{ "Event": { "published": true, "date": "2026-02-18", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-02-18", "timestamp": 1771460122, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "d11955af-fbe3-4a5b-986e-1faaa9ece1dd", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1771373483, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771373483, "uuid": "247d7995-c2c3-4b1b-a75e-f598f4c967cd", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771373483, "uuid": "9d870aed-88a2-4af9-8129-8d78bec95a45", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771373483, "uuid": "76356fdc-f308-4669-8943-d9a66d88e7ab", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771373483, "uuid": "28196c92-6444-4888-9397-85d7a6b2c2c4", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771373483, "uuid": "966a5645-1302-460d-b114-ad2f502a6021", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1771374316, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771374316, "uuid": "6b7e086f-6945-4b3f-a72b-fea3ba497530", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771374316, "uuid": "4b2043ee-92ad-4147-a190-9c68831fa4ba", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771374316, "uuid": "735f9f61-73ee-4aed-b52f-2ca67cdd0175", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771374316, "uuid": "ab033a81-7823-48af-9b79-8dad1b8e59d8", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771374316, "uuid": "b75ed33c-c428-439c-9985-f11f426e63f7", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01c87ed0-0c63-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771375479, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771375479, "uuid": "00fff22b-29b3-4075-8c00-34cccfcb6a68", "comment": "Malware payload (Mirai)", "value": "693ff3d4eff3011f2c239abc4f01b3ea", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771375479, "uuid": "4dd68407-1b1d-4b91-a4fb-e2b5c83e0d37", "comment": "Malware payload (Mirai)", "value": "311b1491faba218851f9041547a4bc6bc9fddd28076e5f6a508b74d78a68b4b7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771375479, "uuid": "1a26c9d3-d90a-4030-92ff-d97d8320a56f", "value": "T1DC045B47EEC90EDFC457CEF046BF836B19E356AB8CD1A1F5447C8C0C795928A86A36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771375479, "uuid": "9d82e8d8-f841-4b05-a9e9-156019a224a6", "value": "3072:B94IQupDehF6EAjwdqQmFk4HYVMQcQ1u7lKn6aS6Cr4PnfjsG31Qqjt:/4IQ+CH8HYVJClKn6aVCrEYG31Qq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771375479, "uuid": "8724175c-214a-42f7-95bc-a804a04dba41", "value": 184964, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771375479, "uuid": "31e47672-d721-4815-a800-5b5123dad7b1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf3cb786-0c63-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771375797, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771375797, "uuid": "88305dfe-515a-42bc-95c3-716427c8d481", "comment": "Malware payload (Mirai)", "value": "8a437f86e9b3a11db6ebff1b0c055677", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771375797, "uuid": "e553069a-c62d-4cb6-aa39-2136c70f9d54", "comment": "Malware payload (Mirai)", "value": "d7bfa54c86927565e5aad2704d6b41b5b68b2970d92209df9a70c635866d6aac", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771375797, "uuid": "cfe03893-9d89-4cdc-964d-609da3028e44", "value": "T1A7A31956BD428F13C5C221F7F7AE02483B126BBCD5EA3142ED25BFA127864DA0E376", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771375797, "uuid": "d557fd61-831d-4556-8371-bb99953a4437", "value": "1536:SXLfshyGgcD4ozkF0Ps5g+vid5utSUfMm+DH3xTO8XFBPR8TTD48bW4LNi:2WyGZTPsvim0UfMm+r15MZJi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771375797, "uuid": "25708ad1-f7ee-4058-8bd2-9e7f907d28f9", "value": 103276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771375797, "uuid": "6ea1ffce-27aa-4b1b-8b7a-c2cea6e01e6c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ca8f263-0c64-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771376034, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771376034, "uuid": "816c8a0c-bf30-4038-8900-b0b8a9f8ab5b", "comment": "Malware payload", "value": "f3abf9c39b717cb1006587ad50269f3b", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch1", "colour": "#61b0da", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771376034, "uuid": "2b435ae2-5d5c-46e7-8bc1-2711bbad921a", "comment": "Malware