{ "Event": { "published": true, "date": "2026-02-15", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-02-15", "timestamp": 1771200921, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "cea27b3d-05aa-4434-949f-4a738e609783", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1771114876, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771114876, "uuid": "00300047-cce3-4bfb-9472-0b765db80979", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771114876, "uuid": "419baf37-3b41-4a9c-aadc-1d05e2df9c39", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771114876, "uuid": "8da43059-cdf9-48ed-8d86-8bf74db9de0e", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771114876, "uuid": "a90a999b-b98c-4e07-9b76-1b00293f98e7", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771114876, "uuid": "9abe44ed-cc78-42cc-afee-fdef21940de5", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1771115173, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771115173, "uuid": "7aac208f-af61-439e-a72a-d50d1a751827", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771115173, "uuid": "d3617f77-52c5-4a3d-9069-8c57041b4e8f", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771115173, "uuid": "44a3c044-9056-4b2d-83ad-3da6e59f66e7", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771115173, "uuid": "68c652f4-40af-44eb-bc19-f48b53219bd6", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771115173, "uuid": "cf9247e1-3493-4340-822e-8d4a130d692e", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a9e4cc83-0a05-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771115486, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771115486, "uuid": "535496fa-fe65-419e-9b83-9618569413bb", "comment": "Malware payload (Mirai)", "value": "698ea50088657a42320aa0efd2caec79", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771115486, "uuid": "d890cbbe-d12b-486b-80c7-b470a41a75b7", "comment": "Malware payload (Mirai)", "value": "2f8774d63d3760c6868ddf57206c69369bf470988f413a05c0198c7afe155bef", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771115486, "uuid": "f864115a-be8b-4939-a003-1f3778eb6e84", "value": "T1F3B309D9BC818B10D5D636BAFF1E518933138B78E3FA7113DE185B2A538A95B0B3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771115486, "uuid": "990db2c0-c395-4a24-838e-bd805b2a265f", "value": "3072:g6oUV565NnJEgER7fuuVDzjDCkoU1NkBvuyYuAgkL72PMjX:bsJqyuV/jRNkBvuy/AgknS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771115486, "uuid": "f76354aa-fd97-43c7-b129-3d06bc9adeeb", "value": 116256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771115486, "uuid": "e5855c49-9776-46a2-8ca3-5e9eb91f66b5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8b4d6848-0a06-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771115864, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771115864, "uuid": "d93bd165-d460-4f21-91fb-7923f8b5a6cf", "comment": "Malware payload", "value": "ca0ed58ab969af1f179e71114c7d9266", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771115864, "uuid": "897514c6-70a1-453b-a700-0b5b42d41d76", "comment": "Malware payload", "value": "532a420c938b8ee6c52e30bef42dc9fe21c1a3187b3789a3f537f15396f9c7ff", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771115864, "uuid": "251a09eb-633a-4576-b3fa-045167665498", "value": "T16BF31A62A7B4197A23BB43BCE455F78879688523D74D62E1F8FEC19C42C1BD224727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771115864, "uuid": "467fc6d0-502a-4a40-a550-3549610de4ca", "value": "3072:EdrK2iu5mGuE/kDkank7jvQ+/s4oxY+b3wyAtA+3CWPCWTn5bXZEtUioCkdGas0I:aru8GPGMWLasLYH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771115864, "uuid": "888d26f8-48ab-4b5c-84ef-2ac11667650c", "value": 159238, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771115864, "uuid": "bb99fa23-9c5c-4675-8bbe-f25d418f3dce", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29fe7fab-0a07-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771116131, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771116131, "uuid": "d291d005-8d9d-44bd-80b2-44e1ab18888f", "comment": "Malware payload (Mirai)", "value": "8cc52a7a3c121faa3a2ef79c39c02ddc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771116131, "uuid": "55138dba-669b-4701-b52c-6a132dad9cfc", "comment": "Malware payload (Mirai)", "value": "fa557bdb178dfa41e368db8ed91cc1443e6d97625e2fb68e59a4783db8eced9f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771116131, "uuid": "4f761c93-acee-4356-b8cf-ac4b4bba5d10", "value": "T116C32A05B30C0D47E1633EF43B3B27E193DFDA8121E4E640655FAA8A91B2D32558AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771116131, "uuid": "ce0132c6-d6d6-4c3e-b7fa-4b422dec89e5", "value": "1536:6vB72AZ4ex10JrZqQ7UrZb6wI0vAnjiLVRuzae8Dhq6N2te5f3dwJ:6tB4exMF7oZKJnCNYaOJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771116131, "uuid": "4ec0637d-6b65-43f7-931f-b850ab88a7f3", "value": 121508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771116131, "uuid": "597beb9f-0f67-40be-a5c1-cacac1b6f428", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99df0375-0a08-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771116748, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771116748, "uuid": "b347cb9a-fcb6-4a58-8ed6-d9c6da5f9ccc", "comment": "Malware payload (Mirai)", "value": "dd6b1a3c918c640a20e35d8bb00117c8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771116748, "uuid": "5259bd24-5948-49e8-95cc-d9b5f3569f8b", "comment": "Malware payload (Mirai)", "value": "c28bb0854c6adbcaef89386033cff8b26227b328673eaf0e346a4b1cd4c25865", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771116748, "uuid": "2649fc52-bbd3-4380-a2ef-e7ef70c7197d", "value": "T1CB23F1E3275FD0B7D07A68361F3D1140E86AF462A31C2F0BC984253D5C652E59EC2B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771116748, "uuid": "6f8538b5-e83f-4068-ad3a-97454c35806c", "value": "768:IptfxMz03QL34mE15tZaSpgZMr/bQ3+D3ziO9Eq+H8JPoA4p:8fezvbxE15t51jNKuEq88JAD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771116748, "uuid": "15013ff7-1166-4330-84bd-3df38f2ad0b8", "value": 47784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771116748, "uuid": "01ec9c8b-46da-4cdf-9733-6ba1d51fef19", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4adbb2d-0a08-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771116820, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771116820, "uuid": "52d540be-8a2a-45df-8e60-fdab19291736", "comment": "Malware payload (Mirai)", "value": "7175b21850b1b9ec6314b17c253e54e1", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771116820, "uuid": "d4da6b1a-36f8-4bbd-a344-2e17292d0294", "comment": "Malware payload (Mirai)", "value": "93625ab1a520f851f71b7704e5dec6113cbaf2e4be081cebc19c2914a6916ba9", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771116820, "uuid": "68fe34be-8ceb-46dc-8123-32fe8b627c06", "value": "T17AC30956F8819B11D5D151BAFF0E124E77131B3CE2DE7312AD24AB307B8A8BB0E3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771116820, "uuid": "967ee7aa-9e45-4a3d-afee-1042f91bca79", "value": "3072:fZD7YhjFMX+maR8TcDeRqQV3tNQYciYTG1R:fZD76aX9aKTcRQVnoiYq1R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771116820, "uuid": "b5299abe-500b-41cb-9730-d678f705db07", "value": 129244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771116820, "uuid": "af3de170-31b8-4d63-9302-9d843d1e20a7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "87288a6c-0a09-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771117146, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771117146, "uuid": "3d4c2015-9665-45eb-8bab-d7a41562ebbd", "comment": "Malware payload (Mirai)", "value": "99f244b4b103ed5ee512fd3058d8cd2b", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771117146, "uuid": "809a1e90-3188-4b4d-b67f-7be0c288e8c2", "comment": "Malware payload (Mirai)", "value": "4eeeb2ebc9d6cb31eb72b1cf428698bf77e182bba6e1fb0ae9f293998f1f78a0", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771117146, "uuid": "b1eedd2a-b21d-4218-bdee-f20e4e364646", "value": "T128930749FD406B10D8D635FAFF4F024973934B6CE3FA7201AA245B2523CAA6B0F765", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771117146, "uuid": "f570e10f-909a-4483-8040-829e9182b754", "value": "1536:wqnZV8D4zgUdtS0tFbvacgzafVAweBuqKlUI9HiWNRIbT2gZ1Yan:N8NUv5nTacgzafVAwe4BNRIbT2gX5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771117146, "uuid": "6e97dcf5-dd21-425b-bfc5-b3eb6377cc6c", "value": 93252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771117146, "uuid": "7f55f9bd-526e-4977-9cdc-636ee7265bc3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "afa9d94c-0a09-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771117214, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771117214, "uuid": "5bbd19d9-da10-4592-b1a1-b1d1314d8846", "comment": "Malware payload (Mirai)", "value": "3ce8a714552d621ba5bb10edcb838078", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771117214, "uuid": "362acbb8-0609-46fe-afe3-2d113a7cbf1a", "comment": "Malware payload (Mirai)", "value": "353b73e82a611a10d98329d968bc525061050415ef11039fc5dffe81a7ae8662", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771117214, "uuid": "ce76f77a-edfd-474c-aa48-440521105cec", "value": "T1D43115CE60F4A143C5DCCE1070F5CFC8631A959261DA2A3AEDC12E67C4C9DE47429B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771117214, "uuid": "f5a8cc4a-c453-4597-8250-0263c8472297", "value": "48:s62UG7nqsg1l7w5/XaYu8GnCQio78xfqiaPO47:ic12BI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771117214, "uuid": "0e489a67-f433-4fa4-8083-304daacf515e", "value": 1873, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771117214, "uuid": "c08c17ce-8c9e-400f-b8c0-20c039509711", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1b86d864-0a0a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771117395, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771117395, "uuid": "46abba90-bfc2-4986-88bd-dee0086f5b89", "comment": "Malware payload (Mirai)", "value": "7e16b8350c9d3caeeb1ff79ec8b18bb2", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771117395, "uuid": "e6c095fe-dbaf-41d7-960d-349ce9e9afd9", "comment": "Malware payload (Mirai)", "value": "3255625ffa643ae2580b27195e9e070baecc53addccaa2e125a4eaaeb440e167", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771117395, "uuid": "63adcdf6-f339-4268-86a9-9750e76bf749", "value": "T1D8B30945F8445B17C6C666B7FF8E438D7B2A1758E3EE720399256F30378B85A0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771117395, "uuid": "d0a7836c-d11d-4484-afbd-6f5f318c56ea", "value": "1536:Y7jnPq8azP4V8YOTIBRvyNOzIuSIwYeFWd/lk68wywlQ3Ym3Tb/V1oEakCxe:+zPqF41OUBljSIxecUtCI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771117395, "uuid": "5ec5ac6f-5e11-429d-8269-cce8cfc619c1", "value": 113184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771117395, "uuid": "3d1c43c8-b880-4145-9be8-b108b12cbce1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "598f5fdd-0a0b-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771117928, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771117928, "uuid": "7cee62d8-021c-464a-826d-b5001716736e", "comment": "Malware payload", "value": "1ced59b498efeb89bb7ade2079c6200a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771117928, "uuid": "93f95ff5-98a1-4194-8b4d-49851da00e8f", "comment": "Malware payload", "value": "d1eba5b833cc175e9dac22403d79ff7330e58a4be2a150e1f3f884b75d618cf4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771117928, "uuid": "795d066f-cd8f-4f68-9a31-05308698c097", "value": "T199A328A3CC766F58C628D5B4B0B18F796B93AA6081475FBE1567C27480C3D8DF6063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771117928, "uuid": "5f0bdfbf-e494-4da8-ba57-5814df65142d", "value": "1536:7GufPeqU2CVKCsNV7lsLPC9z+NzWuBx/3RhyXAq:hbU2RC4kPCtSzWu3/3L1q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771117928, "uuid": "b6963bb1-d35a-49f4-a0ab-c16f58e736b8", "value": 105056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771117928, "uuid": "4394c94a-7a4a-46ef-86ac-39e4492f70b7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "599e5fd8-0a0b-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771117928, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771117928, "uuid": "f90d1fee-750e-446e-84a1-6630f1f870f9", "comment": "Malware payload (Mirai)", "value": "28b9952a440f9aef55c4d8cf68748a9b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771117928, "uuid": "042e9107-f91a-4ac5-bd46-86f07d41ab7e", "comment": "Malware payload (Mirai)", "value": "7c83211d24fdb1b813f17067a44ef5880194c042d2547d61febeea8a9531e845", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771117928, "uuid": "f1250234-6083-4c87-ae2a-175db4f89090", "value": "T184333C4DF783E0F0DD4B0531115BF77E96349E025124DE7EEB98BE66AE32A02711B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771117928, "uuid": "6886b845-ce37-4e49-8d2c-c6c5d1ff9b01", "value": "768:cwzbCo1eCZWUJ2SSpRflrFWwqTlFNB5azjYvzNeVMU2331ANA0B7RhuqDV980N+s:cwdt3SpOzwLMU431ANA0BLBC4r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771117928, "uuid": "ff0faaf9-a7c4-46cf-9e39-71811d909d66", "value": 50476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771117928, "uuid": "33c5f042-9026-4fa3-b490-eeb5de0ce58e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "59a02031-0a0b-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771117928, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771117928, "uuid": "cb407599-fa49-4b07-83d4-8ce554c71068", "comment": "Malware payload", "value": "6f519e844c81e312ca9f41bce12787f2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771117928, "uuid": "8cca5f68-1b5a-4751-aced-37302355e2ca", "comment": "Malware payload", "value": "8e1df42a50ea94b3a55b4bd1543de6d1dea1d19c17d97f5ce7c8e6026919601a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771117928, "uuid": "24d1c9fa-4bbe-4999-8413-fd7131043783", "value": "T1EBE3885A6E228FAEF67C873147F74A20976D23D623E1D684D2ACC1141F6038E545FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771117928, "uuid": "3dff7d48-006f-4145-95d6-ed4806498bb7", "value": "1536:p+6TcKot8sp2MKypYz8ZOfGQ+v3eB/hub8mXRCTUGk4onuftL4VxYdbK:pVlybKpzEOfGQ+vEubTt4ouftL4sdO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771117928, "uuid": "3a0c4079-e69c-45ac-8096-9f52db0173d0", "value": 156680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771117928, "uuid": "853250fa-36d7-4913-9bf7-65be3783ab1b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "59a25bc7-0a0b-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771117928, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771117928, "uuid": "ddfcdd16-e830-4256-b704-2d5b17df711c", "comment": "Malware payload", "value": "fe08cd531a52969b1c54975a74683d1b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771117928, "uuid": "25ce1b25-1648-43d2-b1a1-0e5fef0b0f1b", "comment": "Malware payload", "value": "eed004cbe7d4dc52ad2ff89a822316b22dc9093c02bf9db390611091d5076c69", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771117928, "uuid": "32a123c6-1454-4727-9942-71258d624417", "value": "T13CD308C7F900D9FAFC0AE7374853080AB230B7A549925A372257357FED7A1990477E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771117928, "uuid": "70ed5323-4792-4afd-8d45-01cb028e2aaf", "value": "3072:ZSbul4MGHJvkrybLutTK/OwpiZdDoOPVO6V1jbiALNHFItx:ZrybytG/Oyi42VOgLNux", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771117928, "uuid": "feb7c040-5a45-421a-a4b5-54fe2b7f9366", "value": 140064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771117928, "uuid": "cdf106e0-9bc4-442b-8352-9cce2d3e58e7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "59ac607d-0a0b-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771117929, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771117929, "uuid": "e96c1191-e456-400c-be22-d5771f67c3c7", "comment": "Malware payload", "value": "25f4bd9bf11520fada49a94e9d59cdd6", "object_relation": "md5", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771117929, "uuid": "56815372-8165-4314-82ac-b62cd42314e7", "comment": "Malware payload", "value": "e072470520b6ef0b5556d9f883878b6f59c5a02aa7dbd07ae739e9a2389b5dab", "object_relation": "sha256", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771117929, "uuid": "be0f7398-7c6f-40c1-90b2-1bcab95d1213", "value": "T18AC39DABB24F1051C82647F41BCB579C2E3325019E2B9AE77C6E373E1A369DE58063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771117929, "uuid": "dd9cf13c-cf73-4a2a-abd3-7ffb00e38e50", "value": "3072:3f0GQgHfg5nBR4YYSOxTKB6Aq7mgbgiCrheiiU4dqe:3f0tJBR4NSALD7rnCrheiqqe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771117929, "uuid": "8cccb86c-18d6-43ba-99e9-33e278f9289d", "value": 124344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771117929, "uuid": "cc0e49c3-6ea0-4497-8c1e-00a44a6fc77f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "59b58cba-0a0b-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771117929, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771117929, "uuid": "adab343a-380d-4786-a486-2422b6aa81a0", "comment": "Malware payload", "value": "c818b95cab56d1a81170594002d941fe", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771117929, "uuid": "568f53b1-5b94-431e-8794-9287b2f0cd5d", "comment": "Malware payload", "value": "042f6d9dd8f2216fd42c97f53cface4b23a3544a69ad0e458e06fdb368bb538c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771117929, "uuid": "10452d48-1001-4fef-be3e-6f6be2749725", "value": "T130E3B71A9F910EFBDC6FDD3302A9060635CC954722A43B763674D528F64AA4F4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771117929, "uuid": "eaf0e207-a0ca-4c10-be05-92bfe6af1993", "value": "3072:nxjJw1Cc/0s6YAPwenUr48pzfR+JonAy:nxlw1xAop0YfRA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771117929, "uuid": "0df41387-914b-4759-9dbd-95b841e6576e", "value": 156680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771117929, "uuid": "25b4cf98-fa4c-4f8c-9900-bcfa564b5bc1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b6ba83e-0a0b-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771117985, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771117985, "uuid": "ef3b7a59-95c7-4730-a896-92b7cf5ddf4a", "comment": "Malware payload", "value": "3b8d72b225a0f515d5b36992dd34569e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771117985, "uuid": "c7dcf1df-ca33-49db-9097-f05788c75185", "comment": "Malware payload", "value": "11fe6fba059c7656ebcceddab119c1be0cc728fb9d7df710405b5f8b174fd9de", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771117985, "uuid": "4b41e67e-600a-48d1-8e47-fe1fd31f102b", "value": "T1B532C517A7BBAE1BC4D037770193072162E95F916024472FBD0D2C8E6E9A3412D3EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771117985, "uuid": "557124b4-e061-4c8f-bcac-2e6d34b6db3f", "value": "192:xvrOR1CQOsz1NxfAzzH9iG0GhWaDpU/O7Q89AGSyb6qeif:xvrbCzfaz2GwIU/kwGSBUf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771117985, "uuid": "3ca85124-b0b6-4fb5-b08d-84aab6267ef1", "value": 11024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771117985, "uuid": "b046f813-e670-4611-93d4-3316722d5113", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b84f661-0a0b-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771117985, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771117985, "uuid": "5a694e3d-341e-4784-8661-d8ae2b64ee06", "comment": "Malware payload (Mirai)", "value": "608d65d650cf06363c33c70b391f148d", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771117985, "uuid": "9dc1e02a-0d65-4d08-bae0-1403c7a3a652", "comment": "Malware payload (Mirai)", "value": "b62bfd01bac40dec3cb308f63a7c439581c958d7dcc1652d6b1f35191c36a8ae", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771117985, "uuid": "1de7e836-8172-43d7-a131-f550e6b130bf", "value": "T197B30945FC505B17C6C652BBFB4E428D7B2A1768D3FE720399256F30378B96A0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771117985, "uuid": "eebe51ac-6d9e-4e97-ac03-06fc73e0dad9", "value": "1536:sUK9yqnU8vGRz4VA4j6T9y28Ty6O5FtZpqQcZlCtwywXvqcVuafhPeA45Zvl:9ixnUHz4Z+5ypkn3E8l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771117985, "uuid": "19be4b3f-f830-49b8-8012-56af6663855a", "value": 117280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771117985, "uuid": "62225211-35bf-4c33-8815-d4e455b41169", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cae4e4b-16ee-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1771118535, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771118535, "uuid": "32e79f7b-83eb-41af-887b-2b8bda3669f3", "comment": "Malware payload", "value": "936b35bfee8232f437bf6b46e88401dd", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771118535, "uuid": "5217e596-3ce7-4a19-a791-9414ecd372ca", "comment": "Malware payload", "value": "de9a5647bdf02fa2b927566c78e54d5931e25c9f07d2ab884e135766815d53cf", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771118535, "uuid": "a6064e57-83b8-4e4b-a1ff-f4ef009ff1d0", "value": "T1B9356D56F9808EA2C5D8177BF75D835833134B78D7DEB102CD08672877AB95A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771118535, "uuid": "82e1e3f7-6074-49ef-9226-b2cc11f182e8", "value": "12288:E8dASOYRNCAJump208iJftl7zmnSrlcaUxQ5TVFQGl9eLtRajZa6ZTxIVD7bLv:E8dbbsO38+TfgRinIVvv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771118535, "uuid": "8a791363-9b99-468d-a634-49e48e21a244", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771118535, "uuid": "3a686db3-a1c7-4050-bcba-af5a2bcb959e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771118535, "uuid": "d02e101b-ee87-4e3b-929d-4cb94e56018e", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6d0b5db-7fda-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1771118535, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771118535, "uuid": "7f7f9f15-f301-40f9-ac55-59068bb0cdd4", "comment": "Malware payload (Hajime)", "value": "5377e8f2ebdb280216c37a6195da9d6c", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771118535, "uuid": "81e80413-bbe7-4354-9ae8-c8361f287258", "comment": "Malware payload (Hajime)", "value": "020f1fa6072108c79ed6f553f4f8b08e157bf17f9c260a76353300230fed09f0", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771118535, "uuid": "e688e7e9-b4c5-427d-bfb3-612f5b49b55d", "value": "21831229135414E5D62681F1D3FD1B84AE981FA9CEE2EC147C12BC89EE333AD3CD2618", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771118535, "uuid": "c1e5031b-562b-4ca0-8b35-fe72cb4cca1c", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J1V+uBNu:yYI0ARqw1qAEv7UIFM8oJorFquyjkRks", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771118535, "uuid": "4f096723-2d18-4b3d-9bcf-82a323997678", "value": 85232, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "040523a8-e5c0-11ee-b38b-82aee05be84a", "comment": "Malware payload", "timestamp": 1771118537, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771118537, "uuid": "68e7b538-e0c2-43fc-ab80-8c25f93e0e34", "comment": "Malware payload", "value": "724f25e7f93eae0ae54a80142e11b7ef", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771118537, "uuid": "4e3e2d13-cb15-4b75-bcb9-b93415f178b3", "comment": "Malware payload", "value": "ab69ef32017a5365ee0e7faca03e1352382865c5672e989d99d2d77ec91c33ef", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771118537, "uuid": "49040a51-622e-443c-9565-71936afa16ec", "value": "T16D356D56F9808EA2C5D8177BB75DC35833534B78D7DEB102CD08672877AB94A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771118537, "uuid": "4e6f4cbb-db42-415e-bef9-31c8ebcffd70", "value": "12288:00Bw2wHeeJgR3asIAksAi0uObzkzOgFr1qwRcFjV1D7a9KbsaKjpeFmz4T28bLv:00BnRED/TwOjX0a5xTdv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771118537, "uuid": "36abbb35-7d74-4a8c-b4af-00cbba57a383", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771118537, "uuid": "c51aeea9-32b8-45ba-afda-1bf0e7905c9b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771118537, "uuid": "9fa3d6f7-4aff-43a4-b2b3-1de21333fae4", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e20ec8c7-0a0c-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771118587, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771118587, "uuid": "b2f2a10e-df36-4d1d-ac39-08e2f2f69330", "comment": "Malware payload", "value": "d850b935024ecb082c95ab36d22eefb4", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771118587, "uuid": "2a98eb32-14e8-4ef6-9f3d-9807445a8f79", "comment": "Malware payload", "value": "ff7e39a4abb2a0af3a43f126b7becc610d1b1cec11e35673f24279b46f527423", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771118587, "uuid": "0d67ebb2-97cb-4c12-9c43-2c1fb27ec80c", "value": "T15334F1BCA30C8A9155AF2493BF293D9C73B42CD811A5B0E8CEE321812473999EFCD7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771118587, "uuid": "69c13c9d-0f87-41f0-b51a-3c4e91f0142b", "value": "6144:oJ0EjTPbmZY6AstvhiH3pBBW2gVTGYWku2+ju22Fpgjb:0rjTiMH5rW7VKYWkM3zn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771118587, "uuid": "62c0bbb8-702b-4bff-8140-dc3df279ae8d", "value": 247890, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771118587, "uuid": "5ebf415e-6090-4df0-b3fd-f2d818f176a1", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62119187-09dd-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771118671, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771118671, "uuid": "67fe6866-641f-461a-8937-184cdcb16e8b", "comment": "Malware payload", "value": "07e3a13333482ad98363d64f94ad077a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771118671, "uuid": "25b29c31-7fb2-4b8c-a03e-c1539807e162", "comment": "Malware payload", "value": "844b5f9b70b376586a12de4a35027a677182d9a4e55426d81a811b4be5c4ae7c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771118671, "uuid": "3ee3812f-2631-406c-a777-54bf938eadfe", "value": "T18A0412D4E64879BFEDD3C47528467113EF83749592ABE49C500EA8D7E4FA2280C5A2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771118671, "uuid": "ac8a6c59-1cae-468d-b6df-5a83d4bedd71", "value": "e91bba9b4a0c8ef69cf82dc58ee3caf7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771118671, "uuid": "38d33ce3-5407-49e9-a99d-7136a346d8ff", "value": "3072:pDhFQ6FAv5h1y7YLulSsKYk1RN/l/cbpSghds0uJirW2C1tIGFyfT2a:pcgAv4QtsiTllghqJeFC8G8b2a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771118671, "uuid": "57af1522-55f7-4d97-9f48-109cfe2549f3", "value": 175104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771118671, "uuid": "3a9140e1-89cb-4171-9adb-c704e8569038", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dfd69e35-0a0e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771119442, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771119442, "uuid": "40bde407-202c-4218-82f1-73142bdf8778", "comment": "Malware payload (Mirai)", "value": "ad82f0b8361ad2c86dbfcbc892ecc9ee", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771119442, "uuid": "728dc982-cd9a-4779-9d22-7258897e9a49", "comment": "Malware