-aa25-4888-a6d4-eceb966f251c", "value": "T176F3C50E6E198F7CF79987344BB79E32965833872AE1C582E16CD7105E6024F641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772331663, "uuid": "1ddcef13-1256-463c-9ecb-9734b2be2661", "value": "3072:MOATXjpCgqDJHDexBJKfjPV4kuMu8hJBQX/uw9EfszRpSP/Q4vkTTzTT4BFZDiwF:MOATXjpCgqDJHDexBJKfjPV4kuMu8hJv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772331663, "uuid": "9acf02a9-ab8e-4d17-b184-c245de14031e", "value": 171724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772331663, "uuid": "13bd855b-fc41-467e-9ac8-52c8630fbd51", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0176edd7-1516-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772331968, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772331968, "uuid": "027315dc-51d4-49ea-ab97-e1c07b1c3916", "comment": "Malware payload (Mirai)", "value": "832667abbc9c892fa39ded61eaa6fbe3", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772331968, "uuid": "ffa9f03f-ab7e-4d2e-905f-d80c9a962263", "comment": "Malware payload (Mirai)", "value": "1c7fb667a9d2598c97df3c24adf5c78589be6748532397ec1383e2ede0ed1763", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772331968, "uuid": "f19f6b46-2946-4920-84d0-8d053eb4e7c0", "value": "T102044B46FB814B13C4D62775BA9F42453323DB6493EB33069928ABF43F8376E4E625", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772331968, "uuid": "30241ad9-8785-48b9-bf9f-d42af4f80dfb", "value": "3072:/TtPloRBcTO/Ca6GMVea8+H0tIIQTBPCaqVZBL/K92S:rXovj/Ca6GMVeT+sIbTBPDq9L/K4S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772331968, "uuid": "10e94541-8dc0-49e3-916a-1e7055673c2c", "value": 179653, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772331968, "uuid": "0ebf36c0-3b1b-44d2-b8bc-5fc8c3e9ce4e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8020cb17-1516-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772332180, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772332180, "uuid": "ccdc2f2a-6d9e-4847-a0aa-ec38252555a0", "comment": "Malware payload (Mirai)", "value": "334598f74615e713c4e16cb261b107c5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772332180, "uuid": "c21f5b68-1be6-43b4-9c03-d2e43c773584", "comment": "Malware payload (Mirai)", "value": "cd1fefc661c94321513075e0ca9655b9aeab54388932dbec4b5df0b2d8e43438", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772332180, "uuid": "60e4c3f0-1c2e-42da-b886-53e0a086e376", "value": "T1BD63175AF980AB02D4D625BAFE4E118D73531B2CE3FE7201DE245B2523CEA6B0F764", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772332180, "uuid": "ac307e34-c286-4c70-bd2f-55bcb0240e92", "value": "1536:0onumiDNQJatWWoH8TTCloicDImf6tYa00:yDNQJatWWoHwDImfKs0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772332180, "uuid": "7ab749a4-0d38-4895-8691-e2307881d69f", "value": 69204, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772332180, "uuid": "1164cf33-3fa7-4e5c-8589-3db1cfecd541", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a2d739f2-1516-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772332239, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772332239, "uuid": "cfcdca16-e83c-4eb7-b112-425f67a99688", "comment": "Malware payload (Mirai)", "value": "1af6136740e6defb5fd43dfd7c7b695c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772332239, "uuid": "76bbd3ab-398b-40f4-82b2-b504041035f7", "comment": "Malware payload (Mirai)", "value": "34f5caa5404b0daa820c3d62be6bc4add206cf98e32205416ff327646eee9110", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772332239, "uuid": "cd798782-3942-4739-a318-f90755c88d2a", "value": "T1D7233B35BE724927C4C0A53661E3831AF2F6839E14F84B1F7C720E9CAF64A9425577", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772332239, "uuid": "692776de-3116-4b8a-a71f-027f8d72c20a", "value": "768:FYJSFWHwY4AcZOyvmMDD8d3M86pM9O+i5ou9n8NaD/DS1tbIQZ:FYgF2wNA2XTDD8d3aIi5POJtbJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772332239, "uuid": "12595f3c-59a4-4a4d-9ae4-ed3d0951d196", "value": 46960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772332239, "uuid": "b40c522e-8878-4717-ac29-7da5888241a2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a9ddf280-1516-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772332250, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772332250, "uuid": "3b0f4efd-3e6c-4386-b2a8-3b3c8c16c041", "comment": "Malware payload (Mirai)", "value": "d144b2f353a9e92405d2b9a4d0b7f70e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772332250, "uuid": "137eaf11-e4a5-4f75-a427-7ae2e3d9d603", "comment": "Malware payload (Mirai)", "value": "3a573d04ef6b709b0874d1c802a0144954accdb1d9c98deb2c949c733b1ae449", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772332250, "uuid": "021d9dba-e2cc-4f12-a3c4-6f229646526a", "value": "T14E432956F9809B16D5D205B9FE1E118E7313173CE3EE73129E246A74338F6A70E3A4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772332250, "uuid": "624542ac-e666-4ce3-9c3d-3a2b466528b3", "value": "1536:DVn3MGZJ0+Ra9/zpIX/icu3/kE+YM95LYL:Z3g+Ra643/kE+YM9Bc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772332250, "uuid": "72c49ced-4116-451e-a9a1-c897f4847cc5", "value": 56372, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772332250, "uuid": "ddd383ff-2b8d-4fbd-a9bc-614478b4f0e9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "39fb3caa-1517-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772332492, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772332492, "uuid": "8d0e6ddf-00dc-4697-970b-0d8b33f7d62a", "comment": "Malware payload (Mirai)", "value": "220e116f016ecfb812f627d2f1132d7d", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772332492, "uuid": "6b6076f0-f66c-47a5-bcfd-b2d11e7ad1e3", "comment": "Malware payload (Mirai)", "value": "ea08edcedb7c92d5feab438657125dfe76762d8eb37aeadd5e723136d870c90f", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772332492, "uuid": "4be4b6ca-914e-47c0-bcaf-9a76f63e1da9", "value": "T1FD041905BF110EFBD89BCC3B45F9270529CC581A62EA6B36B934C858B54B25F1AE3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772332492, "uuid": "ceaf1cca-ef11-49ca-88a7-9cb9cab9ba50", "value": "3072:t60NrtUpT/5dltGgXGGP9M4S8lrXwU2woriErou0fCtZ1SD39rsJz30s9fx49SYT:t3nEr5dfHPq7UTo2Ecw3K9X0167", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772332492, "uuid": "795b9d33-d88c-4faf-89b0-31e46df0bc30", "value": 179916, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772332492, "uuid": "28ad747e-5a04-4645-8d69-79228e2932de", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7269c8a3-1517-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772332587, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772332587, "uuid": "46b5c283-84b0-4b18-9ce0-04df402c9443", "comment": "Malware payload (Mirai)", "value": "5d8b65ac3f87b848f77cc1de67eea0df", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772332587, "uuid": "a8947504-98f1-4af2-9136-73650d4ca720", "comment": "Malware payload (Mirai)", "value": "043956077b6789306afe0178a539047e6d7547d5c59915863b5a22020048193b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772332587, "uuid": "cc002509-4a31-419e-a22b-e2469a37626f", "value": "T1A3231A9AF801DDBEF80AE37F8857090AB231F36501931A3163677517A9372A415B7F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772332587, "uuid": "2dea7ec4-c532-4aea-80ec-772293d71bf5", "value": "768:cYnPTm54BT0jZ8jaz8l3JO2LJp8lbDq4en7y1vH8gjI9:5rmST948lZDLJp+bD1en7y1vcQi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772332587, "uuid": "2568ee45-0ceb-47d7-bba4-d2d8f423201c", "value": 46352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772332587, "uuid": "85d4d74c-c602-4841-9458-1e49beefc473", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c2b1c193-1518-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772333151, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772333151, "uuid": "e5b1242b-5ee5-4d1b-a6eb-248775830ed1", "comment": "Malware payload (Mirai)", "value": "0e93e8b725e42feec3fcbaed387a15b1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772333151, "uuid": "d80764ce-d015-40a5-b12a-35a9ae89918b", "comment": "Malware payload (Mirai)", "value": "2e057303b339b9189a86854f12a00bf346561aaa66cf10833e78c499ed8b416f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772333151, "uuid": "8b760311-1cc5-4641-974d-3073524dbda1", "value": "T14C135C45F30C0653E2631E70353F37CDD3ABE99011F4A585292EDE89A3B6DB25149E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772333151, "uuid": "310d82d1-f58c-47fe-bf5d-4e7afe2476d3", "value": "768:Pd4ybmSuqCDaIF8jREaTrvc98oofsamSe5yGvF1Dt/3gIIfl:P2ybmSuqSaICRpT68vkaPUyODd3gjfl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772333151, "uuid": "01894a47-adef-4feb-924e-37bc1a8d04bb", "value": 44480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772333151, "uuid": "1c0d604f-1936-48a2-afdd-aeb9a3331f17", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df34e1e0-1518-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772333199, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772333199, "uuid": "167b26fd-f9e4-455f-b517-179a2a37bbd5", "comment": "Malware payload (Mirai)", "value": "6ee19cf8ffbdc2089af5e09705bf0cff", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772333199, "uuid": "91441b72-f714-433f-85c2-21886a335d38", "comment": "Malware payload (Mirai)", "value": "c9338c4441fcff1e53ccf7cb47a00dd1efa1e3c14aa1fa03ab8eae200fb15a95", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772333199, "uuid": "ed10a166-20e0-4d55-974a-ac4616a75219", "value": "T1C6037D7749342D98D02A95B0B0248A71472BF99587476FBF1666C37D4443ECDFE8A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772333199, "uuid": "c367865e-b751-4c81-86ec-44960b9b283f", "value": "768:wnT71QHZSmD3jX0/Fy3K2vuoa4ou5uMC3ykZtfv1jaC1IH:sZQsy3oaK2vuzXW43t12C1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772333199, "uuid": "d75a1546-cca4-4838-ac10-a61a8226dcbf", "value": 38180, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772333199, "uuid": "0ca15390-bded-4d9d-b69b-3aa11792cce4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dff9a044-1518-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772333200, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772333200, "uuid": "17bf7faa-0a6a-486a-87d3-3d2d2ae23f30", "comment": "Malware payload", "value": "8ab2e4554e0f3d59bad7ca5fc2a91d8e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772333200, "uuid": "4b4920a8-0954-45b4-bce9-4bf29d9d063b", "comment": "Malware payload", "value": "ef2b4a1a800001682a32dea0236654cea120f266c46acc830c0105f7ce601174", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772333200, "uuid": "7d429bd6-c58c-4441-83a3-031adcfd7e80", "value": "T16314DFCA7C9ACCFB422C4170A98F66901BF6AAD61D4F373313C54354FA4EAE4E9750", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772333200, "uuid": "743c976a-83a9-4e62-a483-2e6bc8c27bd0", "value": "3072:fYwGtySBc7vHATP/IFTI+J9Lnzhnwlug9K1G1yu2YddZ7BqL3/6hCGZEA0dvBc4L:AwmKPATPr+Jn+p96ix2IW3yh76F/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772333200, "uuid": "5156dcc4-d88f-4e0e-ac03-23bc17febb7c", "value": 208982, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772333200, "uuid": "06c663cb-be41-4141-908b-9234e7369afd", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "abb16b7d-151a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772333971, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772333971, "uuid": "b98796ed-ea53-4512-b6a4-e8ee3ccad3fa", "comment": "Malware payload (Mirai)", "value": "ec6cca8ddda3b1d6c183a0e945aa5955", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772333971, "uuid": "8fde18bd-ddb6-4103-9300-7ab9cf86ef0f", "comment": "Malware payload (Mirai)", "value": "f3a2aa787edbfbc232f116465a70353ef04666daa12f987af552e9f4aae93a07", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772333971, "uuid": "a4c16239-ab3d-4e2b-937f-86593e16ac23", "value": "T1CDE35E9AF402EE7EFC0BD57E44670E19F930A3A13243072A529BFDA3AD311965D16E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772333971, "uuid": "4ed7e5d5-0327-4559-99cf-e0e807c37e64", "value": "3072:leWy5tMmSxA/EYfaAoa5omILfhF9nD7j2NQX:AimSxAsCo40hF9z2NQX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772333971, "uuid": "2a7b6982-2090-4e98-b097-e6955c3e344a", "value": 146872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772333971, "uuid": "9e93f072-327c-4b82-bac4-4316d1877b9a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f4d2141b-151a-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772334094, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772334094, "uuid": "676fafce-1bfb-45c5-95eb-621a005a53e4", "comment": "Malware payload", "value": "5112db5d13bfbc3c940fc432d94f7b24", "object_relation": "md5", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772334094, "uuid": "4e0a36c1-b8a1-4481-873c-f725513d4793", "comment": "Malware payload", "value": "f69eecb0a2bc918baad248f21b853d04c1b83639e183a6c8c79859f7dc142a2b", "object_relation": "sha256", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772334094, "uuid": "9a026e09-2d33-4977-ab24-74808e0c673f", "value": "T1EF073325834F584FC7060BB62E5A139E93A5CA91D931B156B0F0F7E8CCD9680DD81B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772334094, "uuid": "8c5a3e87-5ff5-4fcd-802d-ee4e543d4d4d", "value": "393216:nDl20nxLL2EljI0b6ekSZzJ3g4InI5BVskYHwJHGwHsqKebmarfJv6IhB:nDNnx2+hbllQ4jVskUwAMsqVlrE+B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772334094, "uuid": "5108e0b5-2692-42f1-86fc-1c34104eded5", "value": 17487086, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772334094, "uuid": "a76e96b3-db1e-4a82-8e2f-b351c56a737b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f52abd33-151a-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772334095, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772334095, "uuid": "4926a96b-adfb-474e-ae90-e0dfc6efb1a8", "comment": "Malware payload", "value": "6c9a6f3f7a393d7ef0afcba43ffaf257", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772334095, "uuid": "bcc10b34-5ce4-4340-ba60-635eb7d408f6", "comment": "Malware payload", "value": "41d25d3154a8e304d84312b49310ddf914339c5410c60c63d6ea8ebcd007b1b9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772334095, "uuid": "76867d69-03c1-4f67-89f4-46c5eff7ab96", "value": "T161132891B9819A0BC5D106B2FB4E418D77166728E3EF3302DA295F6137CFA960E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772334095, "uuid": "8a8e9124-063b-447d-8904-432b6078af44", "value": "768:IlP/bstM3aL8IKF5Uk3pxso0eultMMSwVsn78GGIGVsjKAvqI:qPP3adKZDFMm78Gq6Pvq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772334095, "uuid": "e861634e-10fc-4caa-9fd7-eb7a58a16556", "value": 44036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772334095, "uuid": "9d11e898-0fc6-4772-bb68-766a1417b738", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d238d22c-151b-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772334466, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772334466, "uuid": "2cdaba1c-ca45-4b47-9bb7-5125e4b83013", "comment": "Malware payload (Mirai)", "value": "56b955013e76d10370139407dea4fec0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772334466, "uuid": "b8edff22-d59b-4942-845f-448b8eb06170", "comment": "Malware payload (Mirai)", "value": "f893677414d3e535739934646d783958e1f54d7c25efb9181f5d853f24e41be5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772334466, "uuid": "13c86c01-f87b-4879-9436-6e55f0fe31fb", "value": "T1DEB339C1BA43D4F5EC1641306177F73B9A32F0791239DA87E7A89E327C92A419D0A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772334466, "uuid": "e86ebe07-483c-4d43-8f31-cb2f7e312a50", "value": "3072:PbKW4dCLFaGFBu3/45g1rcV2wezSr9bMFflJ:Pbj4doYGFB0/45gdG9ulJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772334466, "uuid": "868b9256-e708-4a77-9a2e-84e78c6cf8be", "value": 107824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772334466, "uuid": "a7a7666b-2f31-432b-8b78-3fc67e65d3fc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772345950, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772345950, "uuid": "929a685f-d3f7-4a00-b394-cff54835c936", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772345950, "uuid": "a309d194-2f7f-45d3-ab8e-94ad5099df82", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772345950, "uuid": "6fbb729e-5a34-4474-8137-5cbcf3ca0d76", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772345950, "uuid": "d1ef743a-970f-4894-8a36-96812ab6f4e7", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772345950, "uuid": "42661d03-565b-4d85-9473-361bd722156d", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "097ea23c-1540-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772350020, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350020, "uuid": "ac1e4fd8-a23d-4d43-94de-e8562f4fccf9", "comment": "Malware payload", "value": "5269be77f0e9948275a811bf5dfdd126", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350020, "uuid": "9112ea60-6276-4975-8fcf-c5a3dc20b909", "comment": "Malware payload", "value": "949b7c90552552f314ebe707b16d3716e3ad6c59b60f1bed8231572495010147", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350020, "uuid": "d4d6f356-6e9d-49ec-a034-496c49e47b3a", "value": "T11F249CEC3A88B0E1F7905E0D18AA05B96422DF530DDBD9D5C638AECCFB165F94219E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350020, "uuid": "36a0b52b-ba1a-4e6b-a2d4-35653923e414", "value": "3072:E0G9m5UUaZQEKHEUFK+tc7wXwCZvUNGzMa9V4CXCK/hc6ewHj0:ER852QDHHFjtc7wwCNN9V4CXr1ewHI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772350020, "uuid": "a18b546b-687d-4309-b6fd-b4bd3ccdc878", "value": 223318, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350020, "uuid": "bb5ddbdd-060f-4b2a-a895-49d8a22ae3c1", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29e57db0-1540-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772350075, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350075, "uuid": "06100cb7-a210-4fde-bcb8-ace554851edb", "comment": "Malware payload", "value": "e5bf041326cab3da612fc9513ba96c81", "object_relation": "md5", "Tag": [ { "name": "pw-azuro", "colour": "#8789c7", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350075, "uuid": "9cb8bb4a-0f4e-4d4c-bea5-7a33556ee21a", "comment": "Malware payload", "value": "f3cd4434af611c072c72db4087406b7d52263b90cf03b2cca766c938174ff654", "object_relation": "sha256", "Tag": [ { "name": "pw-azuro", "colour": "#8789c7", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350075, "uuid": "68e2a8a8-ef8c-4d7e-ab7c-0774b5bb823e", "value": "T1B747331829F23FC9936E83DC9C280E35EE65BCAF6E3F55D72DD01C6F1951028568A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350075, "uuid": "a50e410c-a3f9-4be0-b3dd-0a5452a01c02", "value": "393216:AkCDa3inHeKxRZ7qnYH2KZ3AZwvl7EE4NlJjunxYdQwPg+:Ak2aSnNp7qYT3bl7EE41jK+BPR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772350075, "uuid": "ced04c5f-d7ee-44ce-afe2-4ad1961a5afd", "value": 24643522, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350075, "uuid": "b23649cc-be63-4856-a1d8-36dd97ce9588", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "75d685bc-1540-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772350202, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350202, "uuid": "cb80dd47-7893-40d8-82df-40faa2dce7cb", "comment": "Malware payload", "value": "bac62769e6771cb7418ff34acf697e61", "object_relation": "md5", "Tag": [ { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350202, "uuid": "8e30048e-03d2-450c-aed8-4ba8220205a9", "comment": "Malware payload", "value": "59207eb2c3c53c7747327b0a996eb10ed246d22cb2b3718263c5a88df7940b63", "object_relation": "sha256", "Tag": [ { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350202, "uuid": "f455c105-a350-447e-9c8a-0c0e8849d437", "value": "T155073374D264381476163F7B8C3DDE17971BCA84FE0D822167A22D72EBB3706B05A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350202, "uuid": "f726a219-b9f4-4886-8168-f29c84ed76ba", "value": "393216:mSN9zZzjSOPAOQZZnlITAopRt7mIu8C4zNu+8FRp6JEfX9g+1NP:R39COPAOQRIRRNhu8zzNSR6aP9bNP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772350202, "uuid": "400e6f60-9c24-4e5c-9877-642180384e44", "value": 17585402, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350202, "uuid": "0abd7436-4d70-4fbb-905e-1d8fbab81d4f", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772350581, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350581, "uuid": "8a6dcc8c-01c7-45c3-aea3-8efbad49f5f5", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350581, "uuid": "87e4fdb1-389b-4751-b0ae-363fa7cc16b0", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350581, "uuid": "89021f82-a7da-427c-8015-f194752dbc9b", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350581, "uuid": "dc999f17-a820-4055-a56a-1083b008bd70", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772350581, "uuid": "0ea6e83c-7d7b-472b-9279-fe66c8d1c4bb", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dad12146-1541-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772350801, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350801, "uuid": "697a2913-8368-4cf7-8943-a47fa841a847", "comment": "Malware payload", "value": "81c06d982cefdcf61013ceca7217c348", "object_relation": "md5", "Tag": [ { "name": "pw-500600", "colour": "#18cc23", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350801, "uuid": "5b80386b-0a05-4b43-be19-d09a42177c9e", "comment": "Malware payload", "value": "babc562a4992d6692a0b2bb96cd9be203598c9b612f81ef7acd421d35a7b6e6c", "object_relation": "sha256", "Tag": [ { "name": "pw-500600", "colour": "#18cc23", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350801, "uuid": "fa1def25-60e3-4a6f-91ae-f535a5b57f67", "value": "T11DC633B551A1AC3DE4F3E9B3810FC13246A0A79495A29913B3B6EC1DE0F15E3760B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350801, "uuid": "1b69d553-b84e-4f6a-bd9c-df7ed125884e", "value": "196608:VyUIU9g6j0SQDA+9+YQcn4+yOTWcbIcHj6rjEwjYiFjx3:VyL6ASxMfn4ROTW5cH8x3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772350801, "uuid": "1dc8c40a-57ae-4ee2-93d2-f30c139612e5", "value": 12176400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350801, "uuid": "292c9145-c6c2-413a-9807-e90cb4e3ed87", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f5a35111-14d2-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772350884, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350884, "uuid": "de684ca1-8491-483f-829d-cc7d2ccfe41d", "comment": "Malware payload (Mirai)", "value": "16e9891257e939a0d113edb2a5134664", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350884, "uuid": "3f8e7a9e-42c7-4ca2-a46a-31c0199a6cdd", "comment": "Malware payload (Mirai)", "value": "a5d3b14ed9482a0c4947dcbcc206c40cee0ceddd0e80985a4be045eaf2fab7c6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350884, "uuid": "a071fcb6-07c8-472b-8e7e-5641a7064163", "value": "T1951349C59A43C0F1EC1112F11077AB519F72A436AA79FB47E7A93A32FC02B1196173", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350884, "uuid": "6e8edd4f-dcd6-4172-a810-35932c182045", "value": "768:x73jOIDzzrq7WiEu+RiUjre0Ex63a7x2oq1z7yvEdTpKMxn:FjOAzwvEuP4a0EgwzkWItKKn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772350884, "uuid": "57c10b13-2cb7-480a-b67d-31277d455eed", "value": 41840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350884, "uuid": "d0b2ff62-f032-4ecb-9f92-254cab7bae06", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f59fb9bb-14d2-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772350884, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350884, "uuid": "115a1ce9-a5f9-422e-89b6-1699328a9876", "comment": "Malware payload (Mirai)", "value": "4364910e528330572edc0b3381c1165c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350884, "uuid": "ced172b6-1c06-4789-a15f-b260373ed538", "comment": "Malware payload (Mirai)", "value": "c406e9185645c7a40319fabc9b021021a9acffb2ec23253ec38f161be4fc1d20", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350884, "uuid": "24241bf3-27c4-4f5a-9afc-d4589a55df94", "value": "T1123319B51516F2BCE9E22078F40720F529530A1C3ADCE2D3B0930579FFB5B48B96AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350884, "uuid": "b190f034-daa6-42ef-a131-c080897f0b68", "value": "768:zMClhMqB0yBuKw3GoACzQyZRtlkABYxQ5TUnRNww31:zF0vZ2oR9DtlksYicks1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772350884, "uuid": "30b0f39a-1fdc-46df-a490-f118f2a22abe", "value": 50632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350884, "uuid": "2644c94e-7e01-4ea1-b11e-9f34805ebf1e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f59d9007-14d2-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772350884, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350884, "uuid": "3c884512-378d-488f-9242-28844ac403b4", "comment": "Malware payload (Mirai)", "value": "4f686c9ce5be3f9bfd5cf40bb892c4a0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350884, "uuid": "ea63be47-1afe-46fa-9f67-28dfe1f82886", "comment": "Malware payload (Mirai)", "value": "866d8cddd8d042426e7f9779ccf880cb1da36201adecb85d8ff674fa300cee89", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350884, "uuid": "12a49f69-2862-4a24-80e0-65302c009e9d", "value": "T182131742B3180547D1631EB0353F47E1E7ABAE8122E4F288760F9B4DC171E77A946E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350884, "uuid": "1947def3-587c-420f-b7ee-e5db4dc3d52c", "value": "768:TuZQBal6xzFogyxBvDMLccDP1UqI9XFPTMGy6/janpyvsM73V+Otauo:T0UFogW5DML3DyqWPwGy3nYx73V+uaD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772350884, "uuid": "76d81c5b-4eff-4411-b573-e3a79d97b454", "value": 44168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350884, "uuid": "7126a4ae-423d-49a0-8649-97b6f6ac1778", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f597f3b7-14d2-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772350884, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350884, "uuid": "6d2fa68f-e883-48a2-9f12-2028066e4fa1", "comment": "Malware payload (Mirai)", "value": "1f8c42412dc409899a1e015cd4ee8b21", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350884, "uuid": "5ec4dcd8-2919-4f93-a019-1102f4dede95", "comment": "Malware payload (Mirai)", "value": "e55e5a3a4e133e342404e45087abc9bc2220a17dc3e23ed30b940f0994d3fe00", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350884, "uuid": "8a029479-d8e3-4f57-a5b9-4122ec52e3e4", "value": "T1D553831AAF650FFBEC6BCD3745A91B49349C640A12E93B367934C818BA5B20F45E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350884, "uuid": "fb6b46a4-a907-47e8-b962-6bad465191b6", "value": "1536:yGtQ8AKyjOz8lI3DXUAFXMSL3bKL2LZgsF8qD:yM6KyazQqDUBL2LB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772350884, "uuid": "6694e367-7d4c-44eb-abdf-96a7338f880a", "value": 64380, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350884, "uuid": "3337c661-427f-47d8-bb38-f96ac58163b1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f59ba5b9-14d2-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772350884, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350884, "uuid": "eaec550d-24cc-4340-accf-28756f3f2636", "comment": "Malware payload (Mirai)", "value": "509e7114d45ffbdd999a8e2257cb4f4a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350884, "uuid": "d2d8e0cf-bfea-4467-8cb1-ca7a2a06ca7c", "comment": "Malware payload (Mirai)", "value": "31af34400c260dbb02de00f976709cce410de17dbc66123cfb11f42f4a3beb08", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350884, "uuid": "1d29cbfb-62ce-47c4-9319-eb9d4d87725c", "value": "T1CF2329035491C0FDC955C270AB3FA636C922F47E123AB59D73E0BE226E4AE311F5A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350884, "uuid": "a24503c0-db4f-4246-a8ec-c26e265bb1f4", "value": "768:FkrR8ysZAY+OGZZRw4xywPtKOojvHjKRDACGyjltp4B6gC:6d8y2+OOpyrDckCGyp4B6gC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772350884, "uuid": "04ca3715-33e1-4664-a02d-8b9fe4353f9c", "value": 46400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350884, "uuid": "ce96d219-7972-4444-a4f5-0c2d1a39710c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f59b80fb-14d2-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772350884, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350884, "uuid": "9239933b-7714-4ded-9557-0aaf543bc03c", "comment": "Malware payload (Mirai)", "value": "587acc6befe949c61153254849061017", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350884, "uuid": "35d7ad04-7251-43ed-a1a5-5e741029a3c4", "comment": "Malware payload (Mirai)", "value": "52817af1b60452736b419cfc629f3e2c493ca07b952093c0817be6f118dbabf1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350884, "uuid": "0ad4bec7-16bd-4766-9d96-921b2a899fa5", "value": "T182133A92B400AD7DF85EE73EC093090AF131A79551821A3763A3FD776C322A85E76E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350884, "uuid": "ea4bc35c-8899-49ef-9344-11b67b0eb315", "value": "768:0xqFTD4t0MoBjFwWEw0Cmk+3o+6WluD811JtTRHGtHwl5bsW71:COaWV2WLHVk6WkD811bRHGtwlXB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772350884, "uuid": "22cd9683-0d28-48f6-ad79-acf40d9f0df6", "value": 45516, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350884, "uuid": "86f96ab8-d1ca-47fd-affa-79295e60a964", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f58bec60-14d2-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772350884, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350884, "uuid": "10d52d61-6148-493d-9809-220992d80d87", "comment": "Malware payload (Mirai)", "value": "152120545eee85e6120ab838886bab7c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350884, "uuid": "b4413bf1-4cf6-4621-969d-44963c6b16d5", "comment": "Malware payload (Mirai)", "value": "54a790f11f64b2f4a0649f61acd006cefe63147c6d4c122bcbe732fa4c49e320", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350884, "uuid": "52ecd2ce-2866-4bc9-b0d6-ff1423f2b7eb", "value": "T14C53941A2A258FADF76C873487B74E229799379727E1C644D15CEE001F7038E641FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350884, "uuid": "13dd69d4-f0c6-436f-a92f-bb00d79ea8b5", "value": "1536:dMBsSfxI6HdeKImzB1M156Bc2ueZqf3J3J9:afHHdeKFB14eZEZZ9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772350884, "uuid": "99a961cb-09de-46ea-adb7-1005faaf9111", "value": 63660, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350884, "uuid": "c945d4b2-7026-48db-b11b-f77fc91f6331", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb491c3e-14c7-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772350885, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350885, "uuid": "dac29eb1-b890-47f9-8cc9-593695255b29", "comment": "Malware payload (Mirai)", "value": "1f32880200db2b10f0c649086d95d025", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350885, "uuid": "53ebc93e-3e2c-4721-896f-c91977afb100", "comment": "Malware payload (Mirai)", "value": "25d1cfe16ffa3f9107b5aa906fa23123a0e3035747cf8a070f83a9597b05147e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350885, "uuid": "55e04ea3-a171-4dad-8f6f-977d8b0b3904", "value": "T1DF133AC1A643D1F2EC5212F5147B67628F76E4364A7DFA92EBA92531FC03B10960B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350885, "uuid": "d1d28aef-8e89-4861-ba7e-4df78a6744e7", "value": "768:QQaiSup66OkEgy5oD5YQuj4JsUTeU4wQOnsspVI/4bOGd7nX:QQaiSuptOkEX6D5YQ/JsUeUDtsspDbOY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772350885, "uuid": "6703f311-55e3-4138-9814-b08143f6674a", "value": 41840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350885, "uuid": "7b79eccb-d129-4969-9109-3f2f966e727b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "26dc864e-1542-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772350928, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350928, "uuid": "98e9125d-5f22-436b-b7b3-91e5d0af9cd2", "comment": "Malware payload (Mirai)", "value": "53b52a8307640fd4aa0e995673924e82", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350928, "uuid": "47cb5720-0235-4660-9d7e-762419cb35f8", "comment": "Malware payload (Mirai)", "value": "38ad9d1582cf2b6c741bd87de6bd03adf21fa4ce1283587054f8aa831bd4d14a", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350928, "uuid": "3b74d0ac-3f6d-45db-aa4c-491a4644a0da", "value": "T1A3310197501CD7128654CFD7F378800CC46DB4D564E2EF7EDCBD0E6988AE0443966B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350928, "uuid": "f2f7f28a-e1fa-42bf-835a-84dccb1739dd", "value": "24:Dz5PgNIWZIKtGnGXFHIHzcFUPikBruuDVZny:hDGiQFUPBUuO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772350928, "uuid": "dfe78169-bba6-4038-a4ba-2863822bfbe1", "value": 1693, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350928, "uuid": "35eeef67-5163-43b1-a98f-8a09b8a4ac6b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "287cb006-1542-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772350931, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350931, "uuid": "eb95ed16-82d9-44dc-bb5f-f3d23e57ce5d", "comment": "Malware payload", "value": "db58564c18647dcf80ed2035ce9ce8a6", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "mamont", "colour": "#499b9b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350931, "uuid": "6b2a02a3-dbb9-4dcf-bfed-395cdea5b27a", "comment": "Malware payload", "value": "e453b1c79810eb5578ebf5300ab1d4ef868d700b9c4927c5eb45e48fe39d0df2", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "mamont", "colour": "#499b9b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350931, "uuid": "3d213403-7853-4741-93f1-7bd4bb5eb65f", "value": "T1F7F51252E3A8E42FECFB86354B761A5981428D96C743DA834E71733C1DBB6C0EE15B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350931, "uuid": "6df5f130-5f56-4408-9051-42d148292d2b", "value": "98304:lqkELxOE0yZH+r5I/V6GoZLBWXudmQTiT9Wwc83Cs58SVRcdW:lQ8E0s+W4GoZLwXuHTs0tBCuW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772350931, "uuid": "c2719f02-0a39-4737-a0b7-72a33d3a437e", "value": 3625671, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350931, "uuid": "066781c6-f2fe-4ea7-b6fe-f8e3a59d68e9", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2bef128c-1542-11f1-8369-82aee05be84a", "comment": "Malware payload (BruteRatel)", "timestamp": 1772350937, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350937, "uuid": "84e720ae-100e-4bce-9ed1-677528da9fa6", "comment": "Malware payload (BruteRatel)", "value": "04f1eb0ebaf71f827da7b1c4656960ad", "object_relation": "md5", "Tag": [ { "name": "bruteratel", "colour": "#898f3d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350937, "uuid": "f28254c1-5604-4704-b114-fdded557e45b", "comment": "Malware payload (BruteRatel)", "value": "fb91de5a3ce80ac51fded1719dc72c6c71acadc65ada3262e7bc74dac41cd65a", "object_relation": "sha256", "Tag": [ { "name": "bruteratel", "colour": "#898f3d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350937, "uuid": "e25c41cc-1c06-4ae3-a3df-7979efdabcd6", "value": "T1D276337677C06CB2F19C1A39CCDA7E566632FAA09D55582FF0ACEDC76E1A000905C6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350937, "uuid": "1d9b84e4-bf9e-479d-b337-f85121f6a105", "value": "ad1a33bd97238a4adf5548ab2780abe1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350937, "uuid": "a441fb63-f2ba-4472-97cc-55be996bc774", "value": "196608:g6T3C4LnVV1KlHGL+av/BeK59dnR1T8cbs3noJo:DTS4Lb1KlHc+av/Bem9/1YcoYJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772350937, "uuid": "700d67f5-54e7-442c-849d-5568e2817d91", "value": 7797127, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350937, "uuid": "8ed22ba7-f99d-4872-b6a6-aca1a273b471", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f58a9e05-14d2-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772350940, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350940, "uuid": "ab93897f-e5ab-4dea-8e4e-d303660c2cbf", "comment": "Malware payload (Mirai)", "value": "79e07128a1f9e03a394e9f7117e46028", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350940, "uuid": "c0bc3c17-df12-4d19-90fa-c21343af93c4", "comment": "Malware payload (Mirai)", "value": "e1a2b8cba265c6141876894e32114362775f90b20d23419fdfb49dda52734cb6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350940, "uuid": "da99d95b-42af-4e5c-b9a3-b21a199f5947", "value": "T1AE039E53C93A2D94C63985B4F8219B7E2B53E949A5936FD6D826C274C003F9CFC2D2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350940, "uuid": "f06c8eb8-6c29-4ddb-8d3a-3920ec3cfc8c", "value": "768:iTUc2eBs3+EuYG6TKjj53iGP/AEF9AKblZ3ay3VJ5egoS6VnYUvC5YMy3:4D3BsOEw51LFQS2rCje", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772350940, "uuid": "92b233e7-87a9-4d92-8ebd-46642949fff0", "value": 39908, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350940, "uuid": "6515bc39-3cd8-4736-b2e4-8fe1bb87fd0f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7dde2454-f2d8-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1772350988, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350988, "uuid": "aa39ab21-36f4-486c-972a-ab79bd56caa7", "comment": "Malware payload", "value": "e4d5b4b0f98560e882ef7d24b1012b6a", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350988, "uuid": "c6bb598b-5345-4b21-8d8b-e32ad03a2023", "comment": "Malware payload", "value": "d26c1da1978da0296f16094a6f20cca8d3d5e85f047fc0f80eb203aae6770599", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350988, "uuid": "dc3d76cf-d726-4fd2-9707-1dd2a9624896", "value": "T11CC3F1BCDC2C5442CA1B61F28C4ED11665DF841DF9E79A5672100A480E69EC0FFB6B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350988, "uuid": "8bc06642-1308-46db-8b69-0ca048758780", "value": "3072:7gg9/shHyGE5/wskZ0MnIUboP1TXQEAh4:VkIGE6taMnIUboTgNh4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772350988, "uuid": "38f7e370-1440-45fc-b1de-58f88fd3ff6a", "value": 120852, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350988, "uuid": "ed40900e-5e4e-4235-9de8-b71445ab0986", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ae4b025-1542-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772350989, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350989, "uuid": "90c578ec-47ae-442c-8b95-9aa190a6a113", "comment": "Malware payload (Mirai)", "value": "a8fb1b49303d6d882d2cc617a086a638", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350989, "uuid": "ab400607-9882-4c18-8755-9c804c27476e", "comment": "Malware payload (Mirai)", "value": "817fb161a8199e1cc57206461aca31154b2a69890ea7cef73ed7410c95671a87", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350989, "uuid": "6b537797-b8fa-43a5-8ca4-a040291a40a2", "value": "T145467D16B5A314BEC19AC430835FC6136D35F89596327D3B3A849B342EF6E245B2EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350989, "uuid": "596555ca-a0e4-41ee-ad27-e6712f49acd6", "value": "98304:TQ1uONRt7yuJyatIYkh+1Gbb42dbtIKjyM2AVDZolL66VAQP+hKQ:cTk1dbtkA4p66VAS+cQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772350989, "uuid": "1f56746c-d251-4b0f-8120-f2329e4c2640", "value": 5513616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350989, "uuid": "e999caa1-afb2-4392-998a-d63b8c2a233d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "42972aae-1543-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772351404, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772351404, "uuid": "d9d3d3bf-289f-4dd4-9a64-4e1f23cc5290", "comment": "Malware payload", "value": "6b218b33c149e6ef9f29d75ed1a17484", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772351404, "uuid": "c7d59224-7d48-48a1-bbcf-f35c4de1dc72", "comment": "Malware payload", "value": "5efabfba007599ffb74229c8d0f55c0ca3deb9989388851f83f0a92bc12878c4", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772351404, "uuid": "a56b612e-d830-4ec6-a7ec-bc14b761cf9c", "value": "T14985338435A7123EF48BDF27016CEC9A6E2D35168AD419FEC3893486C5ACE3D3E6D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772351404, "uuid": "ca48fba3-7b62-42c9-bde5-2ceb6d91cd97", "value": "49152:aGVVFyJEQfX41UxGEQPFoK/Cg7wzar1uIV8VcAnr:ryHfRGxqg7wzahaVcAnr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772351404, "uuid": "b25a3363-1918-45dd-b3bd-53884d05135a", "value": 1731584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772351404, "uuid": "cf6f8ff5-4d81-4cd2-bc76-49eeb2de8f35", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21b8f835-153c-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772353723, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772353723, "uuid": "3e9f61c3-d81b-4cc0-86c1-366817e84b7b", "comment": "Malware payload", "value": "1326c16a18441423830933fbb3a6a290", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772353723, "uuid": "1c952f6c-0b2e-4799-b0e4-c410c5292074", "comment": "Malware payload", "value": "3bb40456027c77d05b991e4686f10e51739a6ebdca3e33ec5edcd1e2c28b34cf", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772353723, "uuid": "7216ea78-7090-4709-8f26-8decf2527e04", "value": "T1BC310FB618F340915C13946647F77749AAA6C503E58EC84138DCA248CFA9EE4C5E3B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772353723, "uuid": "5c6a1ec1-dd06-4c01-99e2-b3ee5006cbd2", "value": "24:hY8DqCsgnIRRZ2gbIOUpGpDST9Cq9PG5iAxGJfAI1+Fb8YEzUL8oh4z4j:bcgIE6UmUCqh7AxGJIi+WNqRhRj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772353723, "uuid": "3e901441-3676-419f-9d85-3f453faee24d", "value": 1686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772353723, "uuid": "0a43728c-63a5-429f-9961-0fc5ef5d8fb0", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd09cabc-154a-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772354616, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772354616, "uuid": "c3e9257d-6b6b-48e5-b990-842012a26a90", "comment": "Malware payload", "value": "bdc87a635d28a118a9f27d436318910f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772354616, "uuid": "aecbb5dd-734d-45b8-97a3-a27ffdfe33cf", "comment": "Malware payload", "value": "b36a6d2b077f2d800870805d03697a4067d3b96fcce26969c4a3461035063b5a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772354616, "uuid": "c0f3fdd3-58eb-41b7-93c7-23e70c538b40", "value": "T1BE34F08B820F77CB15105D4B396F8AAAADA5B301752F66F5400BAD07FD3A5702D0CE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772354616, "uuid": "6e1df529-0116-4e23-8a3a-8df50b3e1f6d", "value": "6144:il0WhhYd4nbhdyRkUudNdljzHpTu7u8SP3+NwU:iB9hdyRkD9zQLS/wwU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772354616, "uuid": "96c4a14f-daa9-42de-aeb5-19e662847ee4", "value": 247886, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772354616, "uuid": "2c8b7867-8003-4f82-b8f9-45d6653b4722", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c0a4964-154e-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772356279, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772356279, "uuid": "82cf72f2-f224-4f22-8079-86b75ca04921", "comment": "Malware payload", "value": "bd22a24f6c3d8fbf4eaada57f9e9ff45", "object_relation": "md5", "Tag": [ { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772356279, "uuid": "b6a95b42-2565-4271-b6c9-e161f0a1cae9", "comment": "Malware payload", "value": "247d1b68ae27297f410d232f7f654d8dbeec0ddcaea16de5026948f3c0a08f7e", "object_relation": "sha256", "Tag": [ { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772356279, "uuid": "86d4c37e-0e6e-4bb9-8f12-1702ce750e8e", "value": "T17FB5236F2522CFE5E94138FF7BB206D9D634F01497DA2F48A2CF9620BC6524677882", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772356279, "uuid": "e67ed2e6-8865-4099-a875-f25bf451010c", "value": "49152:i0fo85vXeudIkqtdLE1kjrRKi1Is57u7imNgP0YQwpTkhYy8FooDuCYex1W:iGJkn3g1kjrVIs57u7imNgP0BCDpF+Ca", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772356279, "uuid": "94921784-1bd5-4973-967c-fe183c8e8cbd", "value": 2392714, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772356279, "uuid": "3ba29902-f983-4075-b190-ab0b88cd560d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "513e93df-14ff-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772364707, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772364707, "uuid": "309e679c-39fd-41ec-8410-9cccc50050a1", "comment": "Malware payload", "value": "3dab4333e68469a06b9aec498141f022", "object_relation": "md5", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772364707, "uuid": "6617492d-c026-403c-b4ee-32d7ff5ed73f", "comment": "Malware payload", "value": "40afec60143f9c9941e2696d2113124d2eef801b92ef855b46b216cdd552d32d", "object_relation": "sha256", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772364707, "uuid": "0b86b442-303b-4def-82da-a368887ef691", "value": "T170F05C4194E08915933047256ED1F5145993E7878385AE0472ABA0BE1F84782CEDF8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772364707, "uuid": "4a4216c3-11f2-4197-80b8-16a8d11820fd", "value": "6:qTIuJzhqIwGiY6GLBrAMMJApAogN3fAbplilAl+m/AqIbR2AWHwlrvV4LKTjawli:qTp0JzMALNYygFIqsPWKvVBqAEd2QL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772364707, "uuid": "77a3b3e8-03eb-4bc1-92c1-de07feff0846", "value": 457, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772364707, "uuid": "4191d85d-a2ae-4889-b820-8cfe8b2ff7e1", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02ad4ff3-156e-11f1-8b52-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1772369766, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772369766, "uuid": "4fb0c7ef-4004-4338-87fb-2d8cd3a4e5e7", "comment": "Malware payload (CoinMiner)", "value": "f213ea658b5557014d284ee65be49eb3", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772369766, "uuid": "1f9e5710-bf4a-40d6-b18f-1d8da200865c", "comment": "Malware payload (CoinMiner)", "value": "df1e8bfc057af18951f1c3383549c7108b4371fa610e2fb88b5223b156f5c62d", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772369766, "uuid": "7b231d4b-0955-411b-9262-7fd3d631495f", "value": "T1B635CFC7E3582145E2E342B768E582C2BF3D656837525DAE242DC4E813430A663FF7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772369766, "uuid": "47cda320-1853-4b33-b7db-ea33440323d1", "value": "2c984f0d2dd3f6fe2d201cef0bc18aaf", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772369766, "uuid": "ab22e938-99b6-4228-ba0c-84c5030e397c", "value": "24576:Oa5fFG7dzJqpmuEUL2hluHDZg96YMUg+j:F5UdJGwhllNMH+j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772369766, "uuid": "5e70a381-8e8c-4dee-9cee-0e9a3c14c8e8", "value": 1072019, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772369766, "uuid": "67169b10-8a68-40aa-bc02-35fe5555e10d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e87ea99-1573-11f1-8b52-82aee05be84a", "comment": "Malware payload", "timestamp": 1772371960, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772371960, "uuid": "ff359593-5eda-49fe-b6f9-7be4a801f4aa", "comment": "Malware payload", "value": "d1742a2c13c38f3cc29a23eafbdddcf3", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772371960, "uuid": "c6ac7c3b-28f8-4e8e-9383-b907f46241a2", "comment": "Malware payload", "value": "f53d493686ad5e22de411f03c6bce47ca352945f891052b4761292966fba826f", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772371960, "uuid": "b7b3fb16-5e5c-44e8-b4c4-b462b1f962c5", "value": "T1085633F72BE60C05E6D4F971E4A73287C5B51C259AC6832C57BAE20036BD6F04A1CB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772371960, "uuid": "40affc11-cf0e-4b5c-a3a2-9af392141aac", "value": "e4e7c560e86639269dcf5a60c8dbca8c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772371960, "uuid": "63330887-3d80-4e79-9750-9bec2c29d45e", "value": "98304:Scs27aEcstF2PJLqZgu3wLNydV7UIfwD5lmwB7n27wXvoZI8w4umKR4:Scs7EcWuFq9KNSlfwD31p27EQZjPQ4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772371960, "uuid": "17818702-edff-40bd-85a4-c30028c52509", "value": 5988352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772371960, "uuid": "8dbceffd-905f-4ca7-9b60-a9a703470d23", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4bf2303f-1573-11f1-8b52-82aee05be84a", "comment": "Malware payload", "timestamp": 1772372036, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772372036, "uuid": "b23d23ce-d367-4b43-881a-db0ab1dfe750", "comment": "Malware payload", "value": "14ec5ced5fcf17a569ebea8e2a2ce1fc", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772372036, "uuid": "582aa4bf-673e-4ca9-95b6-270f49bd4eb9", "comment": "Malware