payload", "value": "94714da5af9998228e81993b64413014e6b8aec2b6887392146a1685c66b4389", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch1", "colour": "#61b0da", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771376034, "uuid": "6e8feeb0-1f37-4a0c-9ba7-84410fc77651", "value": "T17503A55E913B029E340BD4E53BD1678732D0212FD389E92DBFECE1540F46DAA96D2B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771376034, "uuid": "7304f575-7ba2-4c77-a435-a529e778e318", "value": "768:ofrFlF3ZJFEF3WMmMoqlzSHmMYbMcnpxCc6Ia8Vt2:Q3N2kZ2hSHmLbvpkIa8Vt2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771376034, "uuid": "4910d1b8-1543-4f0d-97e0-3476e9fa405d", "value": 40897, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771376034, "uuid": "955a324a-b74c-40fc-bfee-b6636cb6d563", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c156fd6-0c25-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771376645, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771376645, "uuid": "90e0ff5a-bc51-4da7-b1a1-24665779aeb3", "comment": "Malware payload", "value": "13efc7629f58643f6b8a18d5b84d2b63", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771376645, "uuid": "86ff925a-a884-4031-8acf-632d3cf07504", "comment": "Malware payload", "value": "67f597109e003ba1fe22b67e6ecc5fc0cc913655509f6ba7b67ae5579a252d71", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771376645, "uuid": "d76257b7-b794-4495-bf0a-cddb12d5eeb6", "value": "T156C3D6DDB2E27025439324A5157F410AE27B6E543C4B8294D17EE9D4AC7CE8E807BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771376645, "uuid": "3fe8c8e2-25ea-4141-8cd1-4747c7ee739d", "value": "1536:5wxqb5bdwL+pBFz9FSUsqLon9NYgetcVPkx2cnYteolbFr3rd6TcWmuZUfFi8AiE:5md+tzoVP9ftrdruZ5QZ3fav8rA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771376645, "uuid": "9b477816-2307-47c0-892d-8353b9a1d921", "value": 120711, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771376645, "uuid": "bd922342-08ff-4f01-825c-a9e0430fa983", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16b26a64-0c66-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771376803, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771376803, "uuid": "725fb4f4-c22d-4bcf-8728-a8448e40ad85", "comment": "Malware payload (Mirai)", "value": "4e22d14768251b30d9bcfab7fc94b1a4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771376803, "uuid": "27f0604c-7450-4e33-8c93-93fd5c195a1e", "comment": "Malware payload (Mirai)", "value": "1fad4d651d64d2101e1505feedd6893b1637ae776d8b28ad01ec9119002c6331", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771376803, "uuid": "66ea39c6-b347-4b27-8722-7b40dda89894", "value": "T1A6A31A02B70D0F43D1632DF02B7B1BE1979AFDA119B4E580A51EFAC69271DF22142E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771376803, "uuid": "97f27c3a-6a8e-4a61-8737-4a31d4ba43bd", "value": "1536:Jjubg5A0SgXIaYOz0HWwSuhldvg2ZvlYb+oNEhomA/4piQ8fPPGBJVdyVpE0PW:JjA4XIvrdv9fpWZ4piBfuwPW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771376803, "uuid": "d52587f7-5681-4409-9597-e88416fb2cb5", "value": 103572, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771376803, "uuid": "992c6224-ca41-44ac-87f5-416d7714481f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "28e0fcc3-0c66-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771376833, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771376833, "uuid": "de5a1d91-34bd-4b43-941f-d99d7a26b57c", "comment": "Malware payload (Mirai)", "value": "06fba75ed23c81ad939337e4a2188681", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771376833, "uuid": "1fc1a32d-d496-4b12-aedc-a5b6bd18e65c", "comment": "Malware payload (Mirai)", "value": "11e32e5a2808a58fc87ce1b8d5ad0794960f6698544666bcfe7b4a553488db8d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771376833, "uuid": "e9fcc9b8-7dbc-40ba-a491-369a3e3f7811", "value": "T1FE157B9CF786E0F1F26340F0025EEBF64534A12A5013FAF6EE45266774727A16F1A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771376833, "uuid": "23999d48-b470-429b-babd-e4971640f2b4", "value": "12288:eJaV9TaGQhp2h81cwIxO7CLaD4168jrnqIvXXmqGPyI/tW1WJ4Lu:qaV9uphp2hmII7fU4KrnNmzY1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771376833, "uuid": "6a8c1e95-7a5a-47b6-8876-7f53ec9cc736", "value": 