payload (Mirai)", "value": "035b7d20901c38e32d40799a24b5158a8e705dfdf723294733e86d1a112fe6d0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771119442, "uuid": "ae4fae2c-3750-4035-82fe-ffaa3ff656ae", "value": "T173A3299ABCC5C602C9E061B6FB1F51DE371643A8E3E6B107CD19AB29674B8970F372", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771119442, "uuid": "563d4d7d-3245-4a39-95ab-81387ebfd579", "value": "1536:E4oXdELzG5NqpD8Rd4PcPtC52kKw+4ucDYnMXLs5+eRWIwz8vUXk:E4oXa4MD10Pw52kK34uc9Ls5+KOKUX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771119442, "uuid": "a2d5adea-5f9c-4a2f-a062-747f172ddbfd", "value": 99720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771119442, "uuid": "5d4ca121-f6ef-4c1a-9171-25d14a141ddf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "610b9894-0a10-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771120088, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120088, "uuid": "dd3db61d-6e5d-4245-a362-3a96ff6efad1", "comment": "Malware payload (Mirai)", "value": "e3afb23b46cfc277b1cca503defdac90", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120088, "uuid": "db3f736b-6fe4-4fba-bde8-bc2e8be4fa4b", "comment": "Malware payload (Mirai)", "value": "014c5f951d1172044cddafc71d74e27689c4c0041dccba9e531b2e8b8ad8fe66", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120088, "uuid": "3f58856c-a85b-4fa6-93d1-932a73e99dd7", "value": "T17D93F842BD429F13C1C621FAFBAF059D3B166B79D6EB3202D921BF9023868D70D762", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120088, "uuid": "af7ebce1-c72f-4441-8af1-0835e7dfbe8a", "value": "1536:wV4F+8wMvh/zTjmCon3rqMGbRCiWeFvkQ+vSLDgUMwdxMUF8D9a:wVSUujmCon3rqlNZdkbvSL7M39a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771120088, "uuid": "32d659ad-b35f-41a6-a708-94204aea0cc9", "value": 91532, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120088, "uuid": "6566018a-c558-4db8-9909-6e157bc3582a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "613d0e5a-0a10-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771120089, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120089, "uuid": "6d18d069-16bd-45f5-9512-f2bdaa9973b5", "comment": "Malware payload (Mirai)", "value": "5c3552662fa2f3da43199d6c16ae61f1", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120089, "uuid": "16fd476a-90ab-4ef3-89ea-e4799bb78287", "comment": "Malware payload (Mirai)", "value": "5d5739f8042e3656e520866dd2226e0fcaacc6f38f284d5d7eb66d464d3ec35f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120089, "uuid": "be062207-5fe8-4ec7-8a0b-b38e78812940", "value": "T14573F842BA87CAF3D41704F041F7B63F8E31FD3A493285A9EB65BDA2DA235C161163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120089, "uuid": "0d45ee71-51e2-465d-83cb-d5e351033837", "value": "1536:cfGl11IuDxOIX9GtkxBP4nIj33Dr3FPrCWD8ZM6iwHvbi3aGiE3uM+qA:YGl16uDx1XPBP4nIjntPXQZM6i2ji3X0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771120089, "uuid": "fa07e04a-13b1-4f3e-9563-b08260ba7bbf", "value": 80392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120089, "uuid": "c7d31be2-fcd5-48bb-bb34-b47445c5e7b8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "61449a6f-0a10-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771120089, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120089, "uuid": "a4291faa-ed2c-4c61-84f6-0a27e8333fd1", "comment": "Malware payload (Mirai)", "value": "2bb33b13a8b3405660c0181cb16b564a", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120089, "uuid": "268e68a8-8c75-4b70-9e8d-fcba7d7ee405", "comment": "Malware payload (Mirai)", "value": "c2dd56da154b5db6d277b27bca49c7d631695558113ff7ddff03c656cda97a59", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120089, "uuid": "f5b897a4-214d-4f19-ab9f-ba77fa0c639b", "value": "T104631B07BA428BAFC14FC1F407F76A399922BD7E0A36F1E5E3A4FD865901CD05A1D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120089, "uuid": "a2cf51b1-596d-4799-bad2-8f346806001e", "value": "1536:GnHkHRxHBFPSWGzNGIlGy5TGpWE7wH9OXEL9qC:mHkHvBFVGzNUytJE7wwXEcC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771120089, "uuid": "622a67a7-302b-48d6-a473-04e9edfba132", "value": 69624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120089, "uuid": "3c02c577-9027-4f4c-85c3-bca331a23281", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "61531c08-0a10-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771120089, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120089, "uuid": "2d7a2cd6-75e9-4291-aa2c-f16b19a4cf0b", "comment": "Malware payload (Mirai)", "value": "865a50d78ed9f89fd885c624f2908110", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120089, "uuid": "2822af4b-d57e-42bf-a186-1b2f5c04bb42", "comment": "Malware payload (Mirai)", "value": "26352d1862543417a192ea76729d499c7e2fb286920482960d4fc6213b40a100", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120089, "uuid": "d27509ab-23da-4300-b2d9-aab6698f811f", "value": "T1B1B3F946A9429F11D5C631FAFBAF414933136FB8E3FA7111D9206F6023C699B0EB76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120089, "uuid": "90cca942-06a9-4226-963e-6c0af83c75f8", "value": "3072:xqiaFqVnpOFnIfG/7/0qZYFY92nylaJl7xVPrqArkfJJ/0kkih6f:xqiJCdIe/7/0qZYFiCylaJl7xVGArkfA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771120089, "uuid": "41c1c5eb-13e0-4622-9cd6-24b721c5c872", "value": 112664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120089, "uuid": "5ad033ea-9351-4762-9afd-4dc3071de0ea", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6155c453-0a10-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771120089, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120089, "uuid": "22c9a9a5-e7d5-488e-974f-2409c24d0a3e", "comment": "Malware payload (Mirai)", "value": "86145c4aa18c7ed65399c14758fc8f89", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120089, "uuid": "d87c0766-7c08-4041-9328-64f064b67c2e", "comment": "Malware payload (Mirai)", "value": "6d8775bdc307130bd36e7cbaf2776a48b19d2c8d5534e9826d7abe75e9bd737b", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120089, "uuid": "5967ad42-2b2d-4473-9eb7-5db2af83f96d", "value": "T1EF932845E393E5F1D80705B001ABF77A4930FD331624D96ADBA4FFE2AE315C2A1963", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120089, "uuid": "e4b56c65-c69e-4a5d-8409-51147db7dbfd", "value": "1536:NJaUfdQD/bb2sxL9I3eQYmUi3100x7u/o1rOgLMRYrI:NJNYn2SxIL6kp4g4S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771120089, "uuid": "4e4b7f17-02eb-4e1d-9bb8-bce381811fd2", "value": 90476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120089, "uuid": "d5d08685-992e-40f2-a9b2-ef9e4b2c73f8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "615f9894-0a10-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771120089, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120089, "uuid": "75c976a3-3858-468a-a82a-9069d5489661", "comment": "Malware payload (Mirai)", "value": "077f08674579668b8f57a7608594f46e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120089, "uuid": "57f2a7be-e65d-418e-a73e-ebe2da11b031", "comment": "Malware payload (Mirai)", "value": "6d03ef912a5d17f4e794fc3bbf8c759f154693927b97908049d45c213712403a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120089, "uuid": "646c82b1-cbfe-4f2e-8000-441615ecfa43", "value": "T1C0C3B81E6E21CFBEF65A827407F78E31965877D72AE1C585E16CEA400F502CD241FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120089, "uuid": "0dd2491e-5012-47dc-8376-6e05a00f175d", "value": "1536:Nw4lPfv7d7Y/YL8dM416VcwS4ziMN/DIs1ISWlaH6efNHDhLA:blPfDdM3dM4qcwS4vN/DIsC8HDhLA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771120089, "uuid": "27f47dc6-417a-4cd2-bbb8-abee1dee29a5", "value": 118300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120089, "uuid": "d75763b9-34f5-47ff-a222-8879c98cb968", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "617e861b-0a10-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771120089, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120089, "uuid": "e8c64045-ff2a-4115-bc84-71628134f4fa", "comment": "Malware payload (Mirai)", "value": "9ed0dbe042b412579bb9ae91e00f87b4", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120089, "uuid": "da0d01f6-73a9-49ac-ab3e-00efc3751b3a", "comment": "Malware payload (Mirai)", "value": "1276aa4067fdffe6e279455f72424f737b5cb5c4108af5d27cf160e28d5f420d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120089, "uuid": "2c65608d-6856-4128-bfad-e6d58b2668ce", "value": "T1CF9329227E760F27C4C2A8F652F30B30B5B2AB5B28B8854A7D715DC96F646C032477", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120089, "uuid": "fef2c7c1-f5f8-4690-a5f9-6a8faddded3f", "value": "1536:568MSzlPyzhCJuWsZIJXc7V1SYdJD5trAgENWq5O7M4XVhUtW7:560A2jM7/S0lxZENl/4p7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771120089, "uuid": "6e2ffcbf-81c8-431a-aa9b-7a3259b3b2d7", "value": 95540, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120089, "uuid": "30edc600-a841-4d14-98b5-e77f7b27ace3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "61adbc1f-0a10-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771120089, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120089, "uuid": "a815edba-1418-4054-be64-1c759398228b", "comment": "Malware payload (Mirai)", "value": "27354e05d0ce43e0a9f2c444e501c263", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120089, "uuid": "be07b589-f1fb-4c9f-b746-5d8b321d27f3", "comment": "Malware payload (Mirai)", "value": "d642e2278d5be96357d0657951d184d518cb2637e3ab25f40bc18ab8de3c583a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120089, "uuid": "587df158-5c7e-4bbf-9c2a-cb1b54478143", "value": "T1BA21D29D10F4651E63ACCD40B1BF9208488086E539F4FAE59AF404BB45C531277ACF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120089, "uuid": "b752ea8e-6812-4aaa-9c0d-32cb716a913a", "value": "24:3J3nxiFNIokKsHsgrzxA7izVo6XfsP290ygn:NHrpZ9ng", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771120089, "uuid": "404ce1e6-2c83-4dd7-88cd-8b2a6d250661", "value": 1130, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120089, "uuid": "e17ee33d-19b2-44ee-a02b-11096690f28c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "61dc7e92-0a10-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771120090, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120090, "uuid": "fa6cbc2f-15f5-49c0-a90d-11146380ec07", "comment": "Malware payload (Mirai)", "value": "a9277357d0709fb34f667dbf7c6da039", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120090, "uuid": "57708b73-3dbc-48da-bf38-75f0852d121c", "comment": "Malware payload (Mirai)", "value": "248b54a02ff55f77ea682ad663929d999b3c6a05dccfcf09e3fae5c29eca7727", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120090, "uuid": "e684edf4-5a63-4dd8-9e8b-29877505312f", "value": "T1D6733923EA16AF46C14761F0A9F64E740B12FC2A8D671EFAA564EDE881439DCF1053", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120090, "uuid": "b5092003-08ed-4ea6-8b67-481a8a8e8a53", "value": "1536:upwtq/0FORx0SFXaRwtjniiorx0cCnKc2Hf7cuG0kKCuWUbdg2X:upv0QRxJUucruHKcaTG0kKwwCq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771120090, "uuid": "980a2c2e-c2f7-438f-834a-314811705c4a", "value": 79300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120090, "uuid": "564c8f4b-2e0a-4f89-ab55-995bcbebf548", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "620a9f08-0a10-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771120090, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120090, "uuid": "bfaf5cf8-8b92-4de0-81ad-0274126666ce", "comment": "Malware payload (Mirai)", "value": "a4c637216d35cc8499fd368b76b9dc56", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120090, "uuid": "b80bf22f-069d-4046-b1be-9aef22d7aa25", "comment": "Malware payload (Mirai)", "value": "b034b45c2b163d091c32796bde45e928320530b922939976561e33a45a6ae591", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120090, "uuid": "03acd7df-f249-44cc-91a0-6b08c184a5ac", "value": "T1BC930C46B9528E12C5C212BAFAAF415D33136F7CD3EE7212DD20AFA063865DB0D776", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120090, "uuid": "96f02b6c-aa63-4a91-bc41-ec0dc86e8139", "value": "1536:870nOhjxCMMJEl3EVupOFnjRfGqtCMPc5pyHtLoY08ivJa2RPk0aDQOiFYgNf657:mtCxEqVupOFntfGqtCl5gHZo6ivJa26d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771120090, "uuid": "bac324d2-b7fb-4b48-83ea-620139d1f64d", "value": 96872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120090, "uuid": "655f2ff7-8303-477f-bb2d-ec0d62459427", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6224a142-0a10-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771120090, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120090, "uuid": "bf1da85f-8904-4255-9ea3-258ad7144925", "comment": "Malware payload (Mirai)", "value": "5fe04b18acebf8b7a8fbf7927694b41c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120090, "uuid": "6c28ab8a-0c48-4f95-b35c-9a5884fb9f59", "comment": "Malware payload (Mirai)", "value": "24c60c9e43332c6db84fecd7b5f28a431ac59b71510de7d3fa9c5663f22eee47", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120090, "uuid": "48742742-f7e9-498d-86b7-790e5087536b", "value": "T13483E942BD429F13C5C221F6FBAF019837166B79D6EB3242D931BFA023868DB1D676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120090, "uuid": "bced261c-70fe-44d9-83c2-0f9f929d9c1e", "value": "1536:/KDLhQ3BlLywjmConIxqPONv6GKBJw3y2XKPrL2tGwUbO2j0An6TfkTa:/KDqXjmConIxq296GKAXwrL2LA6oTa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771120090, "uuid": "87d4f834-83a2-486c-b630-b93f1ceaf12e", "value": 87436, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120090, "uuid": "ba8df42b-e3e7-473f-9049-167b62a3d000", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62410a92-0a10-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771120090, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120090, "uuid": "7d9b46b7-c3f2-4d47-9e2f-f30b3e0d1a5a", "comment": "Malware payload (Mirai)", "value": "96bf2f5b956861a6b417708085915841", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120090, "uuid": "d9913a0e-7b24-44f2-a3e7-ac9cae4a5e4c", "comment": "Malware payload (Mirai)", "value": "8f9bf186f76693da9008570ecb7b9e136c8e48286945b3a40b393378f159049e", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120090, "uuid": "6631cf53-f2e6-48f4-9054-bbd137254b95", "value": "T117C3D506BF114FF7D89BCD7346EA0B05258CB82B16B92B757534EC58B24A1CA1AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120090, "uuid": "52e87152-4012-4c51-9856-2a465d419e11", "value": "1536:D4w4zW/h4SZsqEzLMzgiDSAP3POgjaXbzTZjifPNXe/SRKEEFCSmf:UxW/rZsqgMnPvjarzTre+mf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771120090, "uuid": "8165525b-d000-4983-83dc-2ed3432ba942", "value": 118300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120090, "uuid": "e6ac16f0-b952-4b1a-90c8-794683ba522a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6375ba88-0a10-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771120092, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120092, "uuid": "81dbf23a-0cf6-4e0a-a3d0-f5e24d0403f2", "comment": "Malware payload (Mirai)", "value": "43657d7714305760aa06316623d11218", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120092, "uuid": "3deefdba-a313-434e-9a5a-2c37895d5ab1", "comment": "Malware payload (Mirai)", "value": "a396ee5a6cc14a9288839bc0a2ed31921b3a715f8de52d447376dde60035362b", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120092, "uuid": "709bf14f-1650-498e-aefd-111a63c14545", "value": "T11C93180377080F47D06328F426BB5BF187AABD6118F5B284751AFEC99271EF26142F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120092, "uuid": "47fb2eca-bac1-43b8-9347-b8951117615a", "value": "1536:eLsW0DCsRh/6YICSw7gSKWF/xzLntTwDq2AIlqT4thnrLmvdhpx:eWvRYY7m+ln6lqT4rOPx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771120092, "uuid": "5861df60-caf2-47b8-8883-d8386082efec", "value": 88820, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120092, "uuid": "11b18eed-189c-479f-91e7-41207a8939ad", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "639aaeb1-0a10-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771120093, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120093, "uuid": "67b38310-0abe-473c-9f17-130d1e1cf5b8", "comment": "Malware payload (Mirai)", "value": "274b3ae42a0742d6aa0a3f6101dad7ce", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120093, "uuid": "858bf736-6aea-4af8-bf2c-ea6b2349fc81", "comment": "Malware payload (Mirai)", "value": "a5ed870a754af58eb5ef2e347dfa996d5447b3bc8cebadc3f8fd5b4abac54238", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120093, "uuid": "80818e7e-4dd8-470b-a076-c2a5712db123", "value": "T11FA3F887F901DE7FF80BE6BA449309197520FB660E530B76A367BDA3AD311D41922F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120093, "uuid": "ac8ee31e-a5da-424b-a0c4-cebf01686cbd", "value": "1536:3yD7f6hZC+TxtRnuqI5fQ+7SAsNYpxl068Fl4/zW0IEpmPZY/hdhEhDhx02MV65B:3ynSLjI5zsNuxl0b45Ix+V2MVEOC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771120093, "uuid": "d53deee7-dbe0-47a5-bd08-cb2d760bbc91", "value": 99692, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120093, "uuid": "ef2c01da-5c06-43ce-bdc4-dac8c4c26c2e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "639c7521-0a10-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771120093, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120093, "uuid": "1e90ca91-5563-419d-a2ab-486bc8bf6ae4", "comment": "Malware payload (Mirai)", "value": "05ba1eb41cadffe20d53b61f40cdb855", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120093, "uuid": "9ca1abc3-c7ed-4c6b-8b1c-fecbd36e59af", "comment": "Malware payload (Mirai)", "value": "c72b2c48ccdd3eeca1c404f3d58abfb3452eb5227c62eede646e798c36e96989", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120093, "uuid": "7ca6bcf7-3695-4761-a520-827903bdf1d8", "value": "T1FF219A9E10A4651D508CCD4071BE16004B858BE57AF8BFE95EF404BB4ACA71077ACF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120093, "uuid": "d2bfc2a9-4211-4759-8129-b5c5361a7d81", "value": "24:6y9FNIzkK3H37EzyA79zmo6Xf3o29Pygv:jKC2f9aq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771120093, "uuid": "a4b51879-7501-4d91-b935-e9248bd9efaf", "value": 1131, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120093, "uuid": "913cbbbe-771a-417a-9d28-bcd7b62ad92d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63fb8946-0a10-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771120093, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120093, "uuid": "61c70882-5195-4cad-820c-4fbd8fd71f82", "comment": "Malware payload (Mirai)", "value": "64b931a464927a76136378e46cfe676b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120093, "uuid": "b9266fb3-75f7-4c5a-be37-0a2aefafad66", "comment": "Malware payload (Mirai)", "value": "77f0080e8391808c1092964e9e6780bcbbbc9b00ff80bf8d2d3e450db203f9a7", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120093, "uuid": "d42e0be1-0017-415a-bd3c-a84d8b3af686", "value": "T12983190377094F03C16329F026BB1BF097EABDA119B5B584752EBEC59271EF22181F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120093, "uuid": "5dd96aca-c86f-4b0a-a0a6-12d89cedcaf8", "value": "1536:tL79gT+wtHfOoGtQZ1duycy4ze2iKjqgCamJax32aMAEaLsp6uR:tqfWoGC7uVWim/a/huR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771120093, "uuid": "1aa8e6eb-3e62-4c40-a2cb-8360f5c24dae", "value": 88740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120093, "uuid": "ddd88322-4082-41c1-a233-bc5b239a23ad", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63fc0fe0-0a10-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771120093, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120093, "uuid": "d97a3372-5902-468c-b364-c9acbb309696", "comment": "Malware payload (Mirai)", "value": "9f3b7cea82a537d6fdf4fc74c6b164f5", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120093, "uuid": "6f8dfa03-0567-4d48-ab79-5e2384006fcf", "comment": "Malware payload (Mirai)", "value": "36af22ae73713a9de8f3475ad971fb34eb61055ef74221ea5a9db8d81ff17314", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120093, "uuid": "101de763-ffc0-4434-8205-b25eba959fb6", "value": "T140730A826A43DEF3E85710F502B7EB365A32FD3A083AC5C6E774FCA15A515C0A5163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120093, "uuid": "0c65644f-ead3-437b-a56b-0feab9b0feb3", "value": "1536:Rcz8Mfl3USRL+r97S3TlpffUr4ssC1qs3vLJ7LZaA14B6Kk3u8Hg:RcICl3USMsTlpHUrg6qs3TJ7LYK4fQH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771120093, "uuid": "4559a9fa-f491-4eab-a584-2a0ff8125d01", "value": 75592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120093, "uuid": "12fa6e48-237c-489b-97dc-93936c3a0396", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7816fea3-0a12-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771120986, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120986, "uuid": "adab9041-2e66-4985-b244-d93db06a1318", "comment": "Malware payload", "value": "c4e3f7772c4aae0374a7c3f55696cd37", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120986, "uuid": "684403c0-3f4b-405a-b008-bc3541865d7e", "comment": "Malware payload", "value": "d37c225468f5a72b50c8eb3ea7bc13012fa69dde14aac074fd8f565e5ea4e928", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120986, "uuid": "c3b27466-594f-4a2c-a53d-73b7a164b582", "value": "T1CBE4237E45E3F9C6BDBC81F352621342E3FA98B80E7D7D86C727158A9686238B4850", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120986, "uuid": "8f8407eb-50b4-4aab-89c1-611c03cce937", "value": "12288:k8IhAUU87pVHcidj90lNMgL8nOpIcmffpJqCTqS6AhcHVRtMHuL5hStDk+:HiAxkTjGlTLPpIcwtTcRtMH85uDk+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771120986, "uuid": "34f2e806-20f6-4dd5-9877-178474f4c86f", "value": 703860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120986, "uuid": "7696e3c7-271f-4b0d-bd9c-e16115fe4cae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "783820c9-0a12-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771120986, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120986, "uuid": "1be382c4-309b-48b8-8b35-c12baf497f89", "comment": "Malware payload (Mirai)", "value": "413e6d297034c4ac2c8d564318e0d48b", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120986, "uuid": "498c3252-49bd-4d1f-8223-3a79d303348a", "comment": "Malware payload (Mirai)", "value": "d5bda205ea560d6ca315e21de93aa7d268a5e005a120c33c454559954725a9ce", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120986, "uuid": "40d80897-861f-422c-968f-8c441552cec7", "value": "T14E14C70A3A228FEFF56D877147F34A30976976D627E29684E26CD5101F103CD681FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120986, "uuid": "d408c9d6-7576-4d4c-86c5-804ec5c2e96a", "value": "6144:426eQCbeoufx4sdf2dp06GtCqjYW8nY1j20WI:Yely4sdfap06GtCqjYW8nY1j20WI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771120986, "uuid": "ce94def3-3467-4dd2-9ed1-31ca40028897", "value": 202077, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120986, "uuid": "6e453145-0732-483e-b8b6-85cc41112eeb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a3700fdb-0a1a-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771124495, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771124495, "uuid": "e518098a-3969-4ea8-9ac8-1600ad4129fe", "comment": "Malware payload", "value": "8c7cb45794e3d932b3f5d0619e321c6f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771124495, "uuid": "643dd8a2-23a2-49bc-bc59-98c8969cf528", "comment": "Malware payload", "value": "732de4babcc2e8a1cab470a67e6fa0c0be31a4368ef8f4e964c801d5654fe1f7", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771124495, "uuid": "b9c65ef2-3624-4511-96e8-6ac2e00bebc1", "value": "T1E7B32B6BA7F231747107CB19F5D6B72866ADC163EB020EE3BCB9652D87C229502736", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771124495, "uuid": "e0c9d54b-100e-410a-a5fd-f50ecfd3e145", "value": "768:jG5Zdyp3trc7lGRNjcXscJGcz74k/tHcm17Sjv4ocFP0mOeGYd:j8ypdr4l4k/17Sjv4ocFP/XGYd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771124495, "uuid": "d7175ec2-cba0-469d-a250-1df5ec9c307c", "value": 113420, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771124495, "uuid": "d64a0660-ddc9-41a9-a899-5e6ef7a84127", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1771127232, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771127232, "uuid": "f094d50c-9988-4b7d-bf89-22a118c8d77b", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771127232, "uuid": "2463d328-407c-472a-bb83-a13586b8f27d", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771127232, "uuid": "f4dd497d-6560-47db-9c15-a30dc7cd8c2d", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771127232, "uuid": "68fe83de-b020-4eae-9d7a-1c8040c7d741", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771127232, "uuid": "3a30cd08-c5d5-4dc9-8f1c-1e94d2b6b4b1", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "88da8f0f-0a3b-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771138624, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771138624, "uuid": "62e39f0b-f2f3-4422-ade4-73fe5bb77646", "comment": "Malware payload", "value": "0f097369f2691249584a94522f56df36", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771138624, "uuid": "d1be9340-3a4c-4a29-ba82-012847090c67", "comment": "Malware payload", "value": "2ab0515f5a85ca5644cf0988875e8cacd6f8b6db4ea64f620c3e21945437cf62", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771138624, "uuid": "439da629-a3a7-46e5-9065-9f88a83850c0", "value": "T1EF7533E56BDE36CA43BC0BED0223E5147D4E0BD582F2B1DC2976A277051E85DBE089", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771138624, "uuid": "d28f45bb-f1f8-46ed-90e9-ff21529ee540", "value": "49152:9tTuv9pLyctYFYZPIi+WDWR2peaeDn5m7GDu:9tKv9pGYFxVovbD52GDu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771138624, "uuid": "b24ecfc6-b4d2-46c8-ae1d-4185bf49319a", "value": 1703168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771138624, "uuid": "f4e2b6f5-7aa5-44a1-9420-23a9c71cdd71", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "85b2c745-0a3d-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771139477, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771139477, "uuid": "bbef2947-358c-4343-a5a4-52b3db3230e2", "comment": "Malware payload", "value": "655a8f2a72744a03f83eb3287903660e", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771139477, "uuid": "385f73d3-dbc4-4fee-a510-0d63e8a566c5", "comment": "Malware payload", "value": "0ccf1346d5940d855b685b759da9b828ccd68219d8c204c2b569cc2f916ae688", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771139477, "uuid": "8428518f-384d-447e-9753-ec15f5f0e3ec", "value": "T1EC853333187B0157E0E74C357CA73DF56BBC42D320EA6E25761C2EE5A5822E0A1A77", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771139477, "uuid": "55440b96-f5f7-4f1b-a9f1-c7c60225b419", "value": "81bbda50a2982e0e014acf537665f7af", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771139477, "uuid": "15adb4b6-6109-4490-94d7-6bb6bd06ca7a", "value": "49152:xxoI5eUjFbOseoS2f0DnrN4+QOjnZfr5Dr081+BoFb68:/qUjd5Sm0LrsiZlj1+qFb68", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771139477, "uuid": "0032adb4-a4f4-40a4-93ec-a2a376401c42", "value": 