payload", "value": "41f857b88e1ffc3f96e43be099a6af80af98afd74bc77cd406d038018f38f379", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772372036, "uuid": "93e2350f-1cb9-4f8b-babb-474ddc0ca189", "value": "T17B8309327488582A210B428FD267336C70EFDCE2D611E5B6F6F622344BA5EE135B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772372036, "uuid": "b2a20d9b-84cb-47be-9f89-d16f00a2e94b", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnTWa+VN/:XEKltp9txAX/yr2pbTWvVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772372036, "uuid": "41a73861-b56b-4798-a6ca-a8dcb735c4d9", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772372036, "uuid": "8da1fd29-eb9e-4aef-a2e5-d6278028b834", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33c539f5-1574-11f1-8b52-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1772372425, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772372425, "uuid": "0882fd1d-2eaf-4139-89ee-aef3cd260a6c", "comment": "Malware payload (CoinMiner)", "value": "b3c49a3db6e345df1af7316e6d1f0f72", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false }, { "name": "sosokenota", "colour": "#504c6f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772372425, "uuid": "612fac91-adad-4a3d-8604-49b8777b122d", "comment": "Malware payload (CoinMiner)", "value": "ec5727bd4b1f530f34f445762bea1a5395e87a905626f7054513e68c8d95dd0b", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false }, { "name": "sosokenota", "colour": "#504c6f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772372425, "uuid": "3e5eb7a9-0c90-4db6-940a-9d45d0ad69a6", "value": "T10E3633423BD7C5BAE1A120B046D3876614FAEFB417B916C30798B6552C323E2E3695", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772372425, "uuid": "d6671cf1-a64f-44a2-a412-9f7fe862b159", "value": "f6baa5eaa8231d4fe8e922a2e6d240ea", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772372425, "uuid": "396312cf-e918-4e45-b820-eb728b47640d", "value": "98304:tm52mc5vI1fDYvaLp5ArpUxD/zv6r5ixjjl/nk8NfA:tm035vI5Yw2uxD/ergvvXA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772372425, "uuid": "c0fbb329-d90b-4603-a1ca-5dc7b1b02fa9", "value": 4893520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772372425, "uuid": "f93e2be0-f56c-4586-9561-2d8955f25897", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1604920f-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772372919, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772372919, "uuid": "bafbcf02-336e-4ab7-a575-3b395e7ccb10", "comment": "Malware payload", "value": "74759d3867186a9e30f73af7d46745af", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772372919, "uuid": "eade6b72-af3e-4cab-9134-068323ddf90f", "comment": "Malware payload", "value": "50c1803e35fe6eafa4d766aebad06c334590e316af56e06a79b35b450dda790e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772372919, "uuid": "2a9e648e-da2f-4bfe-b42b-d3c6b58b0371", "value": "CD92E18726983743F4B195F5F77DBF88B2066EADEB3B542350946123A07311BA208C7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772372919, "uuid": "b36f237f-bc1c-41da-8558-118b9433a8a6", "value": "384:YTYXvQDuYY2xZ6VTgDK4mpwTl5yejHSDeWBbo7hcXBOo3g1qsn:YTYIDfYG6ZmewZ59+Nw1qsn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772372919, "uuid": "c78bea2c-c74c-47c2-8ce5-c702de062249", "value": 20272, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e11177b3-157a-11f1-8b52-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1772375293, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375293, "uuid": "f940601e-94fa-47c7-914c-9d43fa7e05bb", "comment": "Malware payload (AsyncRAT)", "value": "81c5a103cca60f434248f4e85a1f0145", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375293, "uuid": "d8736ec4-40d8-4efb-af13-630125baee63", "comment": "Malware payload (AsyncRAT)", "value": "e291078023f902c380b0e6cef294dd05d36d21e00ecf4756f7a038500b9cb28a", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772375293, "uuid": "8cfde372-c02d-41bb-ac04-bc7c14af27aa", "value": "T16CD20953A6AC05ADE1B393B5C9725E01C776BC164BA2A3CF8350916E0F297C1B936F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772375293, "uuid": "57e1ef3b-f413-47d4-9db9-cea7877527a7", "value": "994fec77863c87e5e434d9b420e4b3a1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772375293, "uuid": "e16e60bd-f0ce-4fa6-8907-6e4b26726fc0", "value": "768:6qaDHqo4IgOWO6XfGg5hFb5Sxkpkh0+Yj2mLpUb5pCpayX3Qgis:6qYHxXdhmfjz10q5ot5pCP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772375293, "uuid": "474b2275-3593-4fc3-8232-926773aabe06", "value": 29696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772375293, "uuid": "f75501f4-ef7f-4249-8094-aef69f1221d6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e33bebc2-157a-11f1-8b52-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1772375296, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375296, "uuid": "74f05e51-0e44-46b9-8c26-c41641aa6f60", "comment": "Malware payload (AsyncRAT)", "value": "2564ea5bbfcfbdfe7aada99aae80c8e7", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375296, "uuid": "86188487-ab2e-46f9-af36-ba4eee6a3027", "comment": "Malware payload (AsyncRAT)", "value": "e317bbfc8dd60ed01c0d2eb675d513b3ddde788c8a63a3e8444dd03b85eb31c6", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772375296, "uuid": "1f90e30b-142b-4893-87be-4eca90333c5d", "value": "T1A9F6122232D55E08D0B387F806A2D9B997337F1A2535D25A20F5BE87FBF39424C066", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772375296, "uuid": "be851db8-d490-4170-8c41-3e9ec9f0c193", "value": "88f70fb82598484a7ce88eef6418418b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772375296, "uuid": "eff663ee-0277-4b00-a5aa-07735bebe567", "value": "393216:T7F7QNH3hGZSLoMkCLQMWu0VwCnzo+vSe7PEmrkSB:T7F7SXn8cQMWuCzie7P9t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772375296, "uuid": "7d8e8191-93f1-4e16-a557-579bbaf48021", "value": 15543296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772375296, "uuid": "65ba3707-4f80-462e-9a8e-57c2442e4557", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e155425-ed79-11f0-8990-82aee05be84a", "comment": "Malware payload (BRAT)", "timestamp": 1772375297, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375297, "uuid": "41767a76-6b6e-4b7b-891a-e69e7d31a60d", "comment": "Malware payload (BRAT)", "value": "423cf5ddbe13df64594385b8fd519cc7", "object_relation": "md5", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375297, "uuid": "579a9d9a-2bbd-460a-a3bf-31156ab92236", "comment": "Malware payload (BRAT)", "value": "165c77e0cb3fc6551babc2de99e0c5182fb86e20ac3354da7ae980b580721049", "object_relation": "sha256", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772375297, "uuid": "261c7218-68ce-453e-baeb-fde3d9880f03", "value": "T157867C43EC9159E9C1A9A33089A79253BB71BC481B3223D72B90F7392F76BD06E753", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772375297, "uuid": "7cd4e0ad-4bfc-48c6-8cab-ea8dc803e3ab", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772375297, "uuid": "e4479f52-f38e-41d9-86ce-b4e63a52db89", "value": "98304:G3T2h9PPeJzgg3ty1qOMGUjEBoSMeduU8gsHZVY/YK2:GjigJMg3E1qrQFM/U8gsHCYX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772375297, "uuid": "09cdcd2a-beac-47c8-8a3e-aa1479451310", "value": 8346112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772375297, "uuid": "fb2f833d-b718-4ade-b7ba-0e3cab01f960", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "edb6d630-157a-11f1-8b52-82aee05be84a", "comment": "Malware payload (ScarfaceStealer)", "timestamp": 1772375314, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375314, "uuid": "2e7d7a46-a682-498e-bd5d-615a8a4adfc7", "comment": "Malware payload (ScarfaceStealer)", "value": "9b88ffc92d7d363757513021f176f388", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ScarfaceStealer", "colour": "#660BB4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375314, "uuid": "dc4933ac-8c00-4cd2-a23d-e827db71317b", "comment": "Malware payload (ScarfaceStealer)", "value": "6c42035513f1246eb3089804910dc9ff8cca1725e6f25c12eff17cb284ac35ae", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ScarfaceStealer", "colour": "#660BB4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772375314, "uuid": "52113b50-362c-43e6-bfbc-eeeb7d7511e2", "value": "T1E4F7594262EA05C4F9F7DA358AE65217D673BC166F3081CF325C172A1F736E08976B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772375314, "uuid": "eaecaf72-c5fe-4f0e-9d31-5494cf541b35", "value": "772ec87d3452991a9933a3ba0d9963a9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772375314, "uuid": "23f71634-f649-4e40-b332-c855d4ad37bd", "value": "393216:Nn1XQgPR2k3m5C507G9ITEc5eAlkLbQurxMWhAsIyNOPS0B4AycWsCYaxFzwW/t+:N1XR7AsxYqt2oRGj5rs3wb8/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772375314, "uuid": "2c570609-37bc-452f-9ccf-cc2541fe10e3", "value": 71367680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772375314, "uuid": "14730e68-3266-438f-a875-16b14a362934", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01722306-157b-11f1-8b52-82aee05be84a", "comment": "Malware payload", "timestamp": 1772375347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375347, "uuid": "76287114-8e9d-415d-bb81-8b376fa571f3", "comment": "Malware payload", "value": "616f6e15172c1fbae88e5aea59cf4593", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375347, "uuid": "91239f4e-fcef-491d-a92f-d1a5011cae5a", "comment": "Malware payload", "value": "1f6c7fd68a375e79d977bda2fc9877ca94836c60a4e7925d01f1ee3843058493", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772375347, "uuid": "d15eda46-6ceb-40ce-a03e-8c9a220c62f0", "value": "T1223301FF5E2C42C3590B699F0D72925E6072DA843CC427ECFA8D7782ED15B6969180", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772375347, "uuid": "45c454b3-0411-4966-bc83-a7dbf129dd39", "value": "768:w+bp7kqrT4HE53mUCsg+/FAQM6xI5nyCn3SnNUDoR7Lfh+D7w/zzf4Sso6cDWOQm:T53mUCsHGLF5nyzeDWJAKT4tlA7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772375347, "uuid": "88fd050f-6569-425a-a8fd-7c8145ddfa43", "value": 53459, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772375347, "uuid": "397afc91-37c6-4108-87a4-079abe8a1c79", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76db9906-157b-11f1-8b52-82aee05be84a", "comment": "Malware payload", "timestamp": 1772375544, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375544, "uuid": "d4e2c384-8e97-4884-9367-562e4bd7abde", "comment": "Malware payload", "value": "ed03869082d408f49bca23bba03a69bf", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375544, "uuid": "2b12e1ba-2313-4123-b910-bb05bbe5c8f6", "comment": "Malware payload", "value": "9d3bbcb90e0c0cf4d9f5ad0b4041d4f2251a8a6b8bc07fca5c987fa5cec0e48b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772375544, "uuid": "56a1238c-8946-4765-b6d5-4fe601b86cf2", "value": "T13524E049C51A7A74B17F36FA795E60EA68C5CED07D2B8B5B89F7231080043E3179C8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772375544, "uuid": "49e898a7-15a1-4a83-a316-c04168a0a901", "value": "3072:Wyo/NNoboPQhOHMPPqYCQbGpd2ZOVAeouCXmlw1PIsHrCunEpgidIgkGT9WIXA1:WRNi8ohN/GpyVdoOIsHnE5WgHT/k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772375544, "uuid": "23cd4978-072b-4bba-ad4e-b4a4dc5712b4", "value": 213077, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772375544, "uuid": "272e98dd-d58f-4207-a236-61addcee3c15", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "54b92835-157c-11f1-8b52-82aee05be84a", "comment": "Malware payload", "timestamp": 1772375916, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375916, "uuid": "f3899f26-a48e-4f95-b80d-b13c5d383f37", "comment": "Malware payload", "value": "d12a8877c2ff6c94d09823f1ca550836", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375916, "uuid": "faa2ad33-1fb7-45b9-8ef8-8e238216dbd9", "comment": "Malware payload", "value": "92f21337458da0acf334ece9cbf68d95ad74554ecd64799f1056721b1fbcf7ff", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772375916, "uuid": "6b1710cf-ad3f-4691-bebd-1f18e41d6f4a", "value": "T1F534BDC25EA243704C49B263603CF944FFB03D6E58AD780D929D43E4EA5DAF476186", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772375916, "uuid": "91bc750a-90a0-4575-ae52-3114f92520d3", "value": "3072:0DtC5alMJy/TEUhaIws7jsj1jJTllz+SlHTtidJ4/29w83Ef+etq7h/BH77R:6gglHw1jJT2STiSnd+eM7h/x5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772375916, "uuid": "b79c32d6-0595-4ebb-b2b9-1bda2a3f95ac", "value": 239695, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772375916, "uuid": "96bf149f-53c1-49a4-b867-3f856b6086f1", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b077d516-157c-11f1-8b52-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772376070, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376070, "uuid": "bd6df54d-935f-41a1-a2a1-d5dedc8ec4fc", "comment": "Malware payload (Mirai)", "value": "887c762e6d00c43b3ecc6ce91a9ce0a0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376070, "uuid": "e9ec57ea-b880-47be-b0b0-a892a0a4c65d", "comment": "Malware payload (Mirai)", "value": "a58a9eb3e8afefce649b9cb85ea28b4431f88137a8398b48eaf5987228d58431", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376070, "uuid": "05a8abbe-a59f-4b3d-b557-d48600822b91", "value": "T1C1E3F746BD419F13C6C721F7FBAE42983B166B6DD7EA3103D8256F50378A4DA0A362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376070, "uuid": "717da675-1f9e-4fc5-bc0a-2833e4e56f17", "value": "3072:h0bfTJL1ANOPN3J4gbn73Y/WIelo/Qbz:WfTYNO13J4gD73Y/Ws/Qbz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772376070, "uuid": "42afff82-cb5c-453b-b794-01e9c312688e", "value": 147088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376070, "uuid": "22152b1f-a882-408b-bad9-58548165d3a6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b07a5fcc-157c-11f1-8b52-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772376070, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376070, "uuid": "d80174ae-61d2-42c5-b83f-2a7c3240399f", "comment": "Malware payload (Mirai)", "value": "ba355120627cf985eab29d67c8d7108c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376070, "uuid": "d5321e27-770b-4e45-9098-b9721d36d98b", "comment": "Malware payload (Mirai)", "value": "46937002aa9b7dda939f7c1bd8aae78764349b9b2e49598859bfee57a9938afe", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376070, "uuid": "724e5bc5-9e38-4ff3-859e-675611e4286f", "value": "T1A8830946F9819F05D1D622BAFB9F514933136FB8E3FA7101DD206F50238A99B0F769", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376070, "uuid": "1758fee7-6730-4108-b368-1c872031344c", "value": "1536:vUnoalp3oimt+HRJtjOMeHqx/yx3M8CK1B97xsqjOl1yHpRiY1Pk5fm:Nalp3oNt+RvjOoxyx3M8CK1B9VFn1Pk4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772376070, "uuid": "195066c8-d4d8-439f-a4e9-a62d12ec7b90", "value": 82436, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376070, "uuid": "3b88e441-c9fe-45ae-8085-6296f2b604ed", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b0806dd6-157c-11f1-8b52-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772376070, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376070, "uuid": "3e9eddf2-79eb-444f-8703-a38d951c6840", "comment": "Malware payload (Mirai)", "value": "024bb37ae99f1ff1e90ed7319b7e2ea8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376070, "uuid": "48f3190f-5f9c-43b1-a6fd-75d2e6c69ebe", "comment": "Malware payload (Mirai)", "value": "11b569ca04e01c1da7072841712a399dbb15bc67b1d0f6cb6ff037de5b62a23f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376070, "uuid": "2e329829-2277-4e4c-99e6-ef4c698c13b4", "value": "T19FD32B81BA43CAF7D40304F001BB663E8F31FC2A4837D595EB69BEA5DA135C1A6163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376070, "uuid": "0270c0ef-846f-4242-b4bd-ba7b371a54b0", "value": "1536:XQizGOKZMEuwmZaUkoIJ3nRi7xUX0GrWVR3WNy4PJ+GpPCI:X9zGOKZMpwmnDIJX47xUX00ICUGb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772376070, "uuid": "70897a73-5a64-4923-bfcc-67a1e25c0d78", "value": 132584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376070, "uuid": "e28d3d93-ee0a-4f88-92a9-e34617570372", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b0826d36-157c-11f1-8b52-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772376070, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376070, "uuid": "d7ae9604-ecf6-4134-a6f8-3d1a8efff99c", "comment": "Malware payload (Mirai)", "value": "04d37f5297a95f57183d338fc83196c3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376070, "uuid": "5a242697-1b92-4a75-ac63-be8f4ee29ea6", "comment": "Malware payload (Mirai)", "value": "eb8b9c919cece229e8052ba0c3c8911da1a8a0fb3051c92e8450a65a5f00ba55", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376070, "uuid": "aa6fa2b2-50aa-4a95-9ed1-8ae6f49a01ad", "value": "T10ED34A63DD26AF4AC112A1F0B1F18E795B53FD2688571FBA6872EAE04143DCCB5063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376070, "uuid": "1beefb86-b3eb-4663-820d-75b2ef928b7a", "value": "3072:yrnnIYP1O57S31GqtHlPniPzUWQ2ACaLquSnU:yre7YtHJGzNQDCqquSU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772376070, "uuid": "e299fa13-cfdc-4778-9ded-5a0758cdb9e0", "value": 134860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376070, "uuid": "4523fe28-6365-40e2-87a1-a14958767c23", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b08ba1a9-157c-11f1-8b52-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772376070, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376070, "uuid": "4362a9f3-e61e-4040-8ae9-8c795881fb61", "comment": "Malware payload (Mirai)", "value": "0c39c131c5eafb938d3e235d884ffc0c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376070, "uuid": "99c88699-97c0-4ef3-b67d-dfee8b1cc96d", "comment": "Malware payload (Mirai)", "value": "30944a7b2d6e2a5e9e355dd9de15b2acc5bc0cd9a2fe242c2466b933167f92df", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376070, "uuid": "91c27010-5455-4750-b526-88c4f718f2ac", "value": "T14DD3E842BD418F13C6C322F7FB9E42987B266B6DD7EA3102D8257F54378A4D60E362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376070, "uuid": "988774bd-0ea9-4461-b476-cdda01555cbd", "value": "1536:nh9HoCtxP+o5962fNknd2UoeI4V5IA+b+usuIulLOwywyIQjv3vwxzytPP7y3F3F:n3Iah+o7Gnd+4oA+K9u0vwG7ehmzQz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772376070, "uuid": "c3a892f4-5404-4b61-a33d-a615802a8a1d", "value": 142992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376070, "uuid": "5cc489ad-52bf-4377-8aca-992227194f55", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b0b2c644-157c-11f1-8b52-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772376070, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376070, "uuid": "b78b1c2b-f4ee-4997-ac2c-7655c6ffcae1", "comment": "Malware payload (Mirai)", "value": "1e068dbb6e38ad7cb4042f9c14ead379", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376070, "uuid": "1bd9117c-b207-4833-bc8e-19ea8abc25c8", "comment": "Malware payload (Mirai)", "value": "a5485cfa9d017187e5bf027fbf787d6c6008d395c7bde646274b12b0c52d5cef", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376070, "uuid": "a37527f7-6122-477a-bc5e-6c092c1c0024", "value": "T17F24C5067F919EB7C86FDD3706F68B0128CCB45725A43B3A3670DA6CB91A54B09D38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376070, "uuid": "09b1098c-396e-4b54-95f1-a2b3b9c369f1", "value": "1536:zJrri2wB/BsyU/0Z8/SnxvhjehFGZyInxNcjb9rEtGESG8fqsZyh83ZCNNmaQyjp:z9r5wB/40+Ojc8nMjbG1WZaQRUysDHp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772376070, "uuid": "96b045bf-9b00-43f8-a042-ea9468936809", "value": 217892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376070, "uuid": "9137444f-7a51-4869-a92b-e68245e44881", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b1e7315d-157c-11f1-8b52-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772376073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376073, "uuid": "955599db-fa84-4bf1-a420-820ddf9889f3", "comment": "Malware payload (Mirai)", "value": "16c4d1ebf68b305b7b16d323009f55d2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376073, "uuid": "c929cc4f-a0ad-4bff-a51f-404cb2ce8820", "comment": "Malware payload (Mirai)", "value": "d4e89c548f8d38d565e71ca39f9844b4f8dccdad655ddddcb332a1c1c394e89b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376073, "uuid": "9e98f9ae-d19a-43fc-b3cf-3e63365ecf14", "value": "T1E5C328C5AB43DEB3E85310F101BBAB324B32FC3A5826DA91D779BCB199515C0A6067", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376073, "uuid": "d079cf3f-cac9-4e40-98cd-e1411a3ad8c5", "value": "3072:DzBid9mXOriFh2EallAVT0lPj7qJqlLv:DzAdogHmmO8lLv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772376073, "uuid": "5e207c6b-cc64-4e59-bd96-a254be538db8", "value": 128616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376073, "uuid": "592a9b6a-54a6-4c71-89f9-2fd57d395ea1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b715742e-157c-11f1-8b52-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772376081, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376081, "uuid": "bcb483d4-64a2-452d-86e9-6c64be53f91b", "comment": "Malware payload (Mirai)", "value": "bface635bd235c663288acbcebf3f354", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376081, "uuid": "b59cff6d-bcdc-4691-b57d-a18b3628dfb7", "comment": "Malware payload (Mirai)", "value": "a38fedf7b8d31c7085f96cfd654093c922ba5096e668daa7088568bbc4a206ac", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376081, "uuid": "0561ecd4-d15e-4416-b670-65e11424779b", "value": "T1E2E30902770D4F03D1533EF03B7B1BE087AEFD9628B4A580652EBEC992719B22545E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376081, "uuid": "af5fdac8-49fa-4bca-a427-3bfb95c0d791", "value": "1536:ceCobapCeiyxAdaWSlx4j/dISqAIZIx4vAiWCtXpO//yVlMDhTmDv6hnsB:jba0ByxqSlxnVI7ifYM7isB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772376081, "uuid": "3dd17c4c-a0cb-469f-bc7d-85743196cce5", "value": 151352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376081, "uuid": "fb066c2b-88e7-4873-ac22-2157ac86b8d3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b729438a-157c-11f1-8b52-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772376081, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376081, "uuid": "3d336390-eb9a-4567-a32c-4617b3415d22", "comment": "Malware payload (Mirai)", "value": "f01c5b48a4efe856ce98f168d7890798", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376081, "uuid": "38f27013-e5b0-4063-a48b-c9c5244f6f1c", "comment": "Malware payload (Mirai)", "value": "34105f259d7faab6a80130e9fbb1e457611422261b9265d2ca418202cecb16bf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376081, "uuid": "944f7cf8-5d9e-4b35-b781-d587e1e44946", "value": "T1C1E30706770D4F03D1532DF03B7B4BE0836ABD5228B9E584711AFEC993B19B2A506E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376081, "uuid": "0970bcf0-38b4-4f55-ab53-b883e7a62ce4", "value": "1536:7BCb1yIvQ9tvL107vkeveR2xlbDiOU2q2g89QiXnvAKuHmGOcRiQreuA7avDRrNF:ob1yYQHvL1pAeYxtizG9QpKzQrNRrrcI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772376081, "uuid": "5aed2de9-e990-4f53-8529-e69712a39cb5", "value": 151352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376081, "uuid": "63fad6e9-0f6f-4ecb-b339-b17d8f0b1e8f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b72d5e18-157c-11f1-8b52-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772376081, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376081, "uuid": "f7d44330-5636-4430-9499-867fae9cfbbe", "comment": "Malware payload (Mirai)", "value": "cbe2b7ce003a59ee3824d078bfa74755", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376081, "uuid": "e3b517aa-8fac-4d5b-a1c7-2dea8c77fd46", "comment": "Malware payload (Mirai)", "value": "67a962d5dde9abb6c589f1a9da633831505d299a1bac6d905f5f9c8d02304667", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376081, "uuid": "ac3756c8-54ef-469f-a2d8-6a9f6eba2e3d", "value": "T1A74308CBE353C8F5E84325F011ABEB798A31EC712260D976D7E5FEA759625C260413", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376081, "uuid": "826c4a7c-e129-475f-a4c1-842e4853f864", "value": "1536:MJfvefm6jSrRNExDfQzKVGTkJ/Cu32j8M:MdW74ExDTVbJK+t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772376081, "uuid": "4ac9d665-bc32-4ad5-806d-07ae0f54b9b4", "value": 