878808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771376833, "uuid": "de551a56-9cc3-454f-a60a-8ca427f5ae41", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1cc894cf-0c67-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771377242, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771377242, "uuid": "17c85ffc-b9c7-4892-8452-b5a5b3556115", "comment": "Malware payload (Mirai)", "value": "86b9e0790b3422d36862d3d58d1764de", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771377242, "uuid": "f2968355-6ddf-4c3b-bbb9-2a510794c72d", "comment": "Malware payload (Mirai)", "value": "e34958f69c8d73f39a0994876778151d011f5ed08350edac2b988074f9ff5ef1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771377242, "uuid": "7ba64b23-ac0c-4a53-a03b-5747f0216069", "value": "T153043C53B7324FA0D365D2720BB38B595AEB11811EE198D1936CDA103E206F9689FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771377242, "uuid": "44022ed4-d5d1-4a15-8e77-dc01d73cd2c8", "value": "3072:knxBHuJGy2nb5G+Y/HoWSc445jYt4v5JnF/6pjOZepbq3:kxJuKnbM+YrSc4KkKvnF/6gZIq3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771377242, "uuid": "45c2c3c7-7e47-4a31-9e04-7cc1d6510ee1", "value": 184960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771377242, "uuid": "81ddd791-8da1-4b4b-b2a7-fc50752d8ab8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a0006b4-0c67-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771377265, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771377265, "uuid": "d9654834-6abb-46bc-af0c-8877dfe710e2", "comment": "Malware payload (Mirai)", "value": "067709dfb61092606e3fd371ace27058", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771377265, "uuid": "94810c56-2560-4228-8c0a-c9c6b97d7cc1", "comment": "Malware payload (Mirai)", "value": "a5a22a0a67d8b05910e5209d6e35ae5c9f2f57841074f8389db732b0d6fcea0a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771377265, "uuid": "8c6b3527-010f-4e87-b2bb-2fbd25357404", "value": "T1CBD3971A7F228F6EF269877443F78E31A75937D61AE1D684E16CE5401F202CD241FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771377265, "uuid": "179ae7bc-10e1-4127-8ed8-e3acabe71417", "value": "3072:L+Fa7x2n0nLon4PMgU/k9lgcjc6tb3rcw9LK+wyRMR:L+FoxgJnjHyt/AcLmyRMR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771377265, "uuid": "78cdb18a-3e4e-4b6a-843b-778b5faf7acf", "value": 132848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771377265, "uuid": "0ba96812-b7a6-4a3f-ba40-a277a9704410", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a849aa7a-0c67-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771377476, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771377476, "uuid": "f2b432d3-4c55-4cf7-99ba-94e4452cad6d", "comment": "Malware payload (Mirai)", "value": "12979fdcca47fd79ea949490d452a43e", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771377476, "uuid": "78f8839d-e75c-4144-b047-9e737b089be6", "comment": "Malware payload (Mirai)", "value": "3c241816ec8fbcd4500d44333a363faaec3f910d938ec8490ecd9b18e06bf291", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771377476, "uuid": "5a04e887-a745-4f5a-a292-799081e26ff2", "value": "T191A30A52BD42CF17C5C261F6F7AE42483B126B7CD6FA3142ED24BFA127868DA0E275", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771377476, "uuid": "e3fa7dd3-7aa3-45e4-8742-2691e1426a0f", "value": "3072:lbFkAXTjO1BviWkAgd61mv5PiegLXcMui:lBkA/O14cgd61o4XcMui", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771377476, "uuid": "db80925a-600a-4315-bacf-398cf3d7047f", "value": 99744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771377476, "uuid": "91d21052-b4d1-4ff7-8eef-51e1ce976e81", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f81045e-0c68-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771377676, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771377676, "uuid": "9dc8527e-affb-401c-acee-d28db70f6dd3", "comment": "Malware payload (Mirai)", "value": "4fc8886eae4cd246fab2b0a1f285c7d4", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771377676, "uuid": "0396c81f-faf6-4853-8270-2a081c9f6b7a", "comment": "Malware payload (Mirai)", "value": "a48147174f4e0ce150b1af6b03b6a27393f122d21e73c5585c6ba04d22180bde", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771377676, "uuid": "bcf01166-c882-4596-a4b3-fb4d52c08e17", "value": "T143B32B16B992DB11D5C221BAFA9E514933136FBCE3ED3202DD206FA067874DB0E7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771377676, "uuid": "512b4c9f-dc27-492c-b349-7f21f0a65c17", "value": "3072:fbEPBKdiInzipdr7160gaCYxJDF7cT2dXMPH:oPBKEIupdrZ6xaJJBcToMPH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771377676, "uuid": "ef08f36c-f4e8-47f4-9053-81c34dbbf497", "value": 111292, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771377676, "uuid": "dbdac49d-7a99-49fd-8ead-68eb818fb65a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5e90704-0c68-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771377929, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771377929, "uuid": "17facbe8-ca02-48ac-9e70-546342103e52", "comment": "Malware payload (Mirai)", "value": "707ebe651540c87136b42cb46e207f7b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771377929, "uuid": "a4adad4b-0cdd-4efe-af18-398a49a1cfd5", "comment": "Malware payload (Mirai)", "value": "125b37d011e34fff665e57b0fe13257c38033fbc5223718977c7dc2026e1aa66", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771377929, "uuid": "ed1377b1-e289-4291-bc65-1b62dd88e40f", "value": "T1B7C31BCABC858F10D5D666BAFE0E518D33134B78E3FA7103CE149B29278A85B0B3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771377929, "uuid": "c9c9872f-db42-40e4-b7b0-5af59ae25c29", "value": "3072:SLwhf4av5BKOSE3LffxSW/CHkLcMO6ltALxKMU5hrqmZg2sL5pn4:SKpKoDxSW/CEfO8A1KMU5Fq+g1L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771377929, "uuid": "a1678037-1012-433e-b77c-677cb2c3d553", "value": 120356, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771377929, "uuid": "d2d7f64f-29ad-4045-a8bc-0b448a008b51", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c75d5c4d-0c68-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771377958, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771377958, "uuid": "193e4244-11b3-420d-8551-ff293afa2847", "comment": "Malware payload", "value": "62c5013a6cbfeca1b8c326e3f62159fe", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771377958, "uuid": "eefcb2ba-6917-4825-be7f-98694ab23e66", "comment": "Malware payload", "value": "8b7f294d237d07452229772166a4b7283a82c40c326580cd5f17da653c30853a", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771377958, "uuid": "740c0a4c-0008-4054-9ba6-19de2fb7e9b8", "value": "T1EB03B65E857B029E3407D4F53B916B8332D0612FD749E81CBFECD2244F46EAA96D2B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771377958, "uuid": "e3c2edd8-3598-41ed-a87c-8c793affc8c6", "value": "768:oPrFlF3ZJFEF3WMORhmopn5mACceIa8Vt2:i3N2kDbmopn8Ia8Vt2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771377958, "uuid": "9d68e85a-24d9-4fc7-8418-d7717c944329", "value": 40169, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771377958, "uuid": "06cdde6e-ed17-4bda-8a15-f3a751b67362", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d6151fa6-0c68-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771377983, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771377983, "uuid": "9f5fb31a-e756-448a-9850-030658a24b9a", "comment": "Malware payload (Mirai)", "value": "e96ef703187e8738d3e51aab78eb9314", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771377983, "uuid": "24dca6e5-0e6e-4bcd-9f8b-b874b7576130", "comment": "Malware payload (Mirai)", "value": "8891fa5aa68c080e4febec374c0eafbe260f72092fc8ddc90067de5be414a242", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771377983, "uuid": "2aa5736b-6a1c-4dbb-8ffa-5743110f299b", "value": "T169D3E706AF610FB7DC6BDD7706F90B0235CCA85B25A43B757534E828B60A1CB59E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771377983, "uuid": "9f746e4e-c5d9-4d7d-a04f-46aa5488c0bd", "value": "1536:kPEmUFbpQa2vZfE0tHCrBmJ0oKk2OPIzWROjJ5I621Gur7qc0++ZlnBW73RcinIx:46oTBpQw+k2OZt1GA0++G+ky", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771377983, "uuid": "65fbe0ab-8060-4c9d-9f0f-a9cec25cb7bf", "value": 