1860096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771139477, "uuid": "573f42f8-36c0-4449-b920-dbe554a625c7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab1271c2-0a3d-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771139540, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771139540, "uuid": "4287852a-b2a8-4bdf-b493-11f012080cea", "comment": "Malware payload", "value": "37a7669aa83658bd3296d899d5c8c1f3", "object_relation": "md5", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771139540, "uuid": "4bdc4985-9f23-44a5-8ee3-35666e3b655b", "comment": "Malware payload", "value": "93e72c084069d443f622301847abe7d17f22c339b6f4575df052b93be4801e2b", "object_relation": "sha256", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771139540, "uuid": "ecf78849-c99f-43ee-b6b5-02574a4d8b50", "value": "T12F6733F86D5C1DE7B01DE33643D83B22D37BA11E5399F8A90703079D38621AD973A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771139540, "uuid": "af1906e4-6b35-4931-945c-5bb77da284fe", "value": "786432:6lU7M1dGOymw8/LukCX9LfCRaHR8MyJCMIFLf1pMeS4yWJ:uUw1IOl/LuY3MyMMIFL7S4yWJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771139540, "uuid": "e91fd8b0-2d7a-4889-bb3f-204eea2b82cd", "value": 32492731, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771139540, "uuid": "f164d652-aa13-459c-962b-f8269cc0c840", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "def8d72a-0a40-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771140916, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771140916, "uuid": "cce1427b-b7f4-4262-8003-7951ef3478a3", "comment": "Malware payload", "value": "54a7642f576f76f0dca124a970259f19", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771140916, "uuid": "f533b855-f39c-4baa-b44a-386905dd31f4", "comment": "Malware payload", "value": "c463a85d41e1ab7ee83c2af1d5c518830cae908ea1caadb97a296ad69f8ad48d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771140916, "uuid": "d723caf6-4a1f-408e-9fc9-41cc11551584", "value": "T17DA3E91916670890F1EEDDC00D85B8BA1A1377B3A5E11BF967CCD64CCD16EED28C36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771140916, "uuid": "18d74137-4944-4b07-a605-1b121857e9e6", "value": "1536:a4Xku131N6/RTVBMKJu83mPm+sezkTiBHAw06IyGbwgewyDjEYgIPLOAj1QJzqAi:zgVBH3mPm+sqk+HAw0F5KijXxi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771140916, "uuid": "06ffa5ad-6642-4779-8112-4fb252fe029d", "value": 98122, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771140916, "uuid": "9d2f08e1-5237-4f41-8aeb-53e694883544", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "857a722c-0a4b-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771145490, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771145490, "uuid": "52023d81-34dd-46fa-a16c-7c24aa1060ed", "comment": "Malware payload", "value": "97558949f8311c80823bca9f802be6e0", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771145490, "uuid": "11ec0baf-f713-47cd-9c3e-65f39278132f", "comment": "Malware payload", "value": "04c6ab57035d2f19ba8a00dfec1836e88d03bf8bf153819d751260e13fa269f3", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771145490, "uuid": "28c8d9e4-1b5c-475b-bc66-33584e16c6f3", "value": "T17E187D03B3A705D5E8F7DA3196E65223A932BC066F3085DF324C17262F73AE05A76B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771145490, "uuid": "7acec572-242e-42d6-b02c-f661a46705b5", "value": "9bf3f5698d1c8e5d8bbe8d194ac5d544", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771145490, "uuid": "678b1e30-b5be-40ab-9ffb-da260000b389", "value": "786432:fAZqtFi3zQzwBs6vNtcZY5Dfw3pgPVlcmXW8:fAZui3zQz2jOZKft", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771145490, "uuid": "1968d174-730d-48ff-bbbe-631b761687b7", "value": 90429440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771145490, "uuid": "79af40d4-3b88-4aff-832d-d81fab35c9ac", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1771146135, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771146135, "uuid": "a5d02bf8-630b-4711-a2a0-79aaba7ee7ca", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771146135, "uuid": "b924e1a4-ea10-4c12-a308-e5c31b8a84a0", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771146135, "uuid": "74e0ebb4-e328-4435-b523-21f583620db3", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771146135, "uuid": "04a2980f-5b1e-4eff-aa89-6c305a5df1b1", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771146135, "uuid": "622d4555-4606-4ba2-ad8e-c3f5d2c6c950", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc2b35c9-0a6a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771158896, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771158896, "uuid": "48d80059-4741-464c-90fc-ee000b12389f", "comment": "Malware payload (Mirai)", "value": "f41cdfb5c12d7a1908140760ee5151cf", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771158896, "uuid": "dccb3287-f9bc-4590-b2eb-366c19a18c65", "comment": "Malware payload (Mirai)", "value": "dcebaecf26d5637eceb81cd2f562aa4d923da2881a48b2a4cb0592aaf225420c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771158896, "uuid": "04e24df3-af98-4f42-95a5-34b227e4356e", "value": "T1DEF012DB21A69AF200ACDF14F166A895B02A9FFC30940F4CD4DF24EB6F44A507C14F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771158896, "uuid": "d9ad2314-ca45-47df-a3f3-6d2e93a04d70", "value": "12:bgdzudzibcdzZJdzZadldz3dz4dzQdz6hFcdzvydzP0LK27:bgdzudzibcdzZJdzZadldz3dz4dzQdzF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771158896, "uuid": "d82a3feb-7954-496f-b08d-b61b21ce295a", "value": 554, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771158896, "uuid": "4b94200f-84d0-465a-801a-ca387ecca14c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f890e9d6-0a6a-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771158997, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771158997, "uuid": "ecfdd179-b715-4868-9b85-7a9c67a3ae90", "comment": "Malware payload", "value": "cfef123d7ff6870d2462bcc087d29141", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771158997, "uuid": "266bc286-2d90-4b52-b71a-b2fc632caf1f", "comment": "Malware payload", "value": "6c6db7fabf43b3b7d926414342072db1cfeb9596c62c9448a1ad38c3ab991ca4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771158997, "uuid": "9f18430f-67c1-459e-ad60-cda2b6fd9ec2", "value": "T14D056C1BB2B374FDC557C43443ABCAB2A935B43902226E7B65C8D6303E16E701B19B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771158997, "uuid": "6a94681c-2ad8-48dd-a5c8-4ae945295004", "value": "12288:xflgkQCpfI4sE0D/PkxPrgztim+vyEvuhnrt2L7Vwb79bzhlldzuFz+Jyk/lqS48:tlDnQ4snkxPrgpGqE2hrt+u9BbB4x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771158997, "uuid": "91ec4767-fc89-46b5-808a-9158c135823b", "value": 850568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771158997, "uuid": "2e854037-4912-48bf-8cb8-effc54eb8b00", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38add605-0a6b-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771159105, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771159105, "uuid": "5c24ba1c-d098-4844-b0f5-0a99e0440a48", "comment": "Malware payload", "value": "2c9fc6860578acf1c6e8d0f391f49825", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771159105, "uuid": "3a84080a-1f68-4d11-bd14-cea6874266a0", "comment": "Malware payload", "value": "7b86f1e1139d7f15e0163c1b1a96bceff557613454a1cead677b28f922370956", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771159105, "uuid": "b4e90273-e1b2-45f9-a202-0496279eccb4", "value": "T129A31A56BD428F13C5C265F7F7AE02483B126BBCD6EA3142ED247FA127874DA0E276", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771159105, "uuid": "2c01a4ad-9657-49a4-a531-70b6534df597", "value": "1536:lojQp4FlyVLkKgEdkaN87+RvidFlXCwfEKnwVxZOa5f1Xttlc1BEkTSf1O:AqclyeATN8qi3VCwfEKqbZJz1O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771159105, "uuid": "a23eccc0-da87-4af2-82f8-46d292634140", "value": 102800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771159105, "uuid": "e1e12856-5e98-41ef-902b-a6a7fc724250", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b42a2528-0a6f-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771161030, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771161030, "uuid": "a0cfb5c3-2af0-4beb-9736-10e8fdebf1c5", "comment": "Malware payload", "value": "43444b78024c32e11ac02cfc4f1edee2", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771161030, "uuid": "f9e163ab-4440-422e-9a23-2ac3ff964d22", "comment": "Malware payload", "value": "e1e04cc4713e0d53d7596622b452ac1ed56eaebff81a59a984ae8e305138e78d", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771161030, "uuid": "9e983743-c676-4acf-b445-6b60b5d079a9", "value": "T106C31856B9529B12D4C325FAFA9F414933136FBCE3FA3102DD206F64278A8DB0E765", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771161030, "uuid": "d887bbc2-627f-4bf1-9d51-693bc7549db5", "value": "3072:7QGmm2I+Ry7IXbl9EaiEE1RRxdwFqdeZY5kt85i:ZmmKy7ILjEaiEE1RRxdcqd55e85i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771161030, "uuid": "b52df997-34d2-44e0-b91d-7200bfacdcbd", "value": 129580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771161030, "uuid": "cb370479-7e19-4fc7-a3a3-6cd978514536", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fad7fb46-0a6f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771161149, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771161149, "uuid": "cedca736-3f58-4ef1-8d14-b986e4c5df11", "comment": "Malware payload (Mirai)", "value": "446f2847fa55330ed3aeebeb6ca11ec9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771161149, "uuid": "6959f5b9-efdc-4ca3-a1d4-2dc3d29eee9e", "comment": "Malware payload (Mirai)", "value": "2b762725fe032315fdb8e3ac2451060dad259e175be86dea340228ec57377e11", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771161149, "uuid": "aa2db9f7-5ed8-42b4-964b-89b8b6c7b16e", "value": "T13C833A85B941AB22C7C116B7FF5F018D331597D8E2DA3212CD281FA5778B95B0E2B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771161149, "uuid": "52adf281-37bc-4c03-a46e-3f886ec0886f", "value": "1536:rzU6wS6ygK8s7lt3Dg648jJClbz6E/tU63x5W65xKZEGO9bcmCixMA0nzwK:rzUJ0R7bB4C8bz6sUk5W65xYugid0nzv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771161149, "uuid": "cdf34c0d-24f5-4055-aef1-91ab7fb072dd", "value": 81836, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771161149, "uuid": "e6b37d86-7225-4e18-8f54-796af8ae82c1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21ee83f6-0a70-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771161214, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771161214, "uuid": "028482d4-baac-44f3-812f-d3da09f6e9c1", "comment": "Malware payload", "value": "bed3434faa97e634a42d2ead36f9e2f6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771161214, "uuid": "f14dcaaa-5a3d-47db-89dd-97a476043ce3", "comment": "Malware payload", "value": "cdb0690dace0c8f548441901f74051dc23f1e22d0720743b66581426072c5ae0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771161214, "uuid": "d21fd237-f5d1-499a-9431-3dc48e098f7b", "value": "T158157C9CF786E0F1F26340F1025EDBF64534A12A5013FAF2EF452A6674727A16F1A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771161214, "uuid": "be90345a-231d-4755-a064-8a36ac3b2c4f", "value": "12288:wZsow2khDp4hU6hYQHkzLVgShXl0HyHyzxh4wWCDEPyI/LEDpJ0Lu:osow2KehU6hMzZ5T6GIxhhDQ4D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771161214, "uuid": "35d0577a-d716-4b1b-aa73-016b85f56903", "value": 878712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771161214, "uuid": "7bdc72bc-a15a-4eb6-bfd2-d07d217f07dd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b33c5aa-0a71-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771161606, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771161606, "uuid": "61d0a397-34e9-4466-94e3-250234b20e32", "comment": "Malware payload", "value": "34d72a2a2394ccb8914fae28b5323cb3", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771161606, "uuid": "909e8efd-d486-4626-9aa9-8ef4d8f6c1a1", "comment": "Malware payload", "value": "b7a6abdef6404bdd48180dc57546853e3375913553e1aae0d8cbb7fa7199b2c8", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771161606, "uuid": "4f3c6f62-1c51-4a5e-bb3a-1d410fbc8c52", "value": "T1E034F144F9CDA9BF6B576711CB6C67C014EFA4EC40C4D91ED30BEC10BA9129425A8F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771161606, "uuid": "cd57c20d-8e90-4756-a208-f032a489cb4d", "value": "6144:ya6MR/m/rrm4Bfl+oUtnmze8251WesVKBKS/6Y:yPem/e89anmzogM1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771161606, "uuid": "be0dddd9-9024-4a09-a5e9-282e38575db0", "value": 247902, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771161606, "uuid": "60f18361-bfd9-4574-a19a-1fe1bcd54917", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6fce2a58-0a71-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771161774, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771161774, "uuid": "3310fac1-694f-41cc-a193-f9d06a344807", "comment": "Malware payload", "value": "95d929fa2cd5ab401e4f4c203aff05de", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771161774, "uuid": "f5bcb6c0-d5c4-4589-a26f-f4c35942a832", "comment": "Malware payload", "value": "8f17f85085f91981089860713c6ae572db5bacc4f5338b1c58d06ae1b7bff5e2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771161774, "uuid": "beaadbc2-c8c0-40a3-af6f-ab5b24385643", "value": "T10FA32902BB0D0F43D1632DF02B7B1BE1979AFDA119F4A580652EFAC65274DF22142E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771161774, "uuid": "93f9c942-b2b9-40fe-a403-0847bb54a514", "value": "1536:YHPCvr9XSzNUf7jlAk/xNsa92Qav/HmdttzSa6wrW4Wi8fJFGPkdfmPoMVIN:YvYW47Ay2Qy8DxlW4WrfIFq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771161774, "uuid": "7829bd91-0c02-475d-a543-6fcf2240669c", "value": 102960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771161774, "uuid": "558a27b2-1ef1-482a-8e63-ac38e3533a70", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ab15a02-0a72-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771162115, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771162115, "uuid": "adb3b643-1555-4839-ada6-2d718d6dc809", "comment": "Malware payload (Mirai)", "value": "f2b3f627459670ae950985a081cadd31", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771162115, "uuid": "ad992016-38dc-4f3c-955b-e1c9f0a43208", "comment": "Malware payload (Mirai)", "value": "1f8080e52d6a3a5e3b51f0da10e612f67f961cb0bc0d0af01d83f91504bb1b0a", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771162115, "uuid": "cd536fde-dc13-456a-af3a-e917281b85bb", "value": "T1D2A30B52BD42CB13C5C225F7F7AF06583B166BBCD5EA3102ED20BFA127868DA0D276", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771162115, "uuid": "088da9d6-eca6-423d-a184-d02f471519be", "value": "1536:cdBBHnSmc6o25/MJ5+kgeMF8GSdTjdpu86aaAkdxUOwBy7qUbf9JpW4MSZDrO:mHK6bM29eMFa5ppu86aah3nblPPO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771162115, "uuid": "173199ff-c562-41c8-ac6d-3245f07f27b3", "value": 99244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771162115, "uuid": "a105e601-3a29-44be-a940-5b9bec04a904", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a301196-0a73-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771162597, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771162597, "uuid": "ff359df3-9a34-4e29-81da-47a6bba0c4c6", "comment": "Malware payload", "value": "238ada9fcf33267c42b21c0928265ecc", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771162597, "uuid": "230211ac-aa93-434e-aa56-3cce2f361698", "comment": "Malware payload", "value": "68ecdd1eb9ab0caff1227717b21508d64db456aeebd7552f6efc515ead7876c7", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771162597, "uuid": "b1c51815-ce2d-4e2f-8b80-ed090a5b700a", "value": "T10ED47D9CFE5E3C42E2D7E2789E4987E1732771E4D32391A33982434CD5CA9E98BB15", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771162597, "uuid": "d94ddc91-7e9e-48fb-8878-302e9e7aa693", "value": "12288:M9Itm6ipPtRMBM9LC3szgPKczh0E/3lFHAayaxDNw5nzUwRo:pYhpPtRy8zgPzzhl/JzI9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771162597, "uuid": "8be2d880-3a10-4ac4-9f8d-8a961ec01fa2", "value": 653472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771162597, "uuid": "b37b0194-9dbf-4910-bb80-e79d31b3f380", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "abfe2e53-0a73-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771162734, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771162734, "uuid": "188c7ad2-bf9c-45a8-8327-15e043c2871d", "comment": "Malware payload", "value": "a307a7a36d83b1353a7e11da495021fa", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771162734, "uuid": "2ef583cf-ed3d-4cd3-9737-94d188af0d8e", "comment": "Malware payload", "value": "9f7e1e06c79e61e09f1f9bed5722404cdf2371f213b57fc882c625175d0add7f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771162734, "uuid": "a0b63693-51ab-469e-9a02-44cc90384ec4", "value": "T15434E0CE44A1CF6F42A204AF811486951BBB7D92BB86DCC875B7C78C7D41C4E86BF0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771162734, "uuid": "b00f0812-7dd0-42b4-bfdb-8316e0b17b90", "value": "6144:0atp1/WbjU731HC66OnbI07dIxkfSS3N9ss4yJSTw4K:nf4cxV7I07dIx8aTJK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771162734, "uuid": "e042d6b3-57b6-4967-a52c-406ae8b69dfe", "value": 247877, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771162734, "uuid": "5a62fed8-d2f3-41e7-9b0d-15c76ff1ca42", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be6aa8c5-0a73-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771162765, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771162765, "uuid": "48888ae2-2267-4698-a369-315ebe9fa363", "comment": "Malware payload", "value": "69b92286ac097e9bf56acc3f80980c76", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771162765, "uuid": "daf334da-2b79-441d-8a42-ba201bdd349f", "comment": "Malware payload", "value": "ef285753d09b063e257d544c762173baf569469d77564026ced8c3efd0fc1505", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771162765, "uuid": "c6f946cb-c87c-4fe4-b2aa-927a28d8acd5", "value": "T1E88308327588582A210B028FD263336C70FFD8E2D611E5B6F6F922344BA5EE135B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771162765, "uuid": "25e49eae-3ef5-485d-b393-b11b6d904c66", "value": "1536:XJyp/QdMqpYJKNoCtpxD3t2ZSDXpdyr2pbnOWaQVN/:XEKltp9t2SX/yr2pbOWdVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771162765, "uuid": "c23e2200-98fb-453a-91c8-bb8bb07266d8", "value": 85051, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771162765, "uuid": "88488c5a-a0d0-4ccf-931b-32f3db2bac49", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f1ad08e-0a75-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771163572, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771163572, "uuid": "526dd65c-8384-4463-ad15-4a0e48c4a4ea", "comment": "Malware payload", "value": "91ca1464b6f3b823f785a9864f21dd70", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771163572, "uuid": "dd3170fb-5779-45c1-a1ee-93e37cf80ed8", "comment": "Malware payload", "value": "598f8eee7ec2822c9ebfcdd75debc7b014b19a70954e9d8e8767594a7d2d585e", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771163572, "uuid": "4d0b8856-ae86-438e-acb5-f48ddc62191d", "value": "T12EB32B16B992CB11C5C211BAFA9E514933136FBCE3EE3202DD206FA467474EB0E7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771163572, "uuid": "75dd55e9-60b7-4cda-b84c-66a91ab10385", "value": "3072:4z3aKMT94dcYOiwSbouaPwPfmgNChlquXd36Oj:eaKMTo9Oifb/aY3mKCh1cOj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771163572, "uuid": "1a803442-b3ba-47fc-8e02-ae38e85eeb98", "value": 110724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771163572, "uuid": "8307dbb3-4eba-4056-b98e-e90c85ba4879", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f10ab2a-0a77-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771164350, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771164350, "uuid": "87f51d14-a948-4567-9aa8-5576d9c7c245", "comment": "Malware payload", "value": "55f8a1579384610ddf97222b2739e202", "object_relation": "md5", "Tag": [ { "name": "FantasyHub", "colour": "#5523a2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771164350, "uuid": "199345f1-f0bd-426d-afb6-cbcb9f6a7079", "comment": "Malware payload", "value": "65c2b0f050f6151512cc6d14455819cc81d954a113f1bcb520fcfc8afb598799", "object_relation": "sha256", "Tag": [ { "name": "FantasyHub", "colour": "#5523a2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771164350, "uuid": "5ca51f14-1c48-4336-bbcb-e75093fd46f4", "value": "T193963382F31A083ED47715314DABA33626556C26CD93EB0B64A8371C7C7B2D98E99F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771164350, "uuid": "4929c34a-6ad5-484e-8927-673ad7453c39", "value": "196608:M2q/YMlA9D5jizAZfl2qGJ/nWMtTLMMtGPWQTXgj6D8Y1xFsY/9Q:M2QYMl0Iodlo/nRTDVYXgje8eFsCQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771164350, "uuid": "d485c834-fbf3-422b-8485-8a5451ec3857", "value": 9300126, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771164350, "uuid": "cd5a3d0e-446e-42d2-8995-9305d73ea678", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "92d9a009-0a77-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771164410, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771164410, "uuid": "75fd1a16-c696-414f-8b56-0bbcc8a869b9", "comment": "Malware payload", "value": "96623b1109d3b6dec598018520784fb7", "object_relation": "md5", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771164410, "uuid": "2ab1f6e9-2bb3-4de9-8ea2-d667c8aac7ff", "comment": "Malware payload", "value": "4f6afc69c3151bbc71f86417dbf8cca0eed89b47c66d3e0d8712bfd4eba87a00", "object_relation": "sha256", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771164410, "uuid": "1eeccafb-2e15-45a5-a4d1-4821324068dc", "value": "T13F34125283A140E9EB60C052B834B93EEF6A32CDD574A5E7AF051F55DB13E35E3286", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771164410, "uuid": "61ca3971-7c76-4ce4-a3a9-335759af551f", "value": "6144:cA88oDqoQ8PcP/gDGWQajcb4TaK4FachY4qm6ysB:cAIqN8o/QGdaYaaRam6JB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771164410, "uuid": "2d269663-775c-4e76-b1f1-2e40e8b272e7", "value": 239691, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771164410, "uuid": "1dd5dac1-8dd4-4835-82da-24e84721eb2e", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0937461-0a77-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771164514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771164514, "uuid": "81266536-ae94-4392-877d-9a26c28f0679", "comment": "Malware payload", "value": "a0f0ecf62dd2e9de2420161242e9ddfe", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771164514, "uuid": "02900c88-5bac-465c-a046-112585732cc3", "comment": "Malware payload", "value": "2df731ccffaac8a175a9c410f0351ba537771c6873345ccc14090c7c10bdfc32", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771164514, "uuid": "40aff1a7-267f-4e53-b66f-efbc47c6609f", "value": "T1ACD3971A7F228F6EF269877447F74E30A75937D61AE1D684E1ACE5401F202CE141FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771164514, "uuid": "d14c6843-f8b6-4bfb-8a1e-e0bf65680b0a", "value": "3072:jCea3EgQCUTiYH7J+hyOJlVUkibOsQnS0Kmug:jCeEEgoGRVZUSsj0Kmug", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771164514, "uuid": "bd90ddef-07c7-4d99-bf74-94d2c7ad1aaa", "value": 132108, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771164514, "uuid": "fbfea80d-a758-4247-b096-5c026a1040e4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76142136-0a78-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771164791, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771164791, "uuid": "ad85b83b-3655-4de3-92f7-a7b5ab2e515b", "comment": "Malware payload (Mirai)", "value": "6ea0054661f077fdd3f1bd85f4fff86a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771164791, "uuid": "2f75c415-4787-4be2-aadd-08555ca8e656", "comment": "Malware payload (Mirai)", "value": "e94a8820cb2e4fab6f809bf1e380dac2dec18924155168c3ed5ddc2abc498a74", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771164791, "uuid": "56a72039-36a6-4836-9cca-206784037b12", "value": "T125043B46AA419A23C1D31776FADF424633239B64D3DB330589286BF43F8779E0E676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771164791, "uuid": "cd2b97f6-fd5f-430b-a24f-c06bdf1878cb", "value": "3072:JDbQlL2zA21MkWIx3aa/W8Uj2ZF1Dp5BmyycnzueaGZbXM/9GVob0:RQlK7WW3auW8Uj2ZjDl5ueaGZDM/9kog", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771164791, "uuid": "fbc3c4a7-1a95-4cb6-9531-6f36efd272b5", "value": 173943, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771164791, "uuid": "98dc68cc-f925-4ba1-af85-bf0df0500e40", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ace224e-0a78-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771164853, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771164853, "uuid": "5cb512d6-39e0-473c-b82c-615650ff897c", "comment": "Malware payload (Mirai)", "value": "ef99bd28c9a4991c2002273f318f06ed", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771164853, "uuid": "065106c5-ae5c-46c9-bc89-1ee44ff2efaa", "comment": "Malware payload (Mirai)", "value": "8e588b95c688f0cd54d687c684cf10c86fa6f65c8359a3e5355dc3cf77272897", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771164853, "uuid": "b71ad0fd-9d15-459e-9a57-e1ed67cb7e37", "value": "T1F1933A85BD419622C2C116B7FF5F028D371697E8D2EA3202CD281FA4778B85B0E6B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771164853, "uuid": "2da368cd-0820-4002-bebc-aaad01ecfb73", "value": "1536:v/mbfzFJ9S1c9MzRnKXRdxjvE5iDelbzh8t4l8m5+8UmMWLrTkO+QG66AuvhnzW:v/mbfBJN92Rgzfabzh842m5+8UmMGlWw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771164853, "uuid": "ad88cfe7-89d9-4dbf-aa5c-6c0e3f5b098e", "value": 91600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771164853, "uuid": "ee170f3d-9991-4c7c-816c-2d683d954424", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "573b9825-0a7e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771167317, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771167317, "uuid": "c48165ab-f874-4b46-a9c2-42d1b3b48841", "comment": "Malware payload (Mirai)", "value": "684730dc6abe661507904d3f07fe18d5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771167317, "uuid": "6530218a-238b-4751-8473-8d85b8765c93", "comment": "Malware payload (Mirai)", "value": "2155a25a53435682a11b378e3a9310d51d481a5598dbe4c4ba092dc5b3314cb1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771167317, "uuid": "4ff989fa-4a49-45f3-af48-23ddcd338c8e", "value": "T1B9F33A46A6405A23C1D21777FADF42463322DBA4D3DB73059928BBF43F8769E0E276", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771167317, "uuid": "6c4d5830-83b3-4984-acdc-946ae4b1fe1c", "value": "3072:7jGDiJp9Nss21M1B6HywadywW977OTuhCPPqKqOnzYWigZQM/9VpJS95:7uiJpUmBmfawwW977OKhw7YWigaM/9Va", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771167317, "uuid": "42486332-e16d-4f8e-8581-d5cfa51eebd7", "value": 168370, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771167317, "uuid": "27570e52-46ff-454d-8359-7fcc4dd43187", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "57450255-0a7e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771167317, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771167317, "uuid": "1ef5910a-4ea6-4501-afa6-ddac9d651911", "comment": "Malware payload (Mirai)", "value": "41ef44e0c5895d1d582edbc71f1ecf0e", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771167317, "uuid": "25753ee0-4f18-49e7-98fb-b421e95bd370", "comment": "Malware payload (Mirai)", "value": "12144c665553ebe004a5f21d684c82ccfa16b2212387a1bdb61557c36cb6d6d5", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771167317, "uuid": "612f5edf-1338-4aa6-bdd5-ed22372c8ed5", "value": "T1C9A3E91E6E11DFBEF759C2344BB78A21966833C62AF0D5C5D26CDA041E6028E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771167317, "uuid": "e24dddca-c066-4132-904f-dd1d5996e87f", "value": "1536:CYdymg/CIwxiT6ob7JnqvLy9u+9ubWugMsXkEu+8Z08tEeZewnzg9r:/drNIwxiLJnqvLUXkEu+208OwnzgF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771167317, "uuid": "866c2629-1be1-448b-92f0-2004fb455720", "value": 102392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771167317, "uuid": "40f8583a-0da2-41ff-b07d-eca028169369", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79cd58e1-0a7e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771167375, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771167375, "uuid": "b4af707f-8632-4a57-9245-250a21c33e48", "comment": "Malware payload (Mirai)", "value": "38f0e49cf4175c39d40db7e77e032626", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771167375, "uuid": "6c5a57dd-2527-4ac1-a31d-3bd9b766824e", "comment": "Malware payload (Mirai)", "value": "29fbf26b6d1ff197bd9483d371709c50ad49383c0b0920b3db515d76a8aded14", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771167375, "uuid": "2d45825a-ac87-4af9-842a-774e8b8d7750", "value": "T1DA834B85B9416A26C3C106BBFF5F018D331597D8E2DA3312CD281FA5778B85B0E2B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771167375, "uuid": "5bacdcfc-56de-4716-9908-389e79bb643a", "value": "1536:gHdijeJXcWR9zzLaRUMermtmGOelbzh8t4lzlT5r6hBT1lEGON3mJm0uv6nzw:gHdiSJx9/LWmm5bbzh84n5r6hFLRu6n0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771167375, "uuid": "ba32aeef-5f79-4900-8d2d-22972612731c", "value": 84884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771167375, "uuid": "573fc067-7e8d-4ed3-84d1-145a20ca0544", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9eb1835d-0a7e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771167436, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771167436, "uuid": "20746844-64f5-405e-a138-e56b19cd130d", "comment": "Malware payload (Mirai)", "value": "c729a358c2e7814259bb171d4130abd8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771167436, "uuid": "b74f6b8a-68ba-46a3-8cfc-1a85a0cd184e", "comment": "Malware payload (Mirai)", "value": "fff82053caa61c62742f955608e1f72cdef875aebb2996ade9f7b59cfdbe105b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771167436, "uuid": "6bf15036-49a6-4955-b32d-55745aa37b6c", "value": "T14FA30807BB514EFBC8ABDD3356A91B0534DC950B22E96B363A70D428F54F18B4AD38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771167436, "uuid": "98fc404d-f29d-45c6-94a1-f3797a3a5fc4", "value": "1536:ECP1jzxm3MOctWzYkJTvvE5c+u4ocF1F6lOvYA3F4ZD18YSplnzq6:Eo1jzuckzRnE5cA6lO93F4mLnzq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771167436, "uuid": "b1d3c669-ef26-468d-89c3-6e0bf70da38f", "value": 105864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771167436, "uuid": "d8866b52-bfb5-4db6-995e-b51cf5154e7f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ebeb3f2d-0a8f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771174867, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771174867, "uuid": "a0da1c97-e72e-473f-ba1d-2be430b4c387", "comment": "Malware payload (Mirai)", "value": "1c65dd8a27a16585da31c5c96e722f29", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771174867, "uuid": "72c00bc0-28aa-4344-a238-ca9668db949e", "comment": "Malware payload (Mirai)", "value": "92811f349693156f35a989936099e1a0255b9b43c3909c6a96000083d0bba7a5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771174867, "uuid": "3de4ed35-9035-4bb7-8b54-cf774a060abc", "value": "T192B3070AFB614EF7D86FDD3746A80B0534DC550B22E96B363670C528F64B24B5AE38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771174867, "uuid": "0cf203ff-1086-423c-8f47-a413362d69c2", "value": "1536:2EvZCJ87cFTaT3vxyf5cvvEHz2wVNZcl0ailFiwTlslfZmALSW9PnzZ:26ZCJ870Ta7pNnETNRriBf9ZnzZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771174867, "uuid": "49c0a12e-9991-406a-ae33-5a5ebabc9b89", "value": 114104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771174867, "uuid": "a7a5fd24-cf0a-4874-ac13-5424d07a8e49", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33af66cd-0a90-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771174988, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771174988, "uuid": "a28f5159-b5c7-4a9e-b20e-4525360af1cb", "comment": "Malware payload (Mirai)", "value": "ccb5eeae38c924345589821ff75d85d5", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771174988, "uuid": "52ab98f6-35c0-4915-909d-ef9eccf8b2b7", "comment": "Malware payload (Mirai)", "value": "00def227563541e149047cdbbf610401cbce51c60cec8d3b4c1d1ef77d6869c2", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771174988, "uuid": "96bfacfa-c7a0-4de7-a358-628f180f85b4", "value": "T1C5833A85BD416A22C3C116B7FF5F428D371597E8D2EA3302D9281FA4778B85B0E6B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771174988, "uuid": "384cceb6-26c4-4554-8827-c5ccb4aebaa6", "value": "1536:CAr1UwMyniL7amRPWdFO9seClbz6E/tU6k5KHrCSKmbTkOhON6cvHvnzW:CArqQ27FqsCvbz6sUl5KHrCSb5cnnzW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771174988, "uuid": "2caea662-72e7-4aa5-a901-213e555ecda7", "value": 88568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771174988, "uuid": "5433a1d4-3968-4ba1-aa9b-b22f7f518966", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33d8902f-0a90-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771174988, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771174988, "uuid": "36dfd4d5-5db9-41c6-b5a6-71e86c944d76", "comment": "Malware payload (Mirai)", "value": "e3ff4f8ba9c3643ef4eb170c202f5d4c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771174988, "uuid": "c0a74415-f8e3-420f-87b6-5a6cd5292da1", "comment": "Malware payload (Mirai)", "value": "6585ea24e2c64da44c1a33dd7bb625cc8b5513dbc0e4e3f286903aa3d5f2267a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771174988, "uuid": "ff8ad924-9fe8-443f-9814-4d996bcce79d", "value": "T1F8B3D91E6E219FBEF359C23547B78A31A35833C626F1D685D26CE9051E6038E241FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771174988, "uuid": "6024e131-f569-4b27-b9b8-1f998ccc673b", "value": "3072:gxuWkO/fUfJ+/NDnvTa14l2HTWgXVnTBnz3u:gxsaUx+lPayoTrXd93u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771174988, "uuid": "e121ef5a-d9e4-4004-a555-172215feeede", "value": 114072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771174988, "uuid": "789811ba-02ee-459c-bfc2-8e4df922ef7f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "82a4a340-0a97-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771178127, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771178127, "uuid": "d33e1322-c714-4da8-a8ff-f4f26e639396", "comment": "Malware payload", "value": "21f0c71c7bfcefea02aba14c96784181", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771178127, "uuid": "d44e0a61-65cf-4c79-8c87-fa6e0cca05c2", "comment": "Malware payload", "value": "8b957387bae51ea60e52bed200446976db6bf29cf8bd5969cccf2f48638a331a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771178127, "uuid": "4e354a80-ae88-48d1-a3a3-925b8f7faea4", "value": "T19EC3F606770D4E03D1633DF02B3B2BE0839FFD9228A5A680B52EBEC952719F21545E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771178127, "uuid": "e14114ca-f14e-43b6-a14e-16a304081224", "value": "1536:NykMWMCjHx1qh0iBYawq+08MglpGvAFDpIaR30GuWzqc/aYNXsNFH:NygxjHxR7ajV8HvFXUFH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771178127, "uuid": "87b70c87-1804-4779-a1a0-076f21f2607f", "value": 126580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771178127, "uuid": "d59791ae-3e4f-4a95-b40c-82733d5026c2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b29af162-0a9c-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771180355, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771180355, "uuid": "3694ca44-0c66-495a-831b-747b54405d77", "comment": "Malware payload", "value": "b55355556a548fd42bcc990e8de82713", "object_relation": "md5", "Tag": [ { "name": "CZE", "colour": "#977c93", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771180355, "uuid": "7e52b8b4-b2ad-4f8d-b7b9-5b13af3885ff", "comment": "Malware payload", "value": "9ecf76d9fc252698333543964408bff2c6db638f25edc3fdc773d7e4a396020e", "object_relation": "sha256", "Tag": [ { "name": "CZE", "colour": "#977c93", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771180355, "uuid": "260a41e7-5539-4786-b790-32784d13c33a", "value": "T19CF3C8069F520FBBC86FDD7302E90A1139CCA81716A53B757674ED28F60A58B49E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771180355, "uuid": "b0f5efdb-e070-40ea-a5eb-6627e8c7810f", "value": "3072:1dFwBgnT/kWhExi+MPU/+hYacAfcsqpay:1dFweExmZWsf0pD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771180355, "uuid": "484ee14e-6475-4aae-8684-41a025aa8d8e", "value": 165896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771180355, "uuid": "f266c527-735a-43d7-bc31-4dc97545639f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "168b15e8-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1771180595, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771180595, "uuid": "003e302a-0e7f-4e53-8784-958b348e5c7c", "comment": "Malware payload", "value": "c73634570e4a70d7040fabcad0ea2773", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771180595, "uuid": "19801a48-ace9-48eb-b211-69a782c8649a", "comment": "Malware payload", "value": "a7576c44f6f25dc87fcc803b0e463e385c13a048169536a7c7a5de804b0891ef", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771180595, "uuid": "fc69b3a3-3a64-4863-86ba-7bd39a4978f2", "value": "FA43124623662AB6857149F0A3FCFF8EE24A3E58CFF55C197C107A28A93136D2CC481C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771180595, "uuid": "b6049b6f-6414-4087-a21b-453781800298", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyqe:yYI0ARqw1qAEv7UIFM8oJorFquyje", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771180595, "uuid": "6a791895-6f10-4f06-b00e-bdd25f066c3c", "value": 57920, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62e71c39-0a9f-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771181510, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771181510, "uuid": "58ad8cae-3e83-489b-8b5f-c1d9bd28c2ca", "comment": "Malware payload", "value": "e2885a353f8b6acf81cc04464964970d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771181510, "uuid": "9f002205-fb16-45e3-ab29-d58551143946", "comment": "Malware payload", "value": "35da258e88ce760cf947b49b4369ec3fc9f4b4cbed21335d851886ddf49287c4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771181510, "uuid": "f6b95c18-a3da-4a5a-bae1-5388052fd37c", "value": "T1A0F3871A2F228F6FF269837047F74D30975976DA26E1D684E2ACD5501F202CE641FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771181510, "uuid": "92c875bd-d341-4cb5-b8f8-824dc521a0b3", "value": "1536:Jh70UQaO/voPGR2r/gcgIIgyeW+VQ20JVeoT7ZpUS2x9sFtt0J000000b2b:Jhu+G4r/XgIIgpQ29SpUhx98te2b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771181510, "uuid": "9f96abfd-e6fe-4768-beba-b1e4f65ea5ed", "value": 163080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771181510, "uuid": "2289ee31-299b-4239-8c9c-781c1b58c473", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1771183939, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771183939, "uuid": "c11a055b-180c-4e1f-b02c-bc1f94f2825a", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771183939, "uuid": "2dc842dc-1ff3-4f52-ae6e-7209fa8b108b", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771183939, "uuid": "39e73fea-4f25-439e-9bdb-4986b02391cc", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771183939, "uuid": "0a161d57-8745-4712-a658-2c68a48e998d", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771183939, "uuid": "93ee7f02-a391-4a68-b205-fd94389cedd9", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6183e94d-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1771191136, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771191136, "uuid": "d84c55e2-ce89-44c3-83b5-ec30ac5aeb4d", "comment": "Malware payload", "value": "dbc520ea1518748fec9fcfcf29755c30", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771191136, "uuid": "39354e44-06ec-4bb3-b305-64dbd1d20257", "comment": "Malware payload", "value": "c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771191136, "uuid": "783399da-4d6a-4ef7-98ed-7770e53d264c", "value": "D2D3128AA536ED54F11B9AF11B3B99907DF5659E82F4D4A4A2CF634312CC343FA4070B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771191136, "uuid": "5522221e-e8a5-41bb-99e7-ac7263db0d82", "value": "3072:Nc4i0agsmw3Py5CP5HM8EVLUuYtgB5H6oz:Nc/0aNPy54EVAhOae", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771191136, "uuid": "1cb0bd47-1dd1-4f97-93e4-306e888e89da", "value": 132860, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a29e50-7fd8-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1771191918, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771191918, "uuid": "84ead025-93ef-487a-8e82-1f769c17bc1f", "comment": "Malware payload (Hajime)", "value": "9b6c3518a91d23ed77504b5416bfb5b3", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771191918, "uuid": "62127eeb-892e-4360-8285-4d40746e21f8", "comment": "Malware payload (Hajime)", "value": "a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771191918, "uuid": "f047197b-93f7-4da1-b14e-e05ec03eb6fd", "value": "6D7312E017B517CC1371A8353BED205E9128223972AE35302E97528DF957703BAB2DBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771191918, "uuid": "ed7d4a00-e206-4b5e-b3f9-c376c19f0b78", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQAvcYkFtZTjzBht5:8D+CAXFYQChaAUk5ljnQssL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771191918, "uuid": "a0c38a57-0dda-482e-a95c-03660fd4cbaf", "value": 80280, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771113907, "uuid": "fca3cc6d-0a01-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn7.mondlicht.coupons/amdkmdag", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771114632, "uuid": "acadb5f7-0a03-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.24.138:48174/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771114686, "uuid": "ccb29cc5-0a03-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://de-partner-node.mondlicht.coupons/amdkmdag", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771114877, "uuid": "3ebffccd-0a04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.141.131:54327/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771115174, "uuid": "f00856ca-0a04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.176.71.232:41468/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771115227, "uuid": "0f32d2f9-0a05-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.163.66:46394/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771115656, "uuid": "0f621687-0a06-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.202.91.191:41337/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771115718, "uuid": "33f45da7-0a06-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.202.91.191:41337/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771115948, "uuid": "bd557d15-0a06-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.190.24:46787/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771116254, "uuid": "7360fe1c-0a07-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.163.66:46394/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771116786, "uuid": "b09bb477-0a08-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://app.terrepure.coupons/amdkmdag", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771117632, "uuid": "a90e3465-0a0a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.151.237:43099/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771117927, "uuid": "5892db60-0a0b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.18/iran.armv7l", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771117928, "uuid": "597e1685-0a0b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.18/iran.powerpc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771117928, "uuid": "5988abd6-0a0b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.18/iran.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771117928, "uuid": "59970908-0a0b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.18/iran.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771117928, "uuid": "59a1dc65-0a0b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.18/iran.armv6l", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771117929, "uuid": "59a64379-0a0b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.18/iran.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771117929, "uuid": "59a66ac1-0a0b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.18/iran.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771117929, "uuid": "59a7068b-0a0b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.18/iran.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771117929, "uuid": "59b11571-0a0b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.18/iran.arc", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771117929, "uuid": "59ba0f41-0a0b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.18/iran.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771117943, "uuid": "625e578b-0a0b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.18/iran.armv5l", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771117985, "uuid": "7b735441-0a0b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.18/iran.sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771117985, "uuid": "7b89e15c-0a0b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.18/iran.armv4l", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771118228, "uuid": "0c3c6c48-0a0c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.107.120:38216/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771118536, "uuid": "c37ef826-0a0c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.220.28.184:35037/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771118536, "uuid": "c3a49f96-0a0c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.236.150.129:12164/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771118536, "uuid": "c3b1f43f-0a0c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.41.212.5:8082/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771118536, "uuid": "c3c60597-0a0c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.173.194.255:8080/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771118536, "uuid": "c3c71d07-0a0c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.80.244.130:24472/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771118537, "uuid": "c4456eb0-0a0c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.71.3.17:32701/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771118538, "uuid": "c4b78efb-0a0c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.152.36.80:9000/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771118587, "uuid": "e26e04d7-0a0c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://18.142.177.189/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771118590, "uuid": "e3bf7959-0a0c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://8.148.251.204:2095/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771118647, "uuid": "06024cb8-0a0d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://8.148.251.204:801/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771118947, "uuid": "b8dc196b-0a0d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.151.237:43099/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771119193, "uuid": "4b5dded4-0a0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.145.36:60459/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771119375, "uuid": "b7eeb754-0a0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.107.203:36894/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771119967, "uuid": "188b8dda-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.242/github", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120085, "uuid": "5ef84796-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.55/w.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120089, "uuid": "61559051-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.55/manji.arm4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120089, "uuid": "61604ca1-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.55/manji.i686", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120089, "uuid": "61872b01-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.55/manji.arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120089, "uuid": "619639f0-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.55/manji.dbg", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120089, "uuid": "619b1f99-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://epic-tharp.130-12-180-55.plesk.page/w.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120089, "uuid": "619d750e-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.55/manji.i486", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120090, "uuid": "61b64ffa-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.55/manji.mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120090, "uuid": "61f37e9d-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.55/manji.spc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120090, "uuid": "6206b6d0-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.55/c.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120090, "uuid": "620bbdc0-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.55/manji.sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120090, "uuid": "6224f598-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.55/manji.apk", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120090, "uuid": "623cbcd2-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.55/manji.arm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120091, "uuid": "624ce88d-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.55/manji.arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120091, "uuid": "6256991b-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://epic-tharp.130-12-180-55.plesk.page/manji.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120091, "uuid": "62594ef4-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.55/manji.mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120091, "uuid": "6283c51e-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://clever-poincare.130-12-180-55.plesk.page/manji.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120091, "uuid": "62a67f8f-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://clever-poincare.130-12-180-55.plesk.page/manji.dbg", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120091, "uuid": "62aef4b5-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://clever-poincare.130-12-180-55.plesk.page/manji.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120091, "uuid": "62afaa67-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://epic-tharp.130-12-180-55.plesk.page/manji.i486", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120091, "uuid": "62b02bf1-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://epic-tharp.130-12-180-55.plesk.page/manji.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120091, "uuid": "62b62c66-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://epic-tharp.130-12-180-55.plesk.page/manji.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120091, "uuid": "62c70a2b-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://clever-poincare.130-12-180-55.plesk.page/manji.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120091, "uuid": "62ce403f-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://epic-tharp.130-12-180-55.plesk.page/manji.apk", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120092, "uuid": "62e8b192-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://epic-tharp.130-12-180-55.plesk.page/manji.spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120092, "uuid": "6332b597-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://epic-tharp.130-12-180-55.plesk.page/manji.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120092, "uuid": "634e7f00-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://clever-poincare.130-12-180-55.plesk.page/manji.apk", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120093, "uuid": "63e0a60c-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://epic-tharp.130-12-180-55.plesk.page/manji.ppc440", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120094, "uuid": "64370be4-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://clever-poincare.130-12-180-55.plesk.page/manji.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120094, "uuid": "643ab461-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://epic-tharp.130-12-180-55.plesk.page/wget.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120094, "uuid": "6441e420-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://clever-poincare.130-12-180-55.plesk.page/manji.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120094, "uuid": "64446733-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://clever-poincare.130-12-180-55.plesk.page/manji.ppc440", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120094, "uuid": "6469e286-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://epic-tharp.130-12-180-55.plesk.page/manji.