57780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376081, "uuid": "8f6f8574-9501-4b4f-8649-bc4b61ade9f4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b733c9a8-157c-11f1-8b52-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772376081, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376081, "uuid": "31ff79c8-e942-4bf2-b6f8-ad644807c54f", "comment": "Malware payload (Mirai)", "value": "175ec7383c771636452e7ac8ff18286f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376081, "uuid": "221aa7dc-e328-4adf-8bca-3b07611b205d", "comment": "Malware payload (Mirai)", "value": "25164acf2c66b91aaae08639711e705759b25eef6f57f3c3b20def81c002bd2a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376081, "uuid": "3bb2e834-3ef8-4a1d-b06a-6f1de5477c07", "value": "T133E31A077AC1CDFFC886D1F04BEA68358A62F92D1535719B6B94BEB11E0DDE12A1C7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376081, "uuid": "0e8ac02a-1087-4b94-9fdc-140f7b351ee3", "value": "3072:3AoL43t1s+cNu8tNcsNXWqeW2ewskJ+Y0EWa6OiIjThvWf5ml:/L43kgrcKNW9OZj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772376081, "uuid": "3b74f7e6-127e-422c-aa4b-d51595b15341", "value": 156752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376081, "uuid": "0bb03e5d-3e74-44f7-a02c-6022988e3688", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b738eb5a-157c-11f1-8b52-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772376081, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376081, "uuid": "6ada65b3-1780-4e81-841d-c6cdf615e280", "comment": "Malware payload (Mirai)", "value": "b443f9381f4db0f975da86e2e9463bc6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376081, "uuid": "f8259bde-a7e1-440f-8734-1b8099f4af1d", "comment": "Malware payload (Mirai)", "value": "3787283def2912d151197b284336427025596f3acd9cd41e6271910b00f2affb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376081, "uuid": "94fc313f-f5a7-4d0d-9c4a-8600ace7e0b7", "value": "T1C0F31A87F900CEBBF40BF37644A308257530FFA658A25A37725778ABAD391D41427E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376081, "uuid": "02451866-6b45-4f2b-baa1-d2a6ec2b3409", "value": "3072:wUKZ5PdzJ4+iNsQ7+Dc0F4JE4aVfjbiUL/r+mfV1BBGovXyCubPL:EjPdzJ4J7+Dc9E4yL/Smf7LyCyPL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772376081, "uuid": "2fb2db6c-881d-4fd3-a8df-29fe6749fd65", "value": 164524, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376081, "uuid": "03f91d16-8b1b-403e-ab5c-6cc2a951d849", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7401efa-157c-11f1-8b52-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772376081, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376081, "uuid": "9b4375d2-de0e-4330-88fb-abe5c566c0e1", "comment": "Malware payload (Mirai)", "value": "cfab3a0047f86e5e00d3ac7695dc6dd7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376081, "uuid": "46a6c840-4793-49f1-be11-4f554e352584", "comment": "Malware payload (Mirai)", "value": "adfc440947f2f3ee41d020dcdba02af9f7261d2b95e35a883a12d6e271f3518e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376081, "uuid": "a17af473-2ed2-4989-84d7-60142d0e9e8d", "value": "T1F424641A3E12DF7FF55D867047B38A30969836D62AE1D585F26CD70C1E2028E641FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376081, "uuid": "4e20ba7b-b316-4ba7-91aa-cb1c7b79a03e", "value": "3072:c24lFJPZJwO4PvzlFQFWo8NWdz0OMiKE1HjWGrCXYWvcJG:c24lFJPZnSvzlF+WKz8iLNRrCoWvR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772376081, "uuid": "e3ee74b1-d499-4a06-b24b-a9d793ca450e", "value": 216036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376081, "uuid": "97d0685d-7a09-4c31-9dcc-a744f4c59c85", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b74f2601-157c-11f1-8b52-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772376082, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376082, "uuid": "b9598c59-de76-4843-b28d-e52971e5b9d0", "comment": "Malware payload (Mirai)", "value": "5b12a1f94a8ce17635ce112433649274", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376082, "uuid": "8bcfcff3-5fa5-401e-9dc7-4f203a30f0a0", "comment": "Malware payload (Mirai)", "value": "43d6401f53bcd6640e3594b223094a7154339a6b5efaf97e8bfa29ad94e8fc19", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376082, "uuid": "a652de83-ab6a-49c6-9a23-268fb8ef4299", "value": "T1A2F3F906A9919F12D1C311BAFF5E514A37133F78D3EE72029C246F60778A8EB0E766", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376082, "uuid": "d95d6d9e-c8c6-46f5-97db-37832939db5c", "value": "3072:mAlcLaJf0TinE05yxhc0XFKyq3XfLU2CuQwNyaL/T6uezK/:mAlQaJf0EJ5yxlXCXfNCuQwNyajzezK/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772376082, "uuid": "12a96b7d-8feb-4c7f-9b27-16ca58221c04", "value": 157776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376082, "uuid": "47863780-3f0c-49d0-824c-809eb3981866", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1fa2c065-157d-11f1-8b52-82aee05be84a", "comment": "Malware payload", "timestamp": 1772376257, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376257, "uuid": "358d349f-c307-45d3-8567-47533de3832f", "comment": "Malware payload", "value": "c2b4641e5181ae41a38a67c821823a0a", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376257, "uuid": "cfbd7f2f-e5b4-4074-93d8-144dd7ec0942", "comment": "Malware payload", "value": "1bfabbc3f61d4a53ce7b2e5a22a5728b8e2a9f345c71eeabd7dcffef082a1729", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376257, "uuid": "07ccbc76-93a1-403d-99be-3cfd68467611", "value": "T115C3D6DDB2E27025439324A5157F410AE27B2E553C4B8290D17EE9D4AC7CE8E817BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376257, "uuid": "9b2a9463-38f5-4d07-aecc-218c0ac96f4a", "value": "1536:5wxqb5bdwL+pNFz9FSUsqLonQNYgetcVPkx2cnYteolbFr3rd6TcWmuZUfFi8AiE:5md+5z1VP9ftrdruZ5QZ3fav8rA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772376257, "uuid": "ff57d1db-46fb-49f4-a8b3-74905ce762f1", "value": 120998, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376257, "uuid": "40fee79f-d164-416b-8a51-d96facd1400c", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f5b6fe4-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772377536, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772377536, "uuid": "ff24f67e-74cb-44e9-9ef4-3aeabab44a48", "comment": "Malware payload", "value": "316b10940653b65ccadb5c0dca88b921", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772377536, "uuid": "3faa7a6a-e324-452f-9a6a-1039b83145f8", "comment": "Malware payload", "value": "6b09183fdd3eb3af13a88f61d0534bfb15a3fd30c2129ad51f51a7359ea7b1d1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772377536, "uuid": "8ffa229a-504e-41bb-97ee-591677a464a2", "value": "1C831229135524E5D62280F1D7FD1F84AE591F698EE2EC15BC12BC99EE333AD2CC2618", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772377536, "uuid": "cdc2c3d4-66b8-41f3-8c19-c7576ef8586a", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J1V+uB:yYI0ARqw1qAEv7UIFM8oJorFquyjkRk7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772377536, "uuid": "385f7fb8-ea6d-4ce0-b9e6-87525c1a2aee", "value": 82536, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "889a7c56-1589-11f1-8b52-82aee05be84a", "comment": "Malware payload (Smoke Loader)", "timestamp": 1772381587, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772381587, "uuid": "3ee45cff-e603-4b9f-ac38-67ed869502bd", "comment": "Malware payload (Smoke Loader)", "value": "93e8bed98c864737072495bd8b436e3d", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772381587, "uuid": "0a43ff01-f9a1-4150-b8f5-d9977d2b37a3", "comment": "Malware payload (Smoke Loader)", "value": "582b9a4424c0f348efc7115fd729580dda6592c329946097c4436d9a0155a96a", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772381587, "uuid": "bf846ee3-d817-49a5-abe7-58423a8fae6a", "value": "T16B75BEF02FFBD816E1AB6F74986299207A2F78C7B960CDDD9400C1495BAED385834F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772381587, "uuid": "3dcfeea3-6b3e-4080-b567-aa0a14c0592f", "value": "24576:hAt2t0MXnHIPu/6bA6EwAqF+y5VdL9nkbKdNXlkJ9sOdpt7l5qVo:o2yMXHNh6htvBkud9U9sOdptR5mo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772381587, "uuid": "26058f77-f405-42de-baa9-11a176853855", "value": 1610776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772381587, "uuid": "b7a4ef4e-feaf-4e2f-9c10-f7675e1fb860", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "560c64cb-1592-11f1-8b52-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772385367, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772385367, "uuid": "011a4ade-75d7-4f22-aff9-a2ba67c97ce6", "comment": "Malware payload (Mirai)", "value": "277e8c70ca0b00afb0d422fe0b69f9b0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772385367, "uuid": "2553557d-571e-4f32-af29-77625f4bfacc", "comment": "Malware payload (Mirai)", "value": "1b20d288e9a1cca16f12a7ae0f4ff297d7ed3ff2112816bb91356154f5010a34", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772385367, "uuid": "b4b5edcc-6d74-4c10-b9ee-22866bea87f2", "value": "T1CB14951E6E228F7DF368873047B74A35AB6933D627E1D644E1ACC1105F2429E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772385367, "uuid": "135d947a-dfa0-47b7-8bde-98df946739d9", "value": "3072:AOH4DSTLTlrEZUFQNeHYApKuOLkaSO2TH7oZ+0:AOH4D6LTlrWUFzJpik22TboE0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772385367, "uuid": "7891a10a-7e5c-42e0-b6c9-a0b6384a9d6b", "value": 208088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772385367, "uuid": "fbbadefa-df2d-4f29-9722-ecd53509f6af", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6dc1b526-1595-11f1-8b52-82aee05be84a", "comment": "Malware payload", "timestamp": 1772386696, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772386696, "uuid": "066096ac-072c-4df8-acd3-8fade06342a2", "comment": "Malware payload", "value": "fe685aeb7e12d0e075034a4c26ec225f", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772386696, "uuid": "d7e3af9f-210b-48cd-b876-bce239446925", "comment": "Malware payload", "value": "be3eedac2bb56db9f3a337fc6f68e6b5803ee682b335a0ceecb13f423382d5d6", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772386696, "uuid": "c49e185e-671f-4494-a027-224c0cb67693", "value": "T110E6186B665D857BC11DC2FAC0B28BCCD5F370BD1772C6E792A003E81E469D05EBA6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772386696, "uuid": "4cd7be5e-2360-4b8e-85fe-42e5867a79e4", "value": "9c852624a95579595d84bfcfbd14cb95", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772386696, "uuid": "279bf1f1-597f-4c53-86ef-27d8aff0d77f", "value": "98304:DfbvYfLRXJbWCnIljJd/8+p0jT0/CoRdQI:DfbvMX+oceT06o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772386696, "uuid": "05f88e66-da5f-49a0-933b-7225ecb60349", "value": 14096384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772386696, "uuid": "05a99ae8-88b5-414d-90b7-da62c5804d30", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d1e1b4d5-159c-11f1-8b52-82aee05be84a", "comment": "Malware payload", "timestamp": 1772389870, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772389870, "uuid": "520357d5-8da8-4918-80b9-65a11d943114", "comment": "Malware payload", "value": "4da694f10eecff946c4eb0d0c48f4940", "object_relation": "md5", "Tag": [ { "name": "a3dacb", "colour": "#a7477c", "exportable": true, "hide_tag": false }, { "name": "BlankGrabber", "colour": "#f1c814", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772389870, "uuid": "20284db6-6796-4796-b574-a071debac61c", "comment": "Malware payload", "value": "34c240e0decac9959be2b5a3a96c7dbbbbe3b2db6543161c2605c36f3815a2b6", "object_relation": "sha256", "Tag": [ { "name": "a3dacb", "colour": "#a7477c", "exportable": true, "hide_tag": false }, { "name": "BlankGrabber", "colour": "#f1c814", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772389870, "uuid": "b2270fa1-3326-4179-8aff-d7894707dda4", "value": "T1B4E6338453D14A66FAE7E13D45A7E051D1B2F8105B228ACF4FE44B673F1B2E14E3AB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772389870, "uuid": "da9fb969-810c-4241-a825-e1107104676f", "value": "74f4f918cc15caa2178da4a8adcd29a7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772389870, "uuid": "5a4e4f9c-2a56-4784-9720-abd5253312ae", "value": "196608:UPApNMDftbW897GDr/x7eovq5XMP6PzFcPVz097WpHskNqSPrGuZRjMFqbH4Mirc:W1yNdq1B7iR0gpHskqSPjZpiqbH4a7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772389870, "uuid": "0e5413c6-d44e-4ce8-9314-5f2d9c4202c2", "value": 14060032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772389870, "uuid": "24816cfd-2abe-4803-812b-ce6806027f32", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dea3ef99-15a0-11f1-8b52-82aee05be84a", "comment": "Malware payload", "timestamp": 1772391609, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772391609, "uuid": "c737a61c-8409-4c5b-878e-1a691c3c464f", "comment": "Malware payload", "value": "894c96fbc0de466a6e6e955722cc864d", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772391609, "uuid": "2332fd78-a295-4c62-82a1-3f800d28afbc", "comment": "Malware payload", "value": "99a995bbf09df2094c2aabf95d9a58553bbee1ff7abc97d1490c46baec876c62", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772391609, "uuid": "151909aa-ff42-4de8-8757-879eb8e05c21", "value": "T1ADC5331EB9F2C7FEDDA3473E08890A56763C2EF889C8764B55969BB873C114291473", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772391609, "uuid": "dd14cdd1-03bd-4fe7-9604-acd11ea86598", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772391609, "uuid": "b4cc2b6b-8cd1-4348-bdc9-b091135aa8c8", "value": "49152:XBiqFoNj5EK2kz8bcP753aWuT9pM4wUuKNES9bYPzBgbTAy/FzRzYu/e:RQEJCPVTuT9Um86bcy/FzNh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772391609, "uuid": "498ca3c5-4f29-41e5-bebf-0b0aeefe4d44", "value": 2626048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772391609, "uuid": "4046def5-237e-4f75-ae65-e723918914f0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff29548c-15a7-11f1-8b52-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1772394670, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772394670, "uuid": "3193a13c-8219-480a-acb3-65d4dbb0d4be", "comment": "Malware payload (ConnectWise)", "value": "42dbd90154484c87656974e72abbe469", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772394670, "uuid": "c6adabb3-7edc-44ff-93e4-79f6d61ede95", "comment": "Malware payload (ConnectWise)", "value": "f65772993e3614a19381f983b60bb78dad1b51b969df8fd1db8558cb47b7a999", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772394670, "uuid": "e91b88e6-27ad-4d56-9632-13cf382c7a54", "value": "T1AED61201B3E69574D0BB0A38D87A9266AA31BD005716C7BF5794B92D2D33BC08E327", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772394670, "uuid": "3e4368f3-c804-461a-8542-665ce546e262", "value": "9771ee6344923fa220489ab01239bdfd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772394670, "uuid": "6d8a3039-aeb4-4701-b729-75fda42bfd38", "value": "196608:ffefP/Bn2hg5kEWmXhcfKjSVSh7vGeYBn2hg5kEWmXhcfKjSVJBn2hg5kEWmXhcQ:WgdEEijbDGNgdEEijsgdEEijAgdEEiji", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772394670, "uuid": "24ade683-6b2c-463c-a924-8011f187d85d", "value": 12637240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772394670, "uuid": "9802119f-0483-47b8-ab58-1468be038639", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60bbfdd4-15a8-11f1-8b52-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772394834, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772394834, "uuid": "184a099c-f19e-4988-8111-fd4c916a469a", "comment": "Malware payload (Mirai)", "value": "c5ed1f0bdd30372fa67d56c6da520908", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772394834, "uuid": "fb5afeed-28d9-4c98-96fc-32b6edb41019", "comment": "Malware payload (Mirai)", "value": "e986942fd31f5fc31def410529a0102a86cd990a7f51498af968fe0eb44f9d39", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772394834, "uuid": "821daf60-f6c7-4e82-a282-ca2dea246418", "value": "T1240419C7F900DEFAF80AE73748530909B130B7A104929A777257357BED3A1990977E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772394834, "uuid": "d2fbacd7-d6dd-427a-9403-1427cdf10bca", "value": "3072:ka7H7Ds2MlBdZphM4gihh8Dy92CqdBWdFVaJqMuV3GH37V3jbi/L8uzqKg:t8a1ICy9RqdBWlaSV2H3qLl2Kg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772394834, "uuid": "52611e6b-4fae-4ace-af3d-c013079144cf", "value": 181380, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772394834, "uuid": "172aef43-914b-4c41-8784-ebc1c5dd73d1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f4b0f0c-15aa-11f1-8b52-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772395557, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772395557, "uuid": "1927691d-3a7a-4920-a3b7-0648116745b7", "comment": "Malware payload (Mirai)", "value": "0acbd82fe0fe4f8ec2d162a27bad0b11", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772395557, "uuid": "e9a74047-f767-4f52-9250-51968966bbe2", "comment": "Malware payload (Mirai)", "value": "b620369eb25974c90e063afcdb6c529ac474f155809dd4d59c56593045931bf3", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772395557, "uuid": "052dd761-4d7a-498d-b415-667249e07d2d", "value": "T124134C2345F9AB0BC6E4A77701E383B290FE6B806050174F7D1A4C5EFEA63416B6A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772395557, "uuid": "7fc82ad2-2f40-400e-be80-496c157e9a1a", "value": "768:Hi375vu9fDYtMfravAp5VFc1aZpjegBeGID2Nomdc:c7cYtMDav87c0ZDBXob", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772395557, "uuid": "e20948bf-53da-4ad5-975f-0089976a8a85", "value": 43744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772395557, "uuid": "17cda1d6-a1bc-4f97-a691-72d1ffaaff45", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "449d013f-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772396206, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772396206, "uuid": "7679d7e6-b6f9-4a42-a152-48bebdc1aec3", "comment": "Malware payload", "value": "454c9bf6bdfaf41e58406b098e236dc8", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772396206, "uuid": "fc94c969-a3ec-40c7-b6a2-4ae81d77cd3d", "comment": "Malware payload", "value": "c0b1ac2a4e9df27794b10c8738057ba5476357bd5129bee50a2a1ab9f8183853", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772396206, "uuid": "518a79c5-414b-4778-9630-77fa6e6f21a1", "value": "EB531202339A297192714AF1E7FDBB48E64E3D588FF16C246C113D68F93239D5CC8909", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772396206, "uuid": "cd41dd70-d2c7-461c-9772-a97a196cd576", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxI:yYI0ARqw1qAEv7UIFM8oJorFquyj9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772396206, "uuid": "b74a2301-7b85-422b-a969-19520ea16cd3", "value": 66608, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad06430c-15b2-11f1-8b52-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772399257, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772399257, "uuid": "28c8dcca-9994-404f-a85e-9dd61e8d7698", "comment": "Malware payload (Mirai)", "value": "aee16cc7a6b581f17c7c87b92b033344", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772399257, "uuid": "149308b6-c157-443d-957b-2029d87b869a", "comment": "Malware payload (Mirai)", "value": "59c5e84481158593af51c6f06b112f2b276c7774614677b42667c01a5c870807", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772399257, "uuid": "fe1fc9e8-2c33-45ff-8902-11e9ff7d650c", "value": "T191C31A56B992DB11D5C311BAFB9E514933132FBCE3EE7202DC206FA067464DB0E765", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772399257, "uuid": "74dda5fe-f7f8-4e11-8d99-666802fcc025", "value": "3072:7rJStQ4kaiI4hvSvSToRRa7bcR9ekLBscaL:ZStFMTvSvkoXaP0eklaL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772399257, "uuid": "8a894c23-0914-47ba-be1c-103971549fb7", "value": 123744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772399257, "uuid": "a0babe7b-064e-4abc-9434-dae52f7de828", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772324418, "uuid": "6d2a9aa8-1504-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.234.45:36829/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772324482, "uuid": "93d46bcb-1504-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.125.13:43597/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772324776, "uuid": "42b21273-1505-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.214.94:47862/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772324895, "uuid": "89d4924a-1505-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.79.135.225:31835/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772324897, "uuid": "8ac6ee54-1505-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.236.150.188:12164/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772324897, "uuid": "8b0f9376-1505-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.226.198.194:20166/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772324898, "uuid": "8bc7201b-1505-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.50.166.61:9301/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772324901, "uuid": "8d621514-1505-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.28.175.23/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772324901, "uuid": "8d7b2967-1505-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.247.2:2000/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772324948, "uuid": "a91171ea-1505-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.42.56.151:4444/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772325974, "uuid": "0ce2ec40-1508-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.234.71:46622/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772326210, "uuid": "999d3ce3-1508-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/6099399783/uuxbkOy.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772326220, "uuid": "9fbefbd2-1508-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.24.11:43414/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772326221, "uuid": "9fd13d02-1508-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.214.94:47862/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772326269, "uuid": "bce2b713-1508-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.34.109.121:49210/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772326338, "uuid": "e598d52b-1508-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.34.109.121:49210/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772326459, "uuid": "2e33cd2e-1509-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.203.235:57186/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772326823, "uuid": "071388eb-150a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.90.198:43694/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772326996, "uuid": "6e437f95-150a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.238.187:58741/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772327054, "uuid": "90d4a8f9-150a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.18.186:36707/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772327301, "uuid": "238b6d34-150b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.122.195:37614/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772327467, "uuid": "86bf183d-150b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/6099399783/3usqSnM.