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120094, "uuid": "649f0fab-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://clever-poincare.130-12-180-55.plesk.page/manji.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120094, "uuid": "64a4a7e1-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://clever-poincare.130-12-180-55.plesk.page/w.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120094, "uuid": "64a5ec8a-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://epic-tharp.130-12-180-55.plesk.page/manji.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120095, "uuid": "64c8407b-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://clever-poincare.130-12-180-55.plesk.page/wget.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120095, "uuid": "64d444f3-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://clever-poincare.130-12-180-55.plesk.page/manji.i486", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120095, "uuid": "64d7fb0d-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://epic-tharp.130-12-180-55.plesk.page/manji.i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120095, "uuid": "64d9cdf5-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://epic-tharp.130-12-180-55.plesk.page/manji.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120095, "uuid": "64dacf19-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://clever-poincare.130-12-180-55.plesk.page/manji.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120095, "uuid": "64e0866c-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://clever-poincare.130-12-180-55.plesk.page/manji.arm4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120095, "uuid": "65047be9-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.55/manji.ppc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120095, "uuid": "6505d42c-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.55/manji.ppc440", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120095, "uuid": "6515c397-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.145.36:60459/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120095, "uuid": "65172583-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://clever-poincare.130-12-180-55.plesk.page/c.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120095, "uuid": "652771c0-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://epic-tharp.130-12-180-55.plesk.page/c.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120095, "uuid": "652b5e27-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://epic-tharp.130-12-180-55.plesk.page/manji.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120095, "uuid": "652b922f-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.55/wget.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120095, "uuid": "652bd66c-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.55/manji.m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120095, "uuid": "6540de6c-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://clever-poincare.130-12-180-55.plesk.page/manji.spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120095, "uuid": "6540e05c-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://clever-poincare.130-12-180-55.plesk.page/manji.i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120095, "uuid": "65434a27-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://epic-tharp.130-12-180-55.plesk.page/manji.dbg", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120095, "uuid": "65435d82-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.55/manji.x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120096, "uuid": "654c16f8-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://clever-poincare.130-12-180-55.plesk.page/manji.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120096, "uuid": "658bcb28-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://epic-tharp.130-12-180-55.plesk.page/manji.arm4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120096, "uuid": "65bd723b-0a10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://clever-poincare.130-12-180-55.plesk.page/manji.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120986, "uuid": "77f29ab8-0a12-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.18/cat.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120986, "uuid": "7806cde1-0a12-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://epic-tharp.130-12-180-55.plesk.page/manji.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120986, "uuid": "781b1bca-0a12-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7719759462/Yd6HwRw.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120986, "uuid": "78228817-0a12-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.69/client_armv5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120986, "uuid": "783dd78d-0a12-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.18/iran.mipsrouter", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120995, "uuid": "7d62883f-0a12-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.107.203:36894/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120995, "uuid": "7d67a69e-0a12-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.107.120:38216/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120995, "uuid": "7d6bbc20-0a12-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.53.25:53077/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771120996, "uuid": "7df4636d-0a12-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.150.9:47058/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771121045, "uuid": "9b6db461-0a12-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://quick-verify.terrepure.coupons/amdkmdag", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771121352, "uuid": "52537c8b-0a13-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.36.89:58605/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771121832, "uuid": "705ae56d-0a14-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.118.241:45902/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771122257, "uuid": "6d66e406-0a15-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.150.9:47058/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771122495, "uuid": "fbac1a28-0a15-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.34.137:45771/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771122795, "uuid": "ae42bb0d-0a16-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.204.139:34238/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771122927, "uuid": "fcd9f8a8-0a16-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.214.46:58882/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771123394, "uuid": "136c3d1b-0a18-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.163.131.4:38142/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771123455, "uuid": "377c3699-0a18-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.118.241:45902/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771123455, "uuid": "37bccef9-0a18-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.75.59:51483/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771123633, "uuid": "a1afe6f3-0a18-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.49.169:56183/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771124226, "uuid": "035490bc-0a1a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://static-assets-srv.stillesee.coupons/amdkmdag", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771125186, "uuid": "3f779ac1-0a1c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.204.139:34238/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771125260, "uuid": "6b72d362-0a1c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.105.204:44059/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771125374, "uuid": "af5cc62c-0a1c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.37.232:34168/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771125789, "uuid": "a6ada778-0a1d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.214.46:58882/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771126035, "uuid": "3963f592-0a1e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.236.19:41196/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771126331, "uuid": "ea098d89-0a1e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.49.109:53162/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771126629, "uuid": "9b4113a9-0a1f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.37.232:34168/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771126815, "uuid": "0a71cfe7-0a20-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.241.34:33472/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771126815, "uuid": "0a917b28-0a20-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.68.130:59921/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771127232, "uuid": "02eb61d5-0a21-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.127.227.177:32936/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771127414, "uuid": "6f7598b7-0a21-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.236.19:41196/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771127711, "uuid": "20461646-0a22-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.15.186:58944/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771128074, "uuid": "f8d055ce-0a22-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.149.131:35498/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771128613, "uuid": "3a51a6f2-0a24-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.253.91.154:16826/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771128793, "uuid": "a57d68a1-0a24-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.127.227.177:32936/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771128975, "uuid": "11ff20d0-0a25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.27.117:54961/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771128976, "uuid": "12aea33a-0a25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.182.156:59933/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771129026, "uuid": "30158c75-0a25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://go.stillesee.coupons/amdkmdag", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771129332, "uuid": "e6cad65d-0a25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.68.130:59921/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771129695, "uuid": "bf15cd95-0a26-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.220.209:58569/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771129696, "uuid": "bf8c6b30-0a26-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.220.117:32784/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771129696, "uuid": "bf9c92f9-0a26-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.187.21:50778/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771130054, "uuid": "94f38743-0a27-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.253.91.154:16826/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771130228, "uuid": "fc840949-0a27-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.241.34:33472/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771130674, "uuid": "069b9e79-0a29-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.142.59:36554/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771131134, "uuid": "18a53085-0a2a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.55.135:38119/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771131199, "uuid": "3f491074-0a2a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.202.35:59053/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771131316, "uuid": "85403fd8-0a2a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.27.117:54961/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771131609, "uuid": "3422b105-0a2b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.172.101:56685/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771132117, "uuid": "62d4efde-0a2c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.106.162:58097/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771132453, "uuid": "2b3088f7-0a2d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.142.59:36554/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771132816, "uuid": "03591b34-0a2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.55.135:38119/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771132993, "uuid": "6c9d5d94-0a2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.172.101:56685/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771133415, "uuid": "68778aa5-0a2f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.220.117:32784/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771133711, "uuid": "18d23c05-0a30-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.50.175:50779/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771133718, "uuid": "1cdd6efb-0a30-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.106.162:58097/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771134075, "uuid": "f179a4ba-0a30-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.210.1:51757/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771134554, "uuid": "0f3b67bd-0a32-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.173.19:59763/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771134614, "uuid": "331fd942-0a32-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.132.251:37474/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771135034, "uuid": "2d96f894-0a33-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.5.57:43119/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771135152, "uuid": "736ddb06-0a33-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.50.175:50779/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771135214, "uuid": "98be033e-0a33-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.173.19:59763/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771135266, "uuid": "b7d9f9e8-0a33-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://108.168.10.70:58895/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771135636, "uuid": "944aafbe-0a34-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.132.251:37474/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771135750, "uuid": "d7ef2826-0a34-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.14.195:45352/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771136045, "uuid": "87c5ed1d-0a35-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://tracking.vifespoir.coupons/amdkmdag", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771136647, "uuid": "ee91703c-0a36-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.5.57:43119/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771136648, "uuid": "ef1f9faa-0a36-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.69.125:48954/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771137090, "uuid": "f70cae79-0a37-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.49.203:36586/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771137255, "uuid": "59278d2a-0a38-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.20.85:38522/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771137606, "uuid": "2a599944-0a39-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://direct-gateway-77.vifespoir.coupons/amdkmdag", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771137917, "uuid": "e3a07b4b-0a39-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.104.99:45505/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771138457, "uuid": "2593720b-0a3b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.69.125:48954/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771138567, "uuid": "67417fe1-0a3b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://b3-alpha.federleicht.coupons/amdkmdag", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771138868, "uuid": "1a96068b-0a3c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://internal-promo-link.federleicht.coupons/amdkmdag", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771139049, "uuid": "86589d6f-0a3c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.55/manji.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771139049, "uuid": "8658a11e-0a3c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.55/manji.i586", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771139049, "uuid": "8658a383-0a3c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.55/manji.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771139049, "uuid": "8658a62c-0a3c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.18/iran.aarch64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771139286, "uuid": "13e5801c-0a3d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.205.208:58219/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771139412, "uuid": "5ecd79fc-0a3d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.104.99:45505/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771139468, "uuid": "800fd395-0a3d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.180.93:44501/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771139525, "uuid": "a2064ea4-0a3d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://hop.greenenergygroup.org/LunX.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: lunex", "colour": "#cb4cba", "exportable": true, "hide_tag": false }, { "name": "pw-lunex", "colour": "#A9A8CD", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771139525, "uuid": "a25b8be9-0a3d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://allcheat.netlify.app/tExecute.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771139526, "uuid": "a27e5aeb-0a3d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://galaxis.pw/File/G%D0%B0l%D0%B0xis.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "Password: Galaxis", "colour": "#5c0f4a", "exportable": true, "hide_tag": false }, { "name": "pw-galaxis", "colour": "#b8b9c4", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771139527, "uuid": "a386f9f4-0a3d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://cryptershgs.lovestoblog.com/arquivo_20260107045307.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771139528, "uuid": "a3a727a0-0a3d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://crypter5ds.lovestoblog.com/arquivo_20260120101822.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771139528, "uuid": "a3c8376c-0a3d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://orion.onl/%D0%92%D0%BE%D0%BEtsta%D1%80%D1%80%D0%B5%D0%B3%D1%83%D0%BEss.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: ryos", "colour": "#51c7ee", "exportable": true, "hide_tag": false }, { "name": "pw-ryos", "colour": "#201b00", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771139540, "uuid": "ab21481a-0a3d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/UnlockedSine/lod/releases/download/looo/loader.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771139541, "uuid": "ab7aaae3-0a3d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://cyr.crossfitmissionbay.com/Cyrex.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: cyrex", "colour": "#c7fa8e", "exportable": true, "hide_tag": false }, { "name": "pw-cyrex", "colour": "#d542d1", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771139571, "uuid": "bd6f3b65-0a3d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://drp.greenenergygroup.org/LunX.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: lunex", "colour": "#cb4cba", "exportable": true, "hide_tag": false }, { "name": "pw-lunex", "colour": "#A9A8CD", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771140254, "uuid": "5472183c-0a3f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.232.137.101:54819/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771140822, "uuid": "a784d2b7-0a40-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.19.173:36019/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771140855, "uuid": "bae3d2fc-0a40-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.205.208:58219/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771140917, "uuid": "e0094daf-0a40-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.180.93:44501/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771141327, "uuid": "d44e062d-0a41-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.199.191:41171/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771141329, "uuid": "d533449c-0a41-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.30.194:53301/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771141626, "uuid": "8651d8f1-0a42-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://x7p9a.nebula4tango.coupons/x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771141877, "uuid": "1c3dcfdb-0a43-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.19.173:36019/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771142053, "uuid": "84f82244-0a43-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.30.194:53301/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771142595, "uuid": "c7d98776-0a44-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.31.248:42525/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771142835, "uuid": "57487d1a-0a45-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.145.207:53657/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771142956, "uuid": "9f370e11-0a45-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.202.35:59053/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771143126, "uuid": "047d7693-0a46-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://harvest.nebula4tango.coupons/x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771143370, "uuid": "95b41367-0a46-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.59.224.108:43020/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771143497, "uuid": "e186b512-0a46-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.230.165.223:42477/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771143974, "uuid": "fdba7fb7-0a47-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.145.207:53657/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771144032, "uuid": "20750527-0a48-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.31.248:42525/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771144035, "uuid": "227aeb0c-0a48-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.189.243:35291/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771144217, "uuid": "8e95f173-0a48-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.83.222:52070/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771145465, "uuid": "76de4bc4-0a4b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://nebula-vv1ng.nebula4tango.coupons/x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771145472, "uuid": "7aef3a9a-0a4b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.83.222:52070/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771145490, "uuid": "85b27c93-0a4b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.directfiles.link/U6730J7SU/cherry387.