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772327653, "uuid": "f5bbb162-150b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.24.11:43414/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772327778, "uuid": "40035d19-150c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.238.187:58741/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772327836, "uuid": "62c44c8e-150c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.203.235:57186/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772328023, "uuid": "d254985c-150c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.184.1.153:34963/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772328203, "uuid": "3d453b3d-150d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.90.198:43694/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772328313, "uuid": "7f1a3344-150d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.173.170:46948/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772328494, "uuid": "eae0edc6-150d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.18.186:36707/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772328566, "uuid": "15b21c49-150e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.29.31.149:36107/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772328727, "uuid": "75a546b2-150e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.96.59:56703/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772328934, "uuid": "f1345780-150e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.122.195:37614/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772329695, "uuid": "b6d91654-1510-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.173.170:46948/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772329763, "uuid": "deff1c8f-1510-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.202.17.160:59261/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772329810, "uuid": "fb641c72-1510-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.234.239.36:37440/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772329877, "uuid": "2337a846-1511-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.177.140:46256/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772329944, "uuid": "4b1db899-1511-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.86.0:43008/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772330168, "uuid": "d0725661-1511-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.226.201.118:30104/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772330722, "uuid": "1aaa31cb-1513-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.96.59:56703/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772330722, "uuid": "1ace374f-1513-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.86.0:43008/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772331202, "uuid": "38f0c677-1514-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.176.93:34814/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772331502, "uuid": "ebc01971-1514-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.19.51:58350/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772331505, "uuid": "ed78a714-1514-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.189.237.48:51022/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772331559, "uuid": "0d87cab5-1515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.177.140:46256/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772331559, "uuid": "0ddd6bb1-1515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.202.17.160:59261/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772331622, "uuid": "3333d338-1515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.24.105:42229/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772331624, "uuid": "344cd09f-1515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.118.60.186:36571/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772331679, "uuid": "55275cf0-1515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.23.178.174:58815/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772331862, "uuid": "c286ae07-1515-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.125.13:43597/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772331979, "uuid": "0821771d-1516-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.24.105:42229/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772332345, "uuid": "e225c3b7-1516-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.112.62:53303/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772332645, "uuid": "952eca36-1517-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.59.115.225:59235/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772333061, "uuid": "8d0a1042-1518-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.19.51:58350/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772333061, "uuid": "8d21c660-1518-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.135.224:58373/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772333241, "uuid": "f8570e98-1518-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.23.178.174:58815/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772333481, "uuid": "879d6f6f-1519-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.77.4.125:34265/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772333540, "uuid": "aa50075e-1519-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.176.93:34814/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772333541, "uuid": "aaddb458-1519-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.112.62:53303/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772333784, "uuid": "3bb34975-151a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.195.231:49348/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772333899, "uuid": "808fb3c0-151a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.13.235.142:39972/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772334080, "uuid": "ec86e4ee-151a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.49.238:34031/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772334133, "uuid": "0bf5488a-151b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.232.190:33592/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772334187, "uuid": "2c5418c4-151b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.135.224:58373/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772334562, "uuid": "0bc8ca46-151c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://174.163.48.188:52789/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772334864, "uuid": "bfdaad2c-151c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.59.115.225:59235/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772335038, "uuid": "279f2298-151d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.195.231:49348/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772335038, "uuid": "27a51b82-151d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.13.235.142:39972/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772335104, "uuid": "4ea93bb2-151d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.91.211:57034/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772335219, "uuid": "935b11d7-151d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.17.154.225:58849/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772335340, "uuid": "db2f6926-151d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.119.65:47526/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772335340, "uuid": "db3d26bc-151d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.185.38:47028/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772335518, "uuid": "45cf8ffd-151e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.165.247:58342/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772335872, "uuid": "186da0bd-151f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://174.163.48.188:52789/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772336119, "uuid": "ab984e5e-151f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.232.190:33592/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772336714, "uuid": "0e4811a3-1521-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.48.89:60639/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772336779, "uuid": "35405bbb-1521-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.91.211:57034/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772337438, "uuid": "bda798a8-1522-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.93.65:52693/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772337618, "uuid": "291c2af2-1523-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.165.247:58342/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772338218, "uuid": "8f175b8a-1524-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.48.89:60639/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772338881, "uuid": "19d5c26e-1526-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.157.207:45296/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772339003, "uuid": "627f5d08-1526-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.157.207:45296/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772339062, "uuid": "8607e943-1526-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.15.142:58438/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772339116, "uuid": "a5f593f1-1526-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.38.127:38023/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772339538, "uuid": "a17a589a-1527-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.115.167:34644/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772339891, "uuid": "73d382fb-1528-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.115.167:34644/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772340188, "uuid": "254537d3-1529-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.226.201.118:6153/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772340497, "uuid": "dd22b2d0-1529-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.48.162:50561/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772340502, "uuid": "dffef453-1529-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.224.70:45627/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772340557, "uuid": "013c1980-152a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.111.33:39121/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772341700, "uuid": "aa3340d4-152c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.48.162:50561/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772341823, "uuid": "f3b82cb2-152c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.81.59:48696/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772341928, "uuid": "3273005c-152d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.16.134:54439/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772342778, "uuid": "2cd9dfae-152f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.242.22.242:60834/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772342839, "uuid": "512461bf-152f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.23.65:57846/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772342896, "uuid": "7344ef2f-152f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.31.9:58026/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772343506, "uuid": "ded4b844-1530-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.7.226:55191/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772343619, "uuid": "2250a43f-1531-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.106.251:42321/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772343858, "uuid": "b0ad047e-1531-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.196.255:38221/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772343919, "uuid": "d514b9c4-1531-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.31.9:58026/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772343973, "uuid": "f4d5f690-1531-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.23.65:57846/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772344885, "uuid": "14b1c478-1534-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.51.159:56297/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772345351, "uuid": "2a3124f8-1535-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.122.37:52797/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772345418, "uuid": "522ad117-1535-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.51.159:56297/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772345418, "uuid": "524d23c6-1535-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.7.226:55191/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772345538, "uuid": "9a331855-1535-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.194.187.234:33324/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772345661, "uuid": "e32da066-1535-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.5.62:53181/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772345715, "uuid": "034ae197-1536-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.11.139:54940/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772345950, "uuid": "8f49ed71-1536-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.100.99:58887/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772346140, "uuid": "00c13083-1537-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.1.80:47038/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772346262, "uuid": "495bea49-1537-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.52.29.44:48614/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772346491, "uuid": "d1f0fcea-1537-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.194.187.234:33324/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772346491, "uuid": "d2260dd7-1537-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.235.248.191:59497/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772346558, "uuid": "fa151f9b-1537-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.181.137:57004/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772346672, "uuid": "3dddd62c-1538-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.230.3:48212/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772346728, "uuid": "5f20bf57-1538-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://xmes67am.safaricola.digital/?=check&&actmn=nLjqEQRFnMVHlqtn", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772346739, "uuid": "65d725f4-1538-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.122.37:52797/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772346857, "uuid": "ac45a59b-1538-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.11.139:54940/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772347148, "uuid": "5948c255-1539-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.5.62:53181/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772347510, "uuid": "31663c24-153a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.86.83:57519/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772347579, "uuid": "5ab31c35-153a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.230.3:48212/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772347635, "uuid": "7bb6e054-153a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.106.54:36001/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772348236, "uuid": "e1f8833b-153b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.181.137:57004/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772348361, "uuid": "2c92fbb7-153c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.123.54:36700/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772348828, "uuid": "42fa3972-153d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.255.247:44230/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772349022, "uuid": "b69ddec2-153d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.106.54:36001/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772349193, "uuid": "1c3d86a4-153e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.86.83:57519/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772349381, "uuid": "8ccd04d6-153e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.163.143:39911/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772349728, "uuid": "5b3f02cc-153f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.61.110:59429/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350582, "uuid": "58190e21-1541-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.163.143:39911/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350870, "uuid": "04483dba-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.129//arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350871, "uuid": "04a80425-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.68.109.50/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350871, "uuid": "04a97e07-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.68.109.50/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350871, "uuid": "04a981a3-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.68.109.50/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350882, "uuid": "0b29a2b6-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.129//arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350882, "uuid": "0b29a875-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.129//arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350882, "uuid": "0b29acf9-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.129//arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350882, "uuid": "0b29b8a9-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.129//sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350883, "uuid": "0c09ed80-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.68.109.50/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350883, "uuid": "0c0aa57b-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.68.109.50/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350883, "uuid": "0c0c2e84-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.68.109.50/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350883, "uuid": "0c0fe6d1-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.68.109.50/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350883, "uuid": "0c1072ff-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.68.109.50/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350883, "uuid": "0c112f5a-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.68.109.50/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350883, "uuid": "0c113686-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.68.109.50/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350883, "uuid": "0c113cf0-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.68.109.50/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350883, "uuid": "0c1580e9-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.68.109.50/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350884, "uuid": "0c1795c2-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.68.109.50/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350884, "uuid": "0c186dca-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.68.109.50/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350884, "uuid": "0c1d4541-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.68.109.50/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350884, "uuid": "0c4861d4-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.129//arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350884, "uuid": "0c486a44-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.129//i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350884, "uuid": "0c4a0a4b-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.129//ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350884, "uuid": "0c58be51-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.129//mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350884, "uuid": "0c5966ed-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.129//x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350884, "uuid": "0c5a6dd2-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.129//m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350884, "uuid": "0c6a9bd8-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.129//mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350885, "uuid": "0cde8f13-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.129//mips64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350885, "uuid": "0cdeaf59-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.129//x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350885, "uuid": "0cec4b64-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.54.160.11/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.i468", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350927, "uuid": "25f581d0-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.50.30.153:48414/Mozi.a", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350927, "uuid": "2622c941-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://file-eu-par-6.gofile.io/download/direct/bf66389b-eeb0-4fd6-8353-be8214ffa81f/EM%20Receipt.pdf(25).msi", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350929, "uuid": "273964bd-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.255.131.179/bins/arm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350929, "uuid": "27500276-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://211.158.77.244:42971/Mozi.a", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350929, "uuid": "275f8c13-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.255.131.179/update.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350929, "uuid": "27724c1c-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.255.131.179/bins/arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350929, "uuid": "2773a5d0-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.255.131.179/bins/arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350930, "uuid": "27b08179-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.76.50.233/cat.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350930, "uuid": "27b6734a-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://visuall.trueblog.sbs/Visual%20Studio.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350931, "uuid": "287ccdab-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.185.72/cnVu.sh", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350932, "uuid": "28bdf5b5-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://visuals.trueblog.sbs/Visual%20Studio.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350932, "uuid": "28c5d60d-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://svo-data.ru/download.php?file=%D0%A1%D0%B2%D0%BE%D0%B4%D0%BA%D0%B0-P01.apk", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "mamont", "colour": "#499b9b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350937, "uuid": "2beb43ea-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.176.116.4:55375/Mozi.m", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350938, "uuid": "2c984206-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ys8758.com/%ea%b3%b5%eb%8f%99%20%ec%9e%90%eb%a3%8c%ec%8b%a4/remote2.exe", "Tag": [ { "name": "bruteratel", "colour": "#898f3d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350940, "uuid": "2de6fd0c-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.129//sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350984, "uuid": "47c7b47f-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.255.131.179/bins/arm", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350985, "uuid": "48962188-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.212.153.138:8080/spread.php", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350985, "uuid": "48b53605-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.212.153.138:8080/payload.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350986, "uuid": "49152dc4-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.12.204.206:45093/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350986, "uuid": "496648cf-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.255.131.179/bins/ppc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350986, "uuid": "496d4b5c-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.255.131.179/bins/x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350986, "uuid": "49758a2e-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.255.131.179/bins/spc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350987, "uuid": "497fb00b-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.255.131.179/bins/mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350987, "uuid": "49821ecc-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.255.131.179/bins/sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350987, "uuid": "49aff73e-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.255.131.179/bins/m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350987, "uuid": "49c452b8-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.255.131.179/bins/mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350989, "uuid": "4af9a53c-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://get-ma-iker.com/WORDPRESS%202026.