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771145707, "uuid": "06c39f93-0a4c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://q4m8v.rocket7flora.coupons/x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771145773, "uuid": "2e415a39-0a4c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.239.176:40873/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771145832, "uuid": "51abac91-0a4c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.116.127:45182/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771145887, "uuid": "72040a3f-0a4c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.45.21:43705/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771146136, "uuid": "06546d53-0a4d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.29.224:55710/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771146434, "uuid": "b81ff927-0a4d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.251.196:47259/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771147026, "uuid": "194453cb-0a4f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://lantern.rocket7flora.coupons/x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771147035, "uuid": "1e4fa039-0a4f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.116.127:45182/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771147389, "uuid": "f1566e28-0a4f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.251.196:47259/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771147389, "uuid": "f1b8044b-0a4f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.29.224:55710/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771147632, "uuid": "822fe2f1-0a50-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.133.9:50203/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771149426, "uuid": "afceda8d-0a54-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.135.140:56936/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771149486, "uuid": "d3625ec0-0a54-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://r0cket-rnix.rocket7flora.coupons/x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771150333, "uuid": "cbfaa594-0a56-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.18.205:37164/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771150333, "uuid": "cc702f16-0a56-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.251.2:33740/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771150393, "uuid": "f01b2550-0a56-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.251.2:33740/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771151049, "uuid": "76cc6bb1-0a58-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.250.29:46255/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771151113, "uuid": "9cf9d83d-0a58-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.135.140:56936/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771151174, "uuid": "c1387d61-0a58-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.250.240:49208/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771151710, "uuid": "00bb138e-0a5a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://t6k2n.amber2vivid.coupons/x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771151775, "uuid": "27cfbf75-0a5a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.158.182:58817/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771152427, "uuid": "ac96659b-0a5b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.191.22.109:48633/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771152612, "uuid": "1a74a89e-0a5c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://cascade.amber2vivid.coupons/x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771153092, "uuid": "3900547e-0a5d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.241.68:39863/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771153145, "uuid": "588c41cc-0a5d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://arnb3r-0rb.amber2vivid.coupons/x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771153209, "uuid": "7e3a54f5-0a5d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.3.239:52270/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771153394, "uuid": "ec9a759b-0a5d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.121.166:46837/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771153575, "uuid": "586a2c90-0a5e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.243.204:41874/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771153755, "uuid": "c3fd6910-0a5e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.217.84:36598/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771153809, "uuid": "e3f48b10-0a5e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.229.233:50685/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771154107, "uuid": "9598123c-0a5f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.18.205:37164/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771154345, "uuid": "23c75d73-0a60-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://m9r3p.jungle9orbit.coupons/x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771154494, "uuid": "7c5d9dc9-0a60-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.246.99.21:41109/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771154646, "uuid": "d71e955d-0a60-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.121.166:46837/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771154709, "uuid": "fc44f04b-0a60-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://outpost.jungle9orbit.coupons/x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771154774, "uuid": "23228e32-0a61-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.246.99.21:41109/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771154826, "uuid": "421c9aa7-0a61-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.3.239:52270/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771155190, "uuid": "1b47c976-0a62-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.217.84:36598/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771155191, "uuid": "1bcc4472-0a62-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.48.108:36406/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771155248, "uuid": "3d8453b3-0a62-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.243.204:41874/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771156386, "uuid": "e456603c-0a64-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://jung1e-rnate.jungle9orbit.coupons/x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771156455, "uuid": "0d7a1cee-0a65-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.11.28:58736/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771156688, "uuid": "97e092a1-0a65-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.109.167.55:34258/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771156808, "uuid": "dfea5947-0a65-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.48.108:36406/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771157296, "uuid": "02a0c3f9-0a67-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.161.160.225:59674/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771157655, "uuid": "d8448931-0a67-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.19.245:34788/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771157708, "uuid": "f8304dde-0a67-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.22.164:39097/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771157767, "uuid": "1b701ad8-0a68-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.191.22.109:48633/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771158307, "uuid": "5cf38ce3-0a69-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://z3n7a.matrix8piano.coupons/x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771158728, "uuid": "57ff99a5-0a6a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://signal.matrix8piano.coupons/x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771158915, "uuid": "c7b3bb17-0a6a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.19.245:34788/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771158972, "uuid": "e93c05ef-0a6a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.142.78.13:44175/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771159095, "uuid": "32dfd6d8-0a6b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.66.232:34766/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771159588, "uuid": "586aab83-0a6c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.142.78.13:44175/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771159752, "uuid": "ba4456b7-0a6c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.22.164:39097/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771160010, "uuid": "54172d02-0a6d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.254.188.178:43139/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771160226, "uuid": "d4e62710-0a6d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://rnatr1x-vvay.matrix8piano.coupons/x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771160413, "uuid": "44263483-0a6e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.32.192:50222/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771160831, "uuid": "3d7d11bc-0a6f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.3.77:42290/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771161127, "uuid": "edb3183c-0a6f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.15.205:47608/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771161247, "uuid": "3550d610-0a70-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.130.42:39679/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771161548, "uuid": "e9294406-0a70-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.142.85.206:53155/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771161679, "uuid": "36f0b057-0a71-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.142.85.206:53155/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771161854, "uuid": "9f6c6481-0a71-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.254.188.178:43139/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771162275, "uuid": "99f57932-0a72-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.161.160.225:59674/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771162275, "uuid": "9a5c225e-0a72-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.144.249:40171/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771162394, "uuid": "e12eff10-0a72-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.32.192:50222/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771162530, "uuid": "3264fa93-0a73-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.3.77:42290/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771162991, "uuid": "45083c71-0a74-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://k15kqv93.fluxdrive.digital/?=check&&actmn=lrTHndEmrsnOSzKh", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771163288, "uuid": "f5e57ce8-0a74-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://c9t5q.breeze1falcon.coupons/x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771163594, "uuid": "ac898b89-0a75-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.144.249:40171/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771163648, "uuid": "cc91519e-0a75-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.155.49:51938/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771163709, "uuid": "f0a9fd10-0a75-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://glacier.breeze1falcon.coupons/x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771164070, "uuid": "c82f0d9d-0a76-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://br33ze-llnk.breeze1falcon.coupons/x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771164091, "uuid": "d4a5d3a8-0a76-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.190.134.254:50401/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771164311, "uuid": "5777945c-0a77-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.118.190:37915/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771164548, "uuid": "e4c71272-0a77-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://p8x1m.shadow6nectar.coupons/x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771164614, "uuid": "0c551877-0a78-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.163.172:58550/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771164615, "uuid": "0cb940fb-0a78-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.190.134.254:50401/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771164669, "uuid": "2d24de60-0a78-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.119.33:49972/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771164792, "uuid": "76480f04-0a78-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.69/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771164853, "uuid": "9ad6b9de-0a78-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.69/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771164964, "uuid": "dd333caf-0a78-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://api.files.link/v1/p/96f0b8e0-c009-4a8f-a5c7-e48907896135", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "TrustConnect", "colour": "#EFEA3F", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771165086, "uuid": "25bff5be-0a79-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://oracle.shadow6nectar.coupons/x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771165147, "uuid": "49ee0c52-0a79-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.183.162:56683/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771165334, "uuid": "b974796f-0a79-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.223.144.89:56240/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771165593, "uuid": "53f0e4c2-0a7a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.56.60:40886/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771165813, "uuid": "d713c213-0a7a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.201.66:56131/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771166729, "uuid": "f9035181-0a7c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.180.178.148:57429/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771166831, "uuid": "360872ca-0a7d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.155.49:51938/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771167073, "uuid": "c5ce1c1a-0a7d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://orion.onl/%D0%92%D0%BE%D0%BEtst%D0%B0%D1%80%D1%80e%D0%B3ui.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: ryos", "colour": "#51c7ee", "exportable": true, "hide_tag": false }, { "name": "pw-ryos", "colour": "#201b00", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771167080, "uuid": "ca092ac0-0a7d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://bolixtiol.lol/downloads", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: bluys", "colour": "#d0fede", "exportable": true, "hide_tag": false }, { "name": "pw-bluys", "colour": "#5a7771", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771167081, "uuid": "cb11f493-0a7d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://krp.greenenergygroup.org/LunX.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: lunex", "colour": "#cb4cba", "exportable": true, "hide_tag": false }, { "name": "pw-lunex", "colour": "#A9A8CD", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771167082, "uuid": "cba21609-0a7d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://rfk.crossfitmissionbay.com/Cyrex.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compresed", "colour": "#35ce58", "exportable": true, "hide_tag": false }, { "name": "Password: cyrex", "colour": "#c7fa8e", "exportable": true, "hide_tag": false }, { "name": "pw-cyrex", "colour": "#d542d1", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zrip", "colour": "#32ab11", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771167186, "uuid": "09625579-0a7e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://shad0vv-rnix.shadow6nectar.coupons/x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771167187, "uuid": "0a1e0637-0a7e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://qa7sawuw.wildframe41.digital/?=check&&actmn=sQCUUaHHKnfndNqC", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771167315, "uuid": "56949706-0a7e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.30.152.240/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771167317, "uuid": "57424d88-0a7e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.30.152.240/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771167317, "uuid": "57486419-0a7e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.30.152.240/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771167375, "uuid": "79d88458-0a7e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.30.152.240/arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771167376, "uuid": "7a8996e5-0a7e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.105.70:55596/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771167437, "uuid": "9eb66b00-0a7e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.30.152.240/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771167674, "uuid": "2c55a507-0a7f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.159.154:60923/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771168147, "uuid": "464f46ee-0a80-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://r2k6d.fusion2harbor.coupons/x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771168986, "uuid": "3a5bcde1-0a82-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://formula.fusion2harbor.coupons/x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771168990, "uuid": "3c621344-0a82-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.105.70:55596/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771169528, "uuid": "7d6ec9bc-0a83-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://fus10n-vvex.fusion2harbor.coupons/x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771170143, "uuid": "ebdb7286-0a84-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.157.55.28:39040/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771170192, "uuid": "09230759-0a85-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.157.55.28:39040/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771170383, "uuid": "7ae25678-0a85-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.71.112:54943/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771171394, "uuid": "d5c19239-0a87-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.109.215.86:60613/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771171820, "uuid": "d36d27cf-0a88-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.209.204:38784/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771171820, "uuid": "d383783b-0a88-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.179.230.28:47601/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771172116, "uuid": "83e0cc33-0a89-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.194.136:38152/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771172356, "uuid": "12bc7682-0a8a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.142.150:53509/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771172657, "uuid": "c66cf7c6-0a8a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.164.83:47667/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771172772, "uuid": "0b04c462-0a8b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.109.215.86:60613/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771172948, "uuid": "7413f388-0a8b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://static-data-srv.snapbargain.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771173138, "uuid": "e51b60f1-0a8b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.73.248.207:34540/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771173384, "uuid": "7769c1f0-0a8c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://allcheat.netlify.app/vwExecute.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771173449, "uuid": "9e74adb9-0a8c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/acid/random.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771173486, "uuid": "b474945c-0a8c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://auth88.snapbargain.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771173557, "uuid": "deb8e55f-0a8c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.194.136:38152/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771173557, "uuid": "df0ee253-0a8c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.179.230.28:47601/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771173732, "uuid": "46fb1965-0a8d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.142.150:53509/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771173789, "uuid": "68cf8abc-0a8d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.71.112:54943/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771173789, "uuid": "693fb483-0a8d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.82.223:36580/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771173846, "uuid": "8ae93b3e-0a8d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.mintvoucher.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771174338, "uuid": "b04e6944-0a8e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.164.83:47667/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771174450, "uuid": "f31467e7-0a8e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.232.95:46202/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771174694, "uuid": "847aa8af-0a8f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.73.248.207:34540/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771174746, "uuid": "a381e6eb-0a8f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://secure-gateway-app.mintvoucher.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771174868, "uuid": "ebf1ba9c-0a8f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.69/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771174986, "uuid": "3294bb77-0a90-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.69/massload", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771174988, "uuid": "33bd134c-0a90-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.69/arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771174988, "uuid": "33bd199f-0a90-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.69/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771174988, "uuid": "33c45966-0a90-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.69/arm4", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771174988, "uuid": "33e3aae4-0a90-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.69/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771175226, "uuid": "c1606c0c-0a90-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://user-node4.mintvoucher.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771175234, "uuid": "c631f60c-0a90-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.82.223:36580/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771175296, "uuid": "eb652084-0a90-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.236.176:39135/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771175532, "uuid": "781e8fac-0a91-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.63.242:33237/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771175646, "uuid": "bc08e590-0a91-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://api.dealharbor.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771176378, "uuid": "70064cce-0a93-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.236.176:39135/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771176439, "uuid": "948a9e86-0a93-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.177.65:53291/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771177035, "uuid": "f810b2dd-0a94-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.63.242:33237/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771177746, "uuid": "9fdd1108-0a96-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-track-delivery.dealharbor.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771177810, "uuid": "c613e4a5-0a96-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.52.161.157:53077/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771177927, "uuid": "0b98d55b-0a97-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.207.2:55432/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771178527, "uuid": "7131eb0b-0a98-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.158.182:58817/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771178899, "uuid": "4f038129-0a99-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.18.21:44133/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771179201, "uuid": "029c0216-0a9a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.144.13:49258/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771179426, "uuid": "88dbbca2-0a9a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://srv-90.dealharbor.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771179752, "uuid": "4b31a9ff-0a9b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.59.6.215:47297/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771180207, "uuid": "5ac836a1-0a9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://go.perkparcel.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771180276, "uuid": "83d770b3-0a9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.27.51:56576/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771180582, "uuid": "3a15d3c8-0a9d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.195.49:39503/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771180639, "uuid": "5c487adb-0a9d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.144.13:49258/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771180806, "uuid": "bfd01b10-0a9d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://internal-promo-zone.perkparcel.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771181466, "uuid": "48d578e3-0a9f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://edge-cache2.perkparcel.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771181468, "uuid": "49ee64dc-0a9f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.59.6.215:47297/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771181831, "uuid": "228a5ebe-0aa0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://ws.deal4harbor.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771182155, "uuid": "e3dd716a-0aa0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.138.80:39334/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771182367, "uuid": "61ae3032-0aa1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://gypisiondev.lol/downloads", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: bluys", "colour": "#d0fede", "exportable": true, "hide_tag": false }, { "name": "pw-bluys", "colour": "#5a7771", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771182368, "uuid": "6298f8a2-0aa1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://devc.ws/%D0%92%D0%BE%D0%BEtstapp%D0%B5%D0%B3%D1%8564.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: ryos", "colour": "#51c7ee", "exportable": true, "hide_tag": false }, { "name": "pw-ryos", "colour": "#201b00", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771182370, "uuid": "63ba4cbe-0aa1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://hideplo.com/Velost%D0%B0%D1%80%D1%80%D0%B5%D0%B3%20v1.0.2.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "password: 2026", "colour": "#a65f14", "exportable": true, "hide_tag": false }, { "name": "pw-2026", "colour": "#4d3d79", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771182390, "uuid": "6fc62f39-0aa1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://qwt.greenenergygroup.org/LunX.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: lunex", "colour": "#cb4cba", "exportable": true, "hide_tag": false }, { "name": "pw-lunex", "colour": "#A9A8CD", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771182412, "uuid": "7cbadd84-0aa1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://tak.crossfitmissionbay.com/Cyrex.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: cyrex", "colour": "#c7fa8e", "exportable": true, "hide_tag": false }, { "name": "pw-cyrex", "colour": "#d542d1", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771182428, "uuid": "8683fb35-0aa1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://remote-access-v1.deal4harbor.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771182444, "uuid": "8f96b7d6-0aa1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.10.221:53616/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771182624, "uuid": "fae21246-0aa1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.61.59:49603/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771182802, "uuid": "6519e4e2-0aa2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.141.55:58860/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771183101, "uuid": "17793f9a-0aa3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.92.45:38343/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771183465, "uuid": "f05cbb29-0aa3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.27.51:56576/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771183643, "uuid": "5a88616b-0aa4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.150.85:59516/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771183745, "uuid": "9767b00e-0aa4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://beta-node.deal4harbor.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771183939, "uuid": "0b0773a4-0aa5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.129.122:59320/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771184177, "uuid": "989534e8-0aa5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.61.59:49603/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771184237, "uuid": "bc4b4ab8-0aa5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.92.45:38343/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771184539, "uuid": "707207b8-0aa6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.10.221:53616/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771184539, "uuid": "70be46ce-0aa6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.4.127.77:35426/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771184766, "uuid": "f7e85373-0aa6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.130/buildx_x64.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771184904, "uuid": "4a367637-0aa7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.70.50:52213/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771185096, "uuid": "bcb715d3-0aa7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.150.85:59516/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771185381, "uuid": "665e9685-0aa8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.70.50:52213/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771185665, "uuid": "0f838104-0aa9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/ps1/her.ps1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771185787, "uuid": "587ab8e3-0aa9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://app.perk9parcel.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771185803, "uuid": "61f57be0-0aa9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.187.21:50778/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771186025, "uuid": "e67dee5b-0aa9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.130/nk.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771186097, "uuid": "1113f419-0aaa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.4.127.77:35426/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771186395, "uuid": "c2ef58ca-0aaa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.133.222:58660/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771186464, "uuid": "ec1de3c2-0aaa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.253.113:36296/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771186809, "uuid": "b9919247-0aab-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://direct-web-client.perk9parcel.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771187167, "uuid": "8f38ee3f-0aac-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.130/zx.exe", "Tag": [ { "name": "a3dacb", "colour": "#a7477c", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771187296, "uuid": "dbc63c12-0aac-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.159.146:34556/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771187407, "uuid": "1dc2b51f-0aad-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://cloud-st1.perk9parcel.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771187781, "uuid": "fcc1dca5-0aad-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.10.96:33113/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771187839, "uuid": "1f8e1847-0aae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.206.103:45577/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771187957, "uuid": "65bb6dd1-0aae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.121.169:39859/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771188078, "uuid": "ae02af86-0aae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.122.53:48595/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771188079, "uuid": "ae85c7ce-0aae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.5.100:51165/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771188130, "uuid": "ccce03f5-0aae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.235.189:46323/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771188309, "uuid": "37fa3f46-0aaf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.69.117:56201/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771189026, "uuid": "e3219649-0ab0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.151/data.powerpc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771189027, "uuid": "e3a6a25f-0ab0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.151/data.arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771189027, "uuid": "e3b597a2-0ab0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.151/data.arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771189030, "uuid": "e5855a9f-0ab0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.151/data.mipsel-uclibc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771189031, "uuid": "e60d82b8-0ab0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.151/data.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771189031, "uuid": "e63f70e1-0ab0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.151/data.arm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771189032, "uuid": "e6c0face-0ab0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.151/data.aarch64", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771189032, "uuid": "e6e15646-0ab0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.151/data.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771189033, "uuid": "e6f85a35-0ab0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.151/data.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771189033, "uuid": "e702b672-0ab0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.151/data.arm4", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771189037, "uuid": "e9be8d1e-0ab0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.151/data.mips-uclibc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771189043, "uuid": "ed41065a-0ab0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.151/data.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771189085, "uuid": "06728896-0ab1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://ns1.bonus3basket.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771189086, "uuid": "06d03356-0ab1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://e3ys4ixz.mint2layer.digital/?=check&&actmn=pZDYRwwOFaRsvnEM", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771189151, "uuid": "2db8fcde-0ab1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.121.169:39859/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771189336, "uuid": "9bf14734-0ab1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.133.131:49296/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771189773, "uuid": "a0217794-0ab2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.142.242:54130/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771189998, "uuid": "262204c3-0ab3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.69.117:56201/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771190045, "uuid": "428e48fe-0ab3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://global-site-check.bonus3basket.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771190537, "uuid": "67c6816f-0ab4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.234.22:32803/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771190724, "uuid": "d6e0d18e-0ab4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.133.131:49296/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771191136, "uuid": "ccd1fb4e-0ab5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.180.92.159:60255/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771191199, "uuid": "f231a472-0ab5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.81.23:51752/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771191246, "uuid": "0e5e5266-0ab6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://m-link.bonus3basket.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771191316, "uuid": "38175c47-0ab6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.155.154:58863/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771191379, "uuid": "5d808b96-0ab6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.100.99:34813/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771191435, "uuid": "7f047c68-0ab6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.142.242:54130/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771191612, "uuid": "e87ce33d-0ab6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.133.139:50233/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771191856, "uuid": "79cd3169-0ab7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.80.148.94/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771191856, "uuid": "79dc5bed-0ab7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.234.174.41:8081/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771191856, "uuid": "79de1ee8-0ab7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.151.0.172:1555/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771191856, "uuid": "79df2386-0ab7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.41.115.31:8084/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771191856, "uuid": "7a03f4aa-0ab7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.151.0.172:1556/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771191857, "uuid": "7a63d5a0-0ab7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.118.51:2000/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771191859, "uuid": "7ba32bac-0ab7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.126.151:2001/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771191918, "uuid": "9eeba602-0ab7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.194.74:35893/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771191919, "uuid": "9f20359c-0ab7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.255.245.170:61653/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771191920, "uuid": "9fb6afd6-0ab7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.236.150.83:12164/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771191933, "uuid": "a7a82a2a-0ab7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.28.141.39:25252/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771191967, "uuid": "bbc67337-0ab7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.132.167.9/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771191967, "uuid": "bbea4cd8-0ab7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://18.142.177.189:8443/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771191967, "uuid": "bc2765eb-0ab7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.91.54.176:50001/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771191973, "uuid": "bf7876b9-0ab7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.234.22:32803/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771191977, "uuid": "c222300e-0ab7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.72.191.140:8028/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771192158, "uuid": "2dd055f0-0ab8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.2.25:45678/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771192277, "uuid": "74945c6e-0ab8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.101.180:40677/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771192873, "uuid": "d7df8f34-0ab9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.100.99:34813/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771192987, "uuid": "1c3a7d3c-0aba-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.155.154:58863/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771193298, "uuid": "d55ad41a-0aba-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.180.92.159:60255/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771193405, "uuid": "153aca4b-0abb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67/hola.sh", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771193649, "uuid": "a699806d-0abb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.161.93/cat.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771193650, "uuid": "a7517617-0abb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.161.93/israel.sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771193650, "uuid": "a752c6aa-0abb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.161.93/israel.armv4l", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771193650, "uuid": "a7594534-0abb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.161.93/israel.i686", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771193650, "uuid": "a759a3aa-0abb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.161.93/israel.armv7l", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771193650, "uuid": "a75c6149-0abb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.161.93/israel.powerpc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771193650, "uuid": "a76456fb-0abb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.161.93/israel.mipsel", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771193650, "uuid": "a767aae8-0abb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.161.93/israel.sparc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771193650, "uuid": "a769630a-0abb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.161.93/israel.x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771193650, "uuid": "a76ce14d-0abb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.161.93/israel.i586", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771193650, "uuid": "a76cf777-0abb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.161.93/israel.mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771193651, "uuid": "a77c5220-0abb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.161.93/israel.armv5l", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771193651, "uuid": "a77c9b60-0abb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.161.93/israel.i486", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771193651, "uuid": "a77ca4ff-0abb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.161.93/israel.m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771193651, "uuid": "a77dbb18-0abb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.189/HideChaotic/sora.ppc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771193651, "uuid": "a77ef415-0abb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.189/HideChaotic/sora.x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771193651, "uuid": "a77ef83a-0abb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.189/HideChaotic/sora.arc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771193651, "uuid": "a77f0921-0abb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.189/HideChaotic/sora.mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771193651, "uuid": "a78638a7-0abb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.189/HideChaotic/sora.spc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771193651, "uuid": "a78926d2-0abb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.189/ohshit.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771193651, "uuid": "a78a10ab-0abb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.189/HideChaotic/sora.x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771193651, "uuid": "a7930ab4-0abb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.189/HideChaotic/sora.sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771193651, "uuid": "a793ce86-0abb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.189/HideChaotic/sora.arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771193651, "uuid": "a79624d4-0abb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.189/HideChaotic/sora.m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771193651, "uuid": "a7982a15-0abb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.189/HideChaotic/sora.mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771193651, "uuid": "a79a1c32-0abb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.189/HideChaotic/sora.i686", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771193651, "uuid": "a7a4924d-0abb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://145.249.109.243/Documents/BookingCom.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771193706, "uuid": "c8ad88ab-0abb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.161.93/israel.armv6l", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771193836, "uuid": "163ae9b5-0abc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.37.136:36317/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771193885, "uuid": "336ef183-0abc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/6498132466/368wwrW.bat", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771193950, "uuid": "5a0981e0-0abc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.2.25:45678/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771194009, "uuid": "7d235e99-0abc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.130.84:40479/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771194009, "uuid": "7d558245-0abc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.142.42:39563/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771194672, "uuid": "089ad3b9-0abe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/6723359323/ZNY48if.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771194785, "uuid": "4bfac929-0abe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev.flash5saver.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771194921, "uuid": "9cf993b2-0abe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.33.134:57208/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771195026, "uuid": "db0fe354-0abe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://update-system-srv.flash5saver.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771195218, "uuid": "4d98de3f-0abf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.213.39:39741/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771195446, "uuid": "d56a646c-0abf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn-303-web.flash5saver.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771195532, "uuid": "08ef772c-0ac0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.138.187:39811/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771196175, "uuid": "87ee5b53-0ac1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.33.134:57208/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771196225, "uuid": "a643a919-0ac1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/6498132466/v5yNskI.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771196780, "uuid": "f08d004d-0ac2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.138.187:39811/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771198093, "uuid": "ff6d3e57-0ac5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.89.53:58038/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771198275, "uuid": "6ba0ebdb-0ac6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.186.39:41465/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771198458, "uuid": "d92bedeb-0ac6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.186.39:41465/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771198637, "uuid": "43d4bb05-0ac7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.187.101.203:38703/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771198925, "uuid": "ef79f505-0ac7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8546428528/IyVls5r.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771199412, "uuid": "11c8280e-0ac9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.89.53:58038/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771199654, "uuid": "a19e1103-0ac9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.181.8.16:34977/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771199716, "uuid": "c6ba3ad7-0ac9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.24.11:38448/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771199944, "uuid": "4ebdd327-0aca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/cha/file.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771191964, "uuid": "ba205036-0ab7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "101.132.167.9", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771179724, "uuid": "3ac37f02-0a9b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "106.59.6.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771119365, "uuid": "b1c3f7d2-0a0e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.107.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771145825, "uuid": "4d0b005a-0a4c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.116.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771121344, "uuid": "4d419674-0a13-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.36.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771184885, "uuid": "3eb163fe-0aa7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.70.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771173124, "uuid": "dcc9987e-0a8b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.73.248.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771127224, "uuid": "fdff2d0a-0a20-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "111.127.227.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771154464, "uuid": "6a77b182-0a60-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.246.99.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771132084, "uuid": "4f0ba3e3-0a2c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.106.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771195505, "uuid": "f8a87a06-0abf-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.138.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771159984, "uuid": "44d9423b-0a6d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.254.188.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771167363, "uuid": "72edec44-0a7e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.228.105.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771167306, "uuid": "511dd7a8-0a7e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.30.152.240", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771143485, "uuid": "da382805-0a46-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.230.165.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771162265, "uuid": "943dbbae-0a72-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.144.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771117625, "uuid": "a483f3cd-0a0a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.151.237", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771145884, "uuid": "70411b89-0a4c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.45.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771118224, "uuid": "09fec7d9-0a0c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.107.120", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771153744, "uuid": "bd49b8f6-0a5e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.217.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771114624, "uuid": "a7fecbf0-0a03-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.24.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771174444, "uuid": "efc6806d-0a8e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.232.95", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771191605, "uuid": "e42a7aff-0ab6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.133.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771198264, "uuid": "651f8b39-0ac6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.186.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771128063, "uuid": "f221a913-0a22-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.149.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120984, "uuid": "771dfa67-0a12-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.150.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771164065, "uuid": "c4ecdb4b-0a76-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.190.134.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771189744, "uuid": "8f0a55ed-0ab2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.193.142.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771186384, "uuid": "bc5fd255-0aaa-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.133.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771140784, "uuid": "90b37100-0a40-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.19.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771122904, "uuid": "ef56149a-0a16-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.210.214.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771119185, "uuid": "4676f555-0a0e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.220.145.36", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771130644, "uuid": "f4f143b7-0a28-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.142.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771137064, "uuid": "e78ed6bd-0a37-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.241.49.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771165565, "uuid": "430c0008-0a7a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.241.56.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771135744, "uuid": "d4a31ad9-0a34-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.14.195", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771127705, "uuid": "1cc942ed-0a22-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.15.186", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771135023, "uuid": "26d6818f-0a33-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.5.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771191964, "uuid": "ba20219b-0ab7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.72.191.140", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771156684, "uuid": "95e3874d-0a65-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.109.167.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771171385, "uuid": "d049cb32-0a87-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.109.215.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771153084, "uuid": "33eed14f-0a5d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.185.241.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771191964, "uuid": "ba203525-0ab7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.91.54.176", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771194006, "uuid": "7b2c6628-0abc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.130.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771126024, "uuid": "3318fe72-0a1e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.236.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771192145, "uuid": "25e27c7a-0ab8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.13.2.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771131124, "uuid": "12c0f71c-0a2a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.13.55.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771171805, "uuid": "caad7b61-0a88-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.179.230.