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350989, "uuid": "4b13b958-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.94.9.106:8080/", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350989, "uuid": "4b3357b1-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.212.153.138:8080/x", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350990, "uuid": "4b47aa87-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://hunian138.games/aplikasi/Hunian138.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772350992, "uuid": "4c93f921-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://storybetjaya.org/aplikasi/storybet138v3.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772351000, "uuid": "517f4a1b-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.212.153.138:8080/sliver-client_linux-amd64", "Tag": [ { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772351120, "uuid": "991e54b7-1542-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.66.198:50411/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772351650, "uuid": "d5065049-1543-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://1lf2pz2k.bravepepsi.digital/?=check&&actmn=PzbHFHutHqXXlckM", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772352446, "uuid": "af26f693-1545-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.194.118:43659/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772352459, "uuid": "b6e79209-1545-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.32.247:60025/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772352680, "uuid": "3b28c67d-1546-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.221.11:48977/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772353037, "uuid": "0fa24ef9-1547-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.66.198:50411/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772353039, "uuid": "10e8f19f-1547-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.234.152.150:54900/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772353283, "uuid": "a24be13d-1547-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.127.227.173:42873/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772353690, "uuid": "95206488-1548-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.123.54:36700/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772354173, "uuid": "b4c33e6c-1549-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.221.11:48977/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772354720, "uuid": "fa87dc31-154a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.32.247:60025/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772354720, "uuid": "fae4443d-154a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.37.137:15628/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772354841, "uuid": "432ce8a1-154b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.234.152.150:54900/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772355319, "uuid": "5fb71bfe-154c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.127.227.173:42873/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772355505, "uuid": "ce6baa95-154c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.231.117:53783/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772355743, "uuid": "5cca0245-154d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.94.70:50514/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772356098, "uuid": "2fe70850-154e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.31.90:47848/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772356283, "uuid": "9e317d1e-154e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.94.70:50514/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772356641, "uuid": "7414b470-154f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.83.175:47070/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772356814, "uuid": "db2e6087-154f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.231.117:53783/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772356868, "uuid": "fb2c3e76-154f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.81.71:59672/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772356932, "uuid": "21190bc1-1550-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.83.175:47070/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772357059, "uuid": "6d03f4ee-1550-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.73.22:40103/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772357659, "uuid": "d2b9a599-1551-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.253.33:58016/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772357833, "uuid": "3a2d8939-1552-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.31.90:47848/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772358369, "uuid": "79ee614b-1553-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.71.240:60286/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772358489, "uuid": "c1688e69-1553-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://y6ryee05.edgemirinda.digital/?=check&&actmn=unpyPtpGSzSWCYHJ", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772358615, "uuid": "0c869d16-1554-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.182.82.13/1.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772358789, "uuid": "74686eeb-1554-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.5.55:48881/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772358790, "uuid": "74eb71c8-1554-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.1.211:60049/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772359274, "uuid": "9563a757-1555-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.212.106:60740/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772359397, "uuid": "de66c2b3-1555-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.253.33:58016/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772359573, "uuid": "4752a2d7-1556-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.1.211:60049/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772359999, "uuid": "4584cc2f-1557-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.180.239:59287/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772360174, "uuid": "addbaa4c-1557-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.179.134:34315/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772360348, "uuid": "157dcd5a-1558-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.226.201.118:42399/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772361127, "uuid": "e57031f6-1559-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.226.201.118:28835/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772361496, "uuid": "c1da3384-155a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.194.43:59299/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772361556, "uuid": "e5489f9f-155a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.126.6:41578/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772361851, "uuid": "95086acf-155b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.226.242:60782/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772362041, "uuid": "0688ad08-155c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.180.239:59287/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772362518, "uuid": "22e6c1ff-155d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.194.43:59299/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772363178, "uuid": "ac51732b-155e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.230.1:53354/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772363238, "uuid": "cfdd2abd-155e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.230.1:53354/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772363296, "uuid": "f2754495-155e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.53.195:50982/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772363297, "uuid": "f2de4dd3-155e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.189.219.26:43068/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772363356, "uuid": "1647a59d-155f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.200.215:42913/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772363356, "uuid": "164a059a-155f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.232.231:34336/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772363470, "uuid": "5a0a521a-155f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.15.142:58438/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772363471, "uuid": "5a936e93-155f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.157.58:57286/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772364146, "uuid": "ed39ed26-1560-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.92.219:47192/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772364263, "uuid": "32da5343-1561-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.226.130:35311/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772364912, "uuid": "b58b242f-1562-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.237.192:49904/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772364967, "uuid": "d69da1f0-1562-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.157.58:57286/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772365329, "uuid": "ae404af0-1563-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.226.201.118:34592/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772366291, "uuid": "ebba499f-1565-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.27.20:42470/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772367618, "uuid": "02c33385-1569-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.114.152.126:42642/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772367740, "uuid": "4b92ef8e-1569-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.93.252:38077/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772368041, "uuid": "fef4d21c-1569-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.27.20:42470/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772368170, "uuid": "4bac4038-156a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.208.147.102:54632/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772368701, "uuid": "88451464-156b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.114.152.126:42642/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772368701, "uuid": "885a2d18-156b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.155.145:45634/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772368936, "uuid": "144d9ea7-156c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.201.13:59712/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772368995, "uuid": "371842c7-156c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.92.121:41527/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772369476, "uuid": "55db868b-156d-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.208.147.102:54632/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772369526, "uuid": "741a1b80-156d-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://r3ulx0ht.vivaldicoke.digital/?=check&&actmn=aJvdwQbuIczacozp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772369766, "uuid": "02b472fc-156e-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7471363698/g2zctI3.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772369949, "uuid": "70152bb5-156e-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.152.242:52632/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772370198, "uuid": "04b1b37b-156f-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.155.145:45634/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772370438, "uuid": "93af9545-156f-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.92.121:41527/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772370978, "uuid": "d510bceb-1570-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.37.232:54714/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772371100, "uuid": "1de6178b-1571-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.134.100:59364/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772371339, "uuid": "ac682cd8-1571-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.136.56.211:53529/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772371456, "uuid": "f2769dbd-1571-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.106.185:49208/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772371837, "uuid": "d593f64d-1572-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.134.100:59364/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772372179, "uuid": "a1140b94-1573-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.73.22:40103/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772372370, "uuid": "13171ff2-1574-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.37.232:54714/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772372657, "uuid": "bdfc8839-1574-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7782139129/0qrULDD.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772372730, "uuid": "e958ee1b-1574-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.110.169:47430/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772372782, "uuid": "08b75766-1575-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.226.165:47083/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772373259, "uuid": "24ddfac8-1576-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.199.36:36934/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772373259, "uuid": "24e8b16e-1576-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.95.229:39761/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772373260, "uuid": "2551fa4b-1576-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.68.168.193:59168/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772373327, "uuid": "4d78d13a-1576-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.83.196:37228/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772373910, "uuid": "a8e2775e-1577-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/5924614076/ehstua1.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772374050, "uuid": "fc2796e5-1577-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.220.210:59788/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772374284, "uuid": "88230bad-1578-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.110.169:47430/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772374524, "uuid": "17258bfc-1579-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.195.131:33571/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772374705, "uuid": "82efbde2-1579-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.226.165:47083/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772374828, "uuid": "cc1ac9d7-1579-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.83.196:37228/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375235, "uuid": "be7a7116-157a-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.68.168.193:59168/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375287, "uuid": "ddb49c28-157a-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://pb.meson.cc/s/jywaxp43.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375290, "uuid": "df50307c-157a-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://loader-400.pages.dev/64/64thServices%20v24.zip", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375290, "uuid": "df566c77-157a-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.122.5:35639/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375290, "uuid": "df584212-157a-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://workflow-rest-wars-cargo.trycloudflare.com/file/Fac_2026_5984951219.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375290, "uuid": "df6b9e0a-157a-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.122.5:35639/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375290, "uuid": "dfad2fb9-157a-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://deusxeno.ws/Bootstap%D1%80%D0%B5rUl.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: ryos", "colour": "#51c7ee", "exportable": true, "hide_tag": false }, { "name": "pw-ryos", "colour": "#201b00", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375290, "uuid": "dfb866a7-157a-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://visualls.trueblog.sbs/Visual%20Studio.zip", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375292, "uuid": "e0afa2b0-157a-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.101.71:37596/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375293, "uuid": "e11e4bb6-157a-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://wpgbf1zg-5500.euw.devtunnels.ms/64/loader.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375294, "uuid": "e196f016-157a-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://storebet77.games/aplikasi/Storebet77.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375296, "uuid": "e35b8b17-157a-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://wpgbf1zg-5500.euw.devtunnels.ms/64/64th%20Services.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375297, "uuid": "e3b8f705-157a-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://storebet77resmi.com/aplikasi/Storebet77.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375297, "uuid": "e3f303a6-157a-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/elitehint/Fluxus-Roblox-Executor/raw/refs/heads/main/Fluxus%20V7.exe", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375298, "uuid": "e4227913-157a-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://storebet77resmi.net/aplikasi/Storebet77.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375298, "uuid": "e435db37-157a-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://file-na-phx-1.gofile.io/download/direct/bf66389b-eeb0-4fd6-8353-be8214ffa81f/EM%20Receipt.pdf(25).msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375303, "uuid": "e73fef2a-157a-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.64.16.241/pg.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375304, "uuid": "e7b555d5-157a-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.153.140.16/pg.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375314, "uuid": "edc5708d-157a-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://allcheat.netlify.app/nExecuter.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ScarfaceStealer", "colour": "#660BB4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375346, "uuid": "00cb218c-157b-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://workflow-rest-wars-cargo.trycloudflare.com/ab/sb.py", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375346, "uuid": "00cb2523-157b-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://workflow-rest-wars-cargo.trycloudflare.com/qfopbwu.bat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375346, "uuid": "00dbee52-157b-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://workflow-rest-wars-cargo.trycloudflare.com/onycbsj.bat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375346, "uuid": "00e62762-157b-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://workflow-rest-wars-cargo.trycloudflare.com/qjbosvb.wsh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375346, "uuid": "01286c89-157b-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://workflow-rest-wars-cargo.trycloudflare.com/ofsymyb.js", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375347, "uuid": "01b532b9-157b-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://workflow-rest-wars-cargo.trycloudflare.com/ab/new.bin", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375349, "uuid": "027ba02d-157b-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://dtp-gorod.lol/VIDEO_28022026.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375354, "uuid": "058ea1f9-157b-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://dramalive-app.org/wp-content/uploads/2026/02/Drama-Live-v20.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375470, "uuid": "4a882fcf-157b-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://hostingcdn.click/n3.gz", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375474, "uuid": "4d29ea56-157b-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://hostingcdn.click/of.zip", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375599, "uuid": "97d51593-157b-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.220.210:59788/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375660, "uuid": "bbdf9957-157b-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.85.84:57637/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375887, "uuid": "4355b7ad-157c-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://vnm2ey0a.coldglass.digital/?=check&&actmn=sZmhLqdSmyIyQhOE", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772375961, "uuid": "6f28460b-157c-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.195.131:33571/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376070, "uuid": "b08446c1-157c-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.185.72/Ymlucw/narm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376070, "uuid": "b0848750-157c-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.185.72/Ymlucw/narm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376070, "uuid": "b08bc2fb-157c-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.185.72/Ymlucw/nx686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376070, "uuid": "b08d822f-157c-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.185.72/Ymlucw/nsh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376070, "uuid": "b0916b47-157c-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.185.72/Ymlucw/narm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376071, "uuid": "b0bc5a75-157c-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.185.72/Ymlucw/nmpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376073, "uuid": "b1ee566b-157c-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.185.72/Ymlucw/nx86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376081, "uuid": "b71ed809-157c-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.185.72/Ymlucw/nppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376081, "uuid": "b730c0f6-157c-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.185.72/Ymlucw/nppc440", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376081, "uuid": "b73480cc-157c-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.185.72/Ymlucw/nx486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376081, "uuid": "b73bfa42-157c-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.185.72/Ymlucw/nx86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376081, "uuid": "b743c531-157c-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.185.72/Ymlucw/nm68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376082, "uuid": "b745e486-157c-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.185.72/Ymlucw/nmips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376082, "uuid": "b753f149-157c-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.185.72/Ymlucw/narm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376331, "uuid": "4bfa103f-157d-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.38.48:60004/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376615, "uuid": "f542366e-157d-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.121.60:33933/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772376868, "uuid": "8be10a2e-157e-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.181.107:50292/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772377105, "uuid": "19574bcc-157f-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.239.82:55171/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772377580, "uuid": "342f1a14-1580-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.38.48:60004/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772377822, "uuid": "c48b59b1-1580-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.253.136:32803/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772377878, "uuid": "e5ebab87-1580-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.67.232:33095/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772378299, "uuid": "e0dd32f1-1581-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.121.60:33933/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772378423, "uuid": "2aacd38a-1582-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://file.551911.xyz/fullgc/fullgc-linux-x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772378423, "uuid": "2abdd9d8-1582-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://file.551911.xyz/fullgc/fullgc-linux-aarch64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772378423, "uuid": "2abddba9-1582-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://file.551911.xyz/fullgc/fullgc-macos-x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772378423, "uuid": "2ae782ae-1582-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://file.551911.xyz/fullgc/fullgc-macos-arm64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772378468, "uuid": "457b948f-1582-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7290860719/OTcX1Qs.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772378539, "uuid": "703cf2e0-1582-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.181.107:50292/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772378597, "uuid": "92559c3a-1582-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.228.42:49633/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772379071, "uuid": "ad0bba1c-1583-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.122.34:39038/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772379137, "uuid": "d49e0a82-1583-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.113.66:36768/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772379548, "uuid": "c990ca7a-1584-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.207.47:42880/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772379916, "uuid": "a4faff23-1585-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.27.222:44154/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772380637, "uuid": "52881764-1587-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.228.42:49633/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772380757, "uuid": "99dc21f0-1587-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.122.34:39038/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772381534, "uuid": "69351383-1589-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.207.47:42880/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772381587, "uuid": "88a6b557-1589-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7782139129/UQs5KQA.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772381599, "uuid": "9011703a-1589-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.52.142.194:43236/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772381657, "uuid": "b2a18d58-1589-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.250.39:57393/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772382077, "uuid": "ac92f0da-158a-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.77.120:60281/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772382621, "uuid": "f15977af-158b-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.226.242:60782/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772382622, "uuid": "f1c8167b-158b-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.88.164.210:38757/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772382624, "uuid": "f2dfd1ae-158b-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.189.176:35780/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772382797, "uuid": "59cb621f-158c-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.77.120:60281/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772382857, "uuid": "7dd51a67-158c-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.52.142.194:43236/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772382970, "uuid": "c16d2393-158c-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.226.161.90:57739/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772383927, "uuid": "fb853d17-158e-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7471363698/ldyZQxj.exe", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772385072, "uuid": "a5dc9554-1591-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.251.5:51616/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772385265, "uuid": "18c603f3-1592-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.251.5:51616/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772385437, "uuid": "7f4ced03-1592-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.189.176:35780/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772386157, "uuid": "2c75b1f7-1594-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.251.49:33186/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772386458, "uuid": "dfe9d54d-1594-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.135.86:39010/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772386570, "uuid": "22db5fc3-1595-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.235.163:37621/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772386570, "uuid": "22df817b-1595-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.1.224.204:41542/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772386696, "uuid": "6dcf6e90-1595-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7782139129/OEDX0Pg.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772387176, "uuid": "8c1026da-1596-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.235.163:37621/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772387237, "uuid": "b03d0214-1596-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.251.49:33186/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772388017, "uuid": "814e4514-1598-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.255.247:44230/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772388248, "uuid": "0b1dc814-1599-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.1.224.204:41542/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772388670, "uuid": "069be31a-159a-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.142.31:39647/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772389038, "uuid": "e2261b85-159a-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.7.63:45508/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772389398, "uuid": "b87fb285-159b-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.235.164:43509/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772389509, "uuid": "fadbc99a-159b-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.39.220:53063/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772389752, "uuid": "8b434e77-159c-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.173.9:59411/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772389870, "uuid": "d1eb8aaa-159c-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://id8965.com/Launcher.exe", "Tag": [ { "name": "a3dacb", "colour": "#a7477c", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772389940, "uuid": "fb682d36-159c-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.217.128:39193/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772389996, "uuid": "1d0f83e8-159d-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.92.50:53395/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772390355, "uuid": "f31f5422-159d-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.217.128:39193/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772390897, "uuid": "35c6b000-159f-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.39.220:53063/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772390897, "uuid": "3643b826-159f-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.193.38:34627/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772391012, "uuid": "7a5ab57d-159f-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.246.16:36419/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772391071, "uuid": "9ddba8a3-159f-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.157.155:51507/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772391071, "uuid": "9ddefd22-159f-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.132.48:44377/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772391192, "uuid": "e619b1ae-159f-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.43.9:54487/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772391256, "uuid": "0c2f22cd-15a0-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.157.155:51507/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772391313, "uuid": "2dadc0a1-15a0-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.74.165:57363/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772391493, "uuid": "99402b8c-15a0-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.173.9:59411/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772391609, "uuid": "deaafc57-15a0-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7044575709/yQcmXNb.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772391671, "uuid": "0377268c-15a1-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.92.50:53395/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772391859, "uuid": "736bf9b4-15a1-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.132.48:44377/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772391977, "uuid": "b9f3a699-15a1-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.246.16:36419/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772392455, "uuid": "d6d3388e-15a2-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.203.86:51875/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772392639, "uuid": "4436676d-15a3-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.7.63:45508/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772392932, "uuid": "f333a5ee-15a3-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.43.9:54487/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772392934, "uuid": "f41c47a2-15a3-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.232.137.101:38263/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772393053, "uuid": "3b5048b8-15a4-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.209.110:47108/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772393298, "uuid": "cd29d3fc-15a4-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.232.137.101:38263/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772393900, "uuid": "33aafe6f-15a6-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.203.86:51875/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772393966, "uuid": "5b474201-15a6-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.245.10:60521/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772394081, "uuid": "9f867856-15a6-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.171:33042/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772394324, "uuid": "30dfffa8-15a7-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.146.35:34683/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772394379, "uuid": "51286b22-15a7-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.209.110:47108/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772394690, "uuid": "0ad343a4-15a8-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.65.76:55365/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772394739, "uuid": "27e3377f-15a8-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.25.38:47544/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772394860, "uuid": "705423fc-15a8-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.146.35:34683/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772395631, "uuid": "3b9df6e5-15aa-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.245.10:60521/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772395882, "uuid": "d10330f8-15aa-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.35.89:60998/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772395887, "uuid": "d4711b1f-15aa-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.25.38:47544/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772395997, "uuid": "15dbd323-15ab-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.235.140:48386/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772396233, "uuid": "a2430d8f-15ab-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.65.76:55365/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772396233, "uuid": "a24b9be1-15ab-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.174.155:52033/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772396233, "uuid": "a2814b5f-15ab-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.51.230:44463/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772396242, "uuid": "a7d24869-15ab-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.55.92:40387/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772396649, "uuid": "9a646bb0-15ac-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.253.146.163/csk_arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772396649, "uuid": "9a7bb3f8-15ac-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.253.146.163/csk_ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772396649, "uuid": "9a7cfc9b-15ac-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.253.146.163/csk_mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772396666, "uuid": "a46dd32b-15ac-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.253.146.163/csk_x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772396666, "uuid": "a46dd355-15ac-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.253.146.163/csk_arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772396666, "uuid": "a4708540-15ac-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.253.146.163/csk_x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772396666, "uuid": "a47580af-15ac-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.253.146.163/csk_mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772396666, "uuid": "a476c9f8-15ac-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.253.146.163/csk_arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772396666, "uuid": "a491e728-15ac-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.253.146.163/csk_m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772396669, "uuid": "a6a09d2e-15ac-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.253.146.163/csk_arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772396778, "uuid": "e7993890-15ac-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.39.234:46951/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772396960, "uuid": "53efbe02-15ad-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.111.58:42975/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772397029, "uuid": "7cb7bc87-15ad-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.111.58:42975/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772397320, "uuid": "2ab15704-15ae-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.227.150:33033/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772397487, "uuid": "8e23d54f-15ae-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.185.72/o.xml", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "xml", "colour": "#75ec5b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772397498, "uuid": "94a4d699-15ae-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.235.140:48386/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772398097, "uuid": "f9c5d440-15af-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.39.234:46951/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772398339, "uuid": "899d6c9c-15b0-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.125.254:43171/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772398468, "uuid": "d679c264-15b0-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.16.64:46443/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772398470, "uuid": "d794ac32-15b0-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.253.62:55549/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772399003, "uuid": "1563435e-15b2-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.162.64:48300/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772399122, "uuid": "5c9a4dff-15b2-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.227.150:33033/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772399491, "uuid": "3883ccb8-15b3-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.38.67:50350/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772399604, "uuid": "7b9a341f-15b3-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.210.44:56305/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772399778, "uuid": "e3914818-15b3-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.125.254:43171/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772399956, "uuid": "4d78e928-15b4-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.16.64:46443/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772400318, "uuid": "2569fa39-15b5-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.156.145:56827/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772400491, "uuid": "8c765c63-15b5-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.108.187:58644/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772400491, "uuid": "8c833a3d-15b5-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.162.64:48300/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772400610, "uuid": "d38381f0-15b5-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.33.74:52903/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772401460, "uuid": "cdbbafb5-15b7-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.30.130:52093/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772401878, "uuid": "c7374c33-15b8-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.156.145:56827/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772402179, "uuid": "7abd735b-15b9-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.13.239.70/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772402227, "uuid": "9773ba48-15b9-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.38.67:50350/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772402294, "uuid": "bf5bb4e6-15b9-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.216.184.141:44155/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772402654, "uuid": "956e29eb-15ba-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.118.237:55385/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772402711, "uuid": "b7f62804-15ba-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.245.58:48326/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772402837, "uuid": "02b7c238-15bb-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.210.44:56305/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772403313, "uuid": "1e7b15b4-15bc-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.220.199.176:48567/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772403612, "uuid": "d0ccaca2-15bc-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.30.130:52093/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772403613, "uuid": "d14f3e66-15bc-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.57.193:50397/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772404029, "uuid": "c963c09e-15bd-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.45.252:39759/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772404508, "uuid": "e6a35cbb-15be-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/5297474040/QGSDuRO.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772404565, "uuid": "08ff2362-15bf-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/5297474040/QGSDuRO.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772404752, "uuid": "786f85a3-15bf-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.57.193:50397/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772405115, "uuid": "50a85d62-15c0-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.220.199.176:48567/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772405485, "uuid": "2d698c54-15c1-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.92.235:51402/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772405659, "uuid": "94adc271-15c1-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.21.163:36900/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772405898, "uuid": "2323d5bb-15c2-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.200.160:42854/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772406618, "uuid": "d035be60-15c3-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.92.235:51402/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772406675, "uuid": "f236d673-15c3-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.195.141:51413/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772407401, "uuid": "a34483de-15c5-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.48.94:42135/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772407455, "uuid": "c3210eb7-15c5-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.195.141:51413/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772407455, "uuid": "c371ad2c-15c5-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.200.160:42854/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772407688, "uuid": "4e1d9b7f-15c6-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.143.222:36991/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772407811, "uuid": "97a168e5-15c6-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.171.31:59818/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772408047, "uuid": "23e72e25-15c7-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.218.66.241/bins/loader.sh", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772408048, "uuid": "24d81d6c-15c7-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.218.66.241/bins/nullpointer.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772408420, "uuid": "023c0763-15c8-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.58.138:36708/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772408708, "uuid": "adfcde8b-15c8-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8733674968/O3do2el.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772408898, "uuid": "1fa66d44-15c9-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.118.237:55385/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772409257, "uuid": "f57b749a-15c9-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.181.163:40581/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772409441, "uuid": "632d781c-15ca-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.213.235.26:50439/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772409424, "uuid": "58b172f9-15ca-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.213.235.