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771160824, "uuid": "3984b6a3-0a6f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.3.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771141324, "uuid": "d271467a-0a41-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.30.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771191906, "uuid": "97841134-0ab7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.28.141.39", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771134064, "uuid": "eb165bf7-0a30-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.210.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771177924, "uuid": "09d3a334-0a97-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.207.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771164306, "uuid": "54d3a067-0a77-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.118.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771122484, "uuid": "f4c90a59-0a15-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.34.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771188063, "uuid": "a5546e86-0aae-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.5.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771182424, "uuid": "8420c844-0aa1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.45.10.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771182605, "uuid": "efef1072-0aa1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.61.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120085, "uuid": "5ecc3836-0a10-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "130.12.180.55", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771118524, "uuid": "bca8595d-0a0c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "134.236.150.129", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771191906, "uuid": "97840aea-0ab7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "134.236.150.83", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771193644, "uuid": "a3d2426a-0abb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "145.249.109.243", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771118524, "uuid": "bca8c4e1-0a0c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "152.173.194.255", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771164784, "uuid": "7199a238-0a78-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "158.94.208.69", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771161544, "uuid": "e6527c82-0a70-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "163.142.85.206", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771137905, "uuid": "dc8dce67-0a39-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.148.104.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771144207, "uuid": "889789a2-0a48-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.83.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771193644, "uuid": "a3d11f48-0abb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.148.189", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771118585, "uuid": "e0aadfaf-0a0c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "18.142.177.189", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771170125, "uuid": "e1092171-0a84-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.157.55.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771163645, "uuid": "cacbfb8e-0a75-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.155.49", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771180565, "uuid": "2fd42837-0a9d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.195.49", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771141324, "uuid": "d2716089-0a41-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.199.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771187765, "uuid": "f3395f0a-0aad-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.10.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771155184, "uuid": "177ce984-0a62-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.48.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771180265, "uuid": "7cfd253a-0a9c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.27.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771142584, "uuid": "c17bf6bb-0a44-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.31.248", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771194905, "uuid": "93606374-0abe-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.33.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771183625, "uuid": "4fa219c5-0aa4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.150.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771125244, "uuid": "61e4e7ff-0a1c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.105.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771175284, "uuid": "e3f32eed-0a90-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.122.236.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771173784, "uuid": "65e3087c-0a8d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.82.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771149424, "uuid": "ae2939e6-0a54-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.135.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771191844, "uuid": "728f7887-0ab7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.234.174.41", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771119964, "uuid": "16c892b3-0a10-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.109.200.242", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771118524, "uuid": "bca8dfbe-0a0c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.152.36.80", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771198625, "uuid": "3c6a058b-0ac7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.187.101.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771131124, "uuid": "12c1425f-0a2a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.202.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771175524, "uuid": "737028c3-0a91-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.63.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771157284, "uuid": "fba0beca-0a66-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.161.160.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771115644, "uuid": "080f7a9f-0a06-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.202.91.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771118524, "uuid": "bca8ab76-0a0c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.80.244.130", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771129684, "uuid": "b8684e6b-0a26-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.187.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771157644, "uuid": "d1e306c8-0a67-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.19.245", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771170364, "uuid": "6fbd8cd7-0a85-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.71.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771183085, "uuid": "0dc12c09-0aa3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.92.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771139465, "uuid": "7e3c0d16-0a3d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.180.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771129684, "uuid": "b86851f2-0a26-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.220.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771150324, "uuid": "c6e90d45-0a56-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.251.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771186444, "uuid": "e0381983-0aaa-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.253.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771165144, "uuid": "487e5106-0a79-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.183.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771126324, "uuid": "e5bd8b98-0a1e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.49.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771165325, "uuid": "b4029b57-0a79-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.223.144.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771198084, "uuid": "fa3e159b-0ac5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.74.89.53", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771126805, "uuid": "049f0529-0a20-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.68.130", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771122784, "uuid": "a7a53d6d-0a16-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.204.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771126805, "uuid": "049f0a13-0a20-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.241.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771144025, "uuid": "1c1e715b-0a48-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.189.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771192264, "uuid": "6d141038-0ab8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.101.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771187944, "uuid": "5e612ca4-0aae-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.121.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771184524, "uuid": "67bda4e3-0aa6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.4.127.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771153805, "uuid": "e1c0d476-0a5e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.229.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771166705, "uuid": "eaa8beaa-0a7c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.180.178.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771191844, "uuid": "728f6011-0ab7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.118.51", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771191844, "uuid": "728f73b3-0ab7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.126.151", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771182784, "uuid": "5a9be611-0aa2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.141.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771179184, "uuid": "f8fec521-0a99-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.144.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771114865, "uuid": "3770c3f8-0a04-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.141.131", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771172344, "uuid": "0bc3a6ef-0a8a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.142.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771194006, "uuid": "7b2c40e8-0abc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.142.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771128965, "uuid": "0bb14fc2-0a25-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.182.156", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771151045, "uuid": "748a8f97-0a58-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.250.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771188124, "uuid": "c98b3581-0aae-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.235.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771145765, "uuid": "293fbb10-0a4c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.239.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771191305, "uuid": "31b310e9-0ab6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.137.155.154", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771187284, "uuid": "d506bb82-0aac-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.137.159.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771123384, "uuid": "0d39dc30-0a18-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.163.131.4", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771115163, "uuid": "e9546419-0a04-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.176.71.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771146124, "uuid": "ffacad0c-0a4c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.29.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771191906, "uuid": "9783f97c-0ab7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.194.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771182123, "uuid": "d0b50aa4-0aa0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.138.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771187825, "uuid": "174dd47f-0aae-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.206.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771153564, "uuid": "52537571-0a5e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.243.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771156444, "uuid": "06d19f6d-0a65-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.54.11.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771191844, "uuid": "728f4ef6-0ab7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "62.151.0.172", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771193644, "uuid": "a3d12c01-0abb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "64.89.161.93", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771191124, "uuid": "c5cc651e-0ab5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "78.180.92.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771118585, "uuid": "e0aae189-0a0c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "8.148.251.204", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771199644, "uuid": "9bb2caee-0ac9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.181.8.16", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771191844, "uuid": "728f3f62-0ab7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.80.148.94", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771191844, "uuid": "728f168d-0ab7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "92.41.115.31", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771118524, "uuid": "bca8e985-0a0c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "92.41.212.5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771128605, "uuid": "358879e5-0a24-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.253.91.154", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771139525, "uuid": "a1f2b580-0a3d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "allcheat.netlify.app" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771175644, "uuid": "baaf49b6-0a91-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "api.dealharbor.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771164964, "uuid": "dcdc16ea-0a78-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "api.files.link" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771185785, "uuid": "5708b325-0aa9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "app.perk9parcel.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771116784, "uuid": "afa0786f-0a08-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "app.terrepure.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771153144, "uuid": "5784b830-0a5d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "arnb3r-0rb.amber2vivid.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771173484, "uuid": "b3842501-0a8c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "auth88.snapbargain.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771138565, "uuid": "660bc2e1-0a3b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "b3-alpha.federleicht.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771183744, "uuid": "96ad714f-0aa4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "beta-node.deal4harbor.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771167068, "uuid": "c2f612b4-0a7d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "bolixtiol.lol" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771164065, "uuid": "c4fb614a-0a76-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "br33ze-llnk.breeze1falcon.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771163285, "uuid": "f426f074-0a74-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "c9t5q.breeze1falcon.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771152607, "uuid": "17c4d2fe-0a5c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "cascade.amber2vivid.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771195444, "uuid": "d4b55951-0abf-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "cdn-303-web.flash5saver.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771173844, "uuid": "899a81fc-0a8d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "cdn.mintvoucher.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771113906, "uuid": "fbed3822-0a01-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "cdn7.mondlicht.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120087, "uuid": "6076459d-0a10-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "clever-poincare.130-12-180-55.plesk.page" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771187405, "uuid": "1cec9ba9-0aad-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "cloud-st1.perk9parcel.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771139525, "uuid": "a229653c-0a3d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "crypter5ds.lovestoblog.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771139525, "uuid": "a22230ad-0a3d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "cryptershgs.lovestoblog.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771139529, "uuid": "a49714e3-0a3d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "cyr.crossfitmissionbay.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771114684, "uuid": "cbdfc361-0a03-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "de-partner-node.mondlicht.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771194784, "uuid": "4b0f1a1c-0abe-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev.flash5saver.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771182365, "uuid": "60ebae30-0aa1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "devc.ws" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771137605, "uuid": "298a4809-0a39-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "direct-gateway-77.vifespoir.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771186805, "uuid": "b7563bbd-0aab-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "direct-web-client.perk9parcel.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771139525, "uuid": "a2234161-0a3d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "drp.greenenergygroup.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771189084, "uuid": "059004b6-0ab1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "e3ys4ixz.mint2layer.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771181465, "uuid": "481348c6-0a9f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "edge-cache2.perkparcel.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771120087, "uuid": "605cbfcc-0a10-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "epic-tharp.130-12-180-55.plesk.page" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771177745, "uuid": "9ee286a0-0a96-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-track-delivery.dealharbor.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771168985, "uuid": "39991b5c-0a82-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "formula.fusion2harbor.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771169525, "uuid": "7b5d8721-0a83-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "fus10n-vvex.fusion2harbor.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771139525, "uuid": "a1ff5414-0a3d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "galaxis.pw" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771163706, "uuid": "ef379fb2-0a75-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "glacier.breeze1falcon.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771190044, "uuid": "41d7f90a-0ab3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "global-site-check.bonus3basket.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771180206, "uuid": "59d6afaf-0a9c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "go.perkparcel.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771129024, "uuid": "2f54f306-0a25-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "go.stillesee.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771182365, "uuid": "60bed18f-0aa1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "gypisiondev.lol" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771143124, "uuid": "038e1626-0a46-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "harvest.nebula4tango.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771139525, "uuid": "a1f15572-0a3d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "hop.greenenergygroup.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771138864, "uuid": "18553c6b-0a3c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "internal-promo-link.federleicht.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771180805, "uuid": "bf011007-0a9d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "internal-promo-zone.perkparcel.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771156385, "uuid": "e34c03fd-0a64-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "jung1e-rnate.jungle9orbit.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771162989, "uuid": "43dad6aa-0a74-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "k15kqv93.fluxdrive.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771167066, "uuid": "c1ad5a5f-0a7d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "krp.greenenergygroup.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771147025, "uuid": "1842e1e4-0a4f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "lantern.rocket7flora.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771191244, "uuid": "0d58376e-0ab6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "m-link.bonus3basket.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771154344, "uuid": "230b432a-0a60-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "m9r3p.jungle9orbit.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771145464, "uuid": "7635e127-0a4b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "nebula-vv1ng.nebula4tango.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771189084, "uuid": "057d035a-0ab1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "ns1.bonus3basket.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771165084, "uuid": "24b1297c-0a79-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "oracle.shadow6nectar.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771154705, "uuid": "fa3e4fde-0a60-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "outpost.jungle9orbit.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771164545, "uuid": "e331b6bd-0a77-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "p8x1m.shadow6nectar.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771145706, "uuid": "0614cc10-0a4c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "q4m8v.rocket7flora.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771167185, "uuid": "088ec58a-0a7e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "qa7sawuw.wildframe41.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771121044, "uuid": "9a8be549-0a12-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "quick-verify.terrepure.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771182365, "uuid": "60f81061-0aa1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "qwt.greenenergygroup.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771149485, "uuid": "d2ae23af-0a54-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "r0cket-rnix.rocket7flora.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771168145, "uuid": "44eeeceb-0a80-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "r2k6d.fusion2harbor.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771182426, "uuid": "856b0084-0aa1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "remote-access-v1.deal4harbor.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771167066, "uuid": "c1c435b5-0a7d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "rfk.crossfitmissionbay.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771160224, "uuid": "d3ea13d0-0a6d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "rnatr1x-vvay.matrix8piano.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771174745, "uuid": "a2b69fa6-0a8f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "secure-gateway-app.mintvoucher.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771167185, "uuid": "088d3f12-0a7e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "shad0vv-rnix.shadow6nectar.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771158725, "uuid": "560b50f9-0a6a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "signal.matrix8piano.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771179424, "uuid": "881ab113-0a9a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "srv-90.dealharbor.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771124225, "uuid": "0275667b-0a1a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "static-assets-srv.stillesee.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771172944, "uuid": "7192d2a7-0a8b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "static-data-srv.snapbargain.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771151705, "uuid": "fe1211e1-0a59-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "t6k2n.amber2vivid.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771182367, "uuid": "62045baf-0aa1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "tak.crossfitmissionbay.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771136044, "uuid": "8723de98-0a35-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "tracking.vifespoir.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771195024, "uuid": "da5513e3-0abe-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "update-system-srv.flash5saver.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771175222, "uuid": "bf6ebbd7-0a90-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "user-node4.mintvoucher.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771181829, "uuid": "214ee4d3-0aa0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "ws.deal4harbor.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771145464, "uuid": "763df0dd-0a4b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.directfiles.link" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771141625, "uuid": "858e9db5-0a42-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "x7p9a.nebula4tango.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771158305, "uuid": "5bb35fdb-0a69-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "z3n7a.matrix8piano.coupons" } ] } }