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772396646, "uuid": "98634c40-15ac-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.253.146.163", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350866, "uuid": "017e3633-1542-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.68.109.50", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772371325, "uuid": "a425a0d0-1571-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.136.56.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772346125, "uuid": "f7989fb0-1536-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.1.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772342765, "uuid": "25085461-152f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.23.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772331605, "uuid": "295a76ac-1515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.24.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772347625, "uuid": "75d277e5-153a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.106.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772324765, "uuid": "3c57b2c8-1505-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.38.214.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772353266, "uuid": "98541919-1547-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "111.127.227.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772386143, "uuid": "2466a728-1594-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.231.251.49", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772343845, "uuid": "a8b48fbb-1531-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.239.196.255", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772324886, "uuid": "841606c2-1505-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.226.198.194", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772398984, "uuid": "0a524028-15b2-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.162.64", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772405645, "uuid": "8c763b06-15c1-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.21.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772392445, "uuid": "d0b1a06f-15a2-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.203.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772366285, "uuid": "e8643b0a-1565-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.27.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772340484, "uuid": "d5741317-1529-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.224.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772367730, "uuid": "4582f42f-1569-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.51.93.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772361544, "uuid": "de79b080-155a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.54.126.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772409244, "uuid": "ed872958-15c9-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.54.181.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772379545, "uuid": "c7d68906-1584-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.207.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772378585, "uuid": "8b6ab9dc-1582-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.228.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772389025, "uuid": "da6c8fa8-159a-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.7.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772400306, "uuid": "1e031da5-15b5-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.156.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772389505, "uuid": "f86f9c78-159b-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.59.39.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772369944, "uuid": "6ce5a0a9-156e-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.152.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772407805, "uuid": "941836a6-15c6-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.171.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772396225, "uuid": "9db7c032-15ab-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.51.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772398324, "uuid": "80f43f19-15b0-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.125.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772398444, "uuid": "c8496323-15b0-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.16.64", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772396225, "uuid": "9db7cbc7-15ab-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.174.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772343484, "uuid": "d1def5c2-1530-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.7.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772373307, "uuid": "416d256a-1576-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.83.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772344864, "uuid": "08646e78-1534-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.51.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772349364, "uuid": "8266042b-153e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.243.163.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772367608, "uuid": "fcbbbc9f-1568-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.114.152.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772389745, "uuid": "87867bfd-159c-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.116.173.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772377807, "uuid": "bba94e92-1580-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.179.253.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772328006, "uuid": "c81c8f0e-150c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.184.1.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772363286, "uuid": "ec534b72-155e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.189.219.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772331486, "uuid": "e2728b18-1514-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.189.237.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772324886, "uuid": "8415f996-1505-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.247.2", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772385065, "uuid": "a190d9b1-1591-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.251.5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772394665, "uuid": "fc1e9e37-15a7-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.65.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772353025, "uuid": "08446e83-1547-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.234.152.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772368686, "uuid": "7eea61f2-156b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.155.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772357047, "uuid": "65de1a93-1550-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.73.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772402705, "uuid": "b45b0518-15ba-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.245.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772324886, "uuid": "84162de7-1505-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.28.175.23", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376307, "uuid": "3da94e2b-157d-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.38.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772371084, "uuid": "1499e53a-1571-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.131.134.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772346486, "uuid": "cee3002d-1537-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.235.248.191", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772341807, "uuid": "ea487865-152c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.94.81.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772403606, "uuid": "cd6586ca-15bc-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.57.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772358785, "uuid": "71921bea-1554-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.1.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772345645, "uuid": "d9e214ff-1535-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.5.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772379907, "uuid": "9f6c66dc-1585-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.42.27.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772400606, "uuid": "d0d51d7d-15b5-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.42.33.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772343606, "uuid": "1a317031-1531-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.106.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772372766, "uuid": "fed04979-1574-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.226.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772398444, "uuid": "c8493e62-15b0-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.253.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772408406, "uuid": "fa1418da-15c7-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.58.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772345707, "uuid": "fe77f230-1535-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.45.11.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772324886, "uuid": "8415cda3-1505-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "134.236.150.188", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350926, "uuid": "254c55f7-1542-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "143.20.185.72", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "xml", "colour": "#75ec5b", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350983, "uuid": "47872786-1542-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "162.212.153.138", "Tag": [ { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350983, "uuid": "478a400c-1542-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "172.94.9.106", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772346544, "uuid": "f1527cad-1537-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.141.181.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772324886, "uuid": "841595ab-1505-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.50.166.61", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772389925, "uuid": "f26ee859-159c-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.92.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772335325, "uuid": "d28a4e54-151d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.119.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772394307, "uuid": "264746e2-15a7-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.146.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772333766, "uuid": "30ff878b-151a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.195.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772357645, "uuid": "ca6dfa48-1551-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.253.33", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772377085, "uuid": "0d660c1e-157f-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.122.239.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772338866, "uuid": "11056c89-1526-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.157.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350926, "uuid": "254c72ce-1542-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.176.116.4", "Tag": [] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772351648, "uuid": "d3b6ffb3-1543-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "1lf2pz2k.bravepepsi.digital" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350926, "uuid": "254fb813-1542-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "217.76.50.233", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772354706, "uuid": "f27f8b60-154a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.154.37.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772390885, "uuid": "2e8cfd24-159f-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.193.38", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772333886, "uuid": "78ba48f9-151a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.13.235.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772372707, "uuid": "dbf33cd5-1574-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.110.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772326807, "uuid": "fd9fbd5b-1509-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.90.198", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772364125, "uuid": "e0bd85c8-1560-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.92.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772329745, "uuid": "d4af0fcc-1510-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.202.17.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772328307, "uuid": "7b885a7b-150d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.134.173.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772363464, "uuid": "56e7e812-155f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.157.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772355726, "uuid": "5264c96b-154d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.94.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772329865, "uuid": "1c196483-1511-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.177.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772376846, "uuid": "7ed908e3-157e-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.181.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772364248, "uuid": "2a0e8559-1561-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.226.130", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772352426, "uuid": "a34b4f9d-1545-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.32.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772391065, "uuid": "9a4bcd02-159f-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.132.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772345345, "uuid": "26fad852-1535-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.122.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772339047, "uuid": "7d027d44-1526-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.15.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772359264, "uuid": "8f15b913-1555-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.212.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772326445, "uuid": "25885f44-1509-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.203.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772345526, "uuid": "92c477be-1535-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.194.187.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772402285, "uuid": "b986c33c-15b9-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.216.184.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772403306, "uuid": "1a3330ea-15bc-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.220.199.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772375286, "uuid": "dd335d3c-157a-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.101.71", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772332326, "uuid": "d6cb7c2d-1516-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.112.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772355484, "uuid": "c1fd0eb2-154c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.231.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350926, "uuid": "254c265d-1542-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.50.30.153", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772382606, "uuid": "e846745f-158b-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.88.164.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772381646, "uuid": "abfad935-1589-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.250.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772374026, "uuid": "ee0fd189-1577-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.220.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772335325, "uuid": "d28a2416-151d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.185.38", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772358365, "uuid": "77b25dd1-1553-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.71.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772399585, "uuid": "70719fe6-15b3-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.210.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772405465, "uuid": "21581fc0-15c1-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.92.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772325965, "uuid": "0744faec-1508-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.234.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772356625, "uuid": "6a67506b-154f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.237.83.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772335507, "uuid": "3ed8fee9-151e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.165.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772397306, "uuid": "2238bea3-15ae-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.227.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772346249, "uuid": "41943ed9-1537-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.52.29.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772382606, "uuid": "e845ba14-158b-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.56.189.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772327045, "uuid": "8b19148b-150a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.58.18.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772332625, "uuid": "8918ef42-1517-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.59.115.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772393047, "uuid": "3735971b-15a4-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.85.209.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772402165, "uuid": "721a6dab-15b9-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.13.239.70", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350926, "uuid": "254bb9fc-1542-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "51.255.131.179", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772368155, "uuid": "42cc857b-156a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.208.147.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772331665, "uuid": "4d374d4d-1515-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.23.178.174", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772341925, "uuid": "3084d4d3-152d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.47.16.134", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772407684, "uuid": "4be7761c-15c6-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.143.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772360165, "uuid": "a867eafe-1557-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.179.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772359984, "uuid": "3c8324c5-1557-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.180.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772405885, "uuid": "1b68559c-15c2-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.200.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772335206, "uuid": "8bbe4209-151d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.17.154.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772375646, "uuid": "b367dee8-157b-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.18.85.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772391065, "uuid": "9a4bca30-159f-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.157.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772348345, "uuid": "23015be9-153c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.123.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772324945, "uuid": "a74537cc-1505-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "66.42.56.151", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772375286, "uuid": "dd343bc3-157a-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "78.153.140.16", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772408045, "uuid": "2320143a-15c7-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.218.66.241", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772375346, "uuid": "009fc6b7-157b-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "dramalive-app.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772375346, "uuid": "00e4cb41-157b-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "dtp-gorod.lol" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350926, "uuid": "256211c9-1542-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "file-eu-par-6.gofile.io" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772375286, "uuid": "dd4c2a6c-157a-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "file-na-phx-1.gofile.io" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772378407, "uuid": "213c4efa-1582-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "file.551911.xyz" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350984, "uuid": "4803e533-1542-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "get-ma-iker.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772375468, "uuid": "49a55678-157b-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "hostingcdn.click" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350983, "uuid": "4799bac1-1542-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "hunian138.games" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772389865, "uuid": "ce94c70d-159c-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "id8965.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772375286, "uuid": "dd525e8c-157a-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "pb.meson.cc" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772369524, "uuid": "72c69d54-156d-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "r3ulx0ht.vivaldicoke.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772375286, "uuid": "dd62dfb3-157a-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "storebet77.games" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772375289, "uuid": "debb475f-157a-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "storebet77resmi.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772375286, "uuid": "dd5475df-157a-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "storebet77resmi.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350985, "uuid": "48df9642-1542-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "storybetjaya.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350926, "uuid": "25b307b4-1542-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "svo-data.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350926, "uuid": "256ce543-1542-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "visuall.trueblog.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772375286, "uuid": "dd57688f-157a-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "visualls.trueblog.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350928, "uuid": "26ca1698-1542-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "visuals.trueblog.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772375885, "uuid": "42238170-157c-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "vnm2ey0a.coldglass.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772375289, "uuid": "de9db41f-157a-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "workflow-rest-wars-cargo.trycloudflare.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772346726, "uuid": "5dd8610b-1538-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "xmes67am.safaricola.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772358484, "uuid": "bea2b9bc-1553-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "y6ryee05.edgemirinda.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772350929, "uuid": "271203b2-1542-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "ys8758.com" } ] } }