136016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771377983, "uuid": "1aa49472-d179-4316-ab6b-6afc2a58523f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b70a4685-0b38-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771378010, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771378010, "uuid": "dce8b8e8-31c4-482c-b9f6-0c75a40e61e3", "comment": "Malware payload (Mirai)", "value": "3e927b5018efd058ba48785deaa80ef8", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771378010, "uuid": "37086694-a516-4ffc-b827-7710f32bb8a7", "comment": "Malware payload (Mirai)", "value": "232faafe013b8a3895383311e3668777bff983272d144a63843b4cffa261c911", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771378010, "uuid": "3f407bde-e621-4567-bb85-fabb01556bb7", "value": "T1FD146C86EA418A13C4D21779BAAF514933339774D3DB73068928AFB43B877DE0E636", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771378010, "uuid": "3a4b3907-d86b-4e0b-9609-c99a2b461aad", "value": "3072:YawiTwsqCaSSi51KtL3KaR8D4fG7DZ5W8KKCuyhv8KV4L5vuM/9/9Gq:YahwrCMiC7KaR8D4fGHZwcCzh0KV4L5f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771378010, "uuid": "0814ad80-a651-48b3-aeb8-3db5f5c17813", "value": 196213, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771378010, "uuid": "667c473e-76e5-4bbb-9dc9-4d35e42140d5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da1dcad5-0c6c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771379708, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771379708, "uuid": "21575c8b-beb1-44d4-a8f5-b20c81d135a6", "comment": "Malware payload (Mirai)", "value": "5312ef03df1b88f5eaef031b6e4684c4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771379708, "uuid": "cbd45ad1-f392-433a-9d6b-dbd9e2502aa9", "comment": "Malware payload (Mirai)", "value": "184fd0dab236dcb4889b5824ef2577577a34be3057e7d113c1eed7ef515b1e4e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771379708, "uuid": "a4d179f4-2f44-43aa-959e-7e203b81aef1", "value": "T1F3730A826A43DEF3E85710F502B7EB365A32FD3A083AC5C6E774FCA15A515C0A5163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771379708, "uuid": "390429e5-e2a8-48d6-a9ee-5d8517345f7e", "value": "1536:Rcz8Mfl3USRL+r97S3Tl9ffUr9sFC1qs3vLJ7LZaA14B6Kk3u8Lxg:RcICl3USMsTl9HUrS6qs3TJ7LYK4fQLx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771379708, "uuid": "b1fd84a3-328a-46fe-a988-c651522edfcb", "value": 75592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771379708, "uuid": "6ad0a637-2de4-4395-bb64-70a1c9c992df", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da1fefbf-0c6c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771379708, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771379708, "uuid": "0224d5e9-9d2f-437d-aea6-5a1bd627ee19", "comment": "Malware payload (Mirai)", "value": "6df0ba5125f8d544afe10529a9829faa", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771379708, "uuid": "84c05244-3c28-477e-a797-6502c5b99deb", "comment": "Malware payload (Mirai)", "value": "7272632cc19f5f3a2249ff0bd9f11d553158047b3f112aad19ed1e74255b3a47", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771379708, "uuid": "8c86d593-803f-4792-aba4-559ff26e412e", "value": "T11EC3C91E6E21CFBEF65A827407F78E31965877D61AE1C685E16CEA400F502CD241FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771379708, "uuid": "4b878e3f-dd51-48ce-9162-065cf3ef5133", "value": "1536:tw4lPfv7d7Y/YLYdAo1OhNWHv7t9i8pPDoM1ISWlKnKevNeThNF:7lPfDdMLdAoKoHv7tppPDoMCsnShNF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771379708, "uuid": "6851d996-9c20-4fee-ad54-c3ee2a695c95", "value": 118300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771379708, "uuid": "31ca6d9a-7590-494e-954a-6f21a3e9f237", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "490d2523-0c6d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771379894, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771379894, "uuid": "24c34692-e980-42a1-a083-23cb3ff0f061", "comment": "Malware payload (Mirai)", "value": "94cbf514ba21d63399ddde8f14dbca18", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771379894, "uuid": "4379d83a-2844-493f-8929-006a583f1010", "comment": "Malware payload (Mirai)", "value": "5487767cd817a57dc1fbf77509cab82462bb2b8bbaa727509b9661ea09ccac75", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771379894, "uuid": "1fdcb0d1-5d53-4236-a5cf-50d3b6c2b4bf", "value": "T1E8D47E9CFE5E3C42E2D7E2789A4D87E1732771E4D32391A33982430CD5CA9E98BB15", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771379894, "uuid": "8fb21b2d-a692-4b5a-8420-6710c98e1dea", "value": "12288:pl3W3VPthMnMR2icfgOuchACX6k0MZyayU4oRoaWw5nzUNUVMq8:b3WFPth4T45chLX6FM64bIP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771379894, "uuid": "0978743c-6c52-42e2-9d43-9e816b99a36c", "value": 653616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771379894, "uuid": "c3196c45-2917-4a97-995c-ceac5c9c93fa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e3ee86c6-0c6d-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771380154, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771380154, "uuid": "a6422eb4-1e6e-42b4-b0d4-e38ecfa3c1cf", "comment": "Malware payload", "value": "5342e53a45f3dfd9f85cd1a5b6bb7e5d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771380154, "uuid": "ecada147-4728-4b9e-b616-c0e217e8d788", "comment": "Malware payload", "value": "c6b4c1c3ff5d93c3fdf967923fa7b4689a948411b48a39eec2796758068a57a3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771380154, "uuid": "8562ef92-ebbd-4cd0-bb3d-600d658d6b82", "value": "T170E3D74F6E228F7DF278C7358BF74A34E39923D623E19A45D1ACD6101E6028E541F7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771380154, "uuid": "8effd127-1f1d-40d5-8793-e2b6244a1fb5", "value": "1536:wd2ZbPAUJBnRTqUsahhrGHhFpuFaVykDWSvxyB1fF6ugrL5ne1/B+0pyT/VEXL8t:noUtDrsjzt5vEkugRKByhE78t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771380154, "uuid": "3a57f81a-116d-4dea-a6e5-0d42efa15a92", "value": 147200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771380154, "uuid": "122f4849-9e35-4830-9711-f4707f3d029b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1771380190, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771380190, "uuid": "ce1d1aef-4116-4f13-85d7-13137633acb9", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771380190, "uuid": "053850cf-2adf-43ae-ad15-8966caceb8dc", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771380190, "uuid": "eada7011-92a3-48e9-8786-c8bf9f4d408d", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771380190, "uuid": "a59a0e27-68d7-431b-b552-ca57a717c9c6", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771380190, "uuid": "9a5730ea-acce-4f4b-a0e3-79cb526a1647", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "88dfbabc-0c6e-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771380430, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771380430, "uuid": "fd92212b-bd04-4482-89d8-25aef9af85db", "comment": "Malware payload", "value": "b8afe618fd743e71974106b76d5c2698", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771380430, "uuid": "153a3e87-23a5-4057-b4b7-98dec826ba02", "comment": "Malware payload", "value": "ffbe22ebe411bf300e3c3a17bccf9c336ce3b84e01ba40784b4189b82c5ab982", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771380430, "uuid": "ed78d8be-4b9e-4036-acb1-6ace1da78fb8", "value": "T1FCF2945EC177039C340BD4B52BA167873290312BE68AE82CBFDDE5244F46DA986D2F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771380430, "uuid": "abcd98be-473a-42db-91ea-a3801eac30b9", "value": "384:osug1rCczFlFB4qZheCkcFEFB4qWMRkYlZyvyfKiCcRI2CcLuIJSHgY7KVt2:oSrFlF3ZJFEF3WM1G5T2Cc6Ia8Vt2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771380430, "uuid": "3aed9837-3985-4f5c-b8d8-92ea49db6955", "value": 36198, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771380430, "uuid": "4d0f9855-e782-4431-be1b-5932150f860a", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc196cc8-0c6e-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771380516, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771380516, "uuid": "7448595b-c7cc-457b-90b1-d085f080bfb0", "comment": "Malware payload", "value": "81260f1a7d15b61008f16ff4d8060e1e", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771380516, "uuid": "567bda3c-2461-4ef5-8190-5532ecdb1b33", "comment": "Malware payload", "value": "9177679c6838f521ec24b99865d1b150789f5975204c3eeb21017376d5adf955", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771380516, "uuid": "9b358da5-1647-4b07-a121-ed062b09e8f6", "value": "T14013A559C17B02AE3417D4E57BD1679332D0212FE349E82CBFECE1204F46DA99692B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771380516, "uuid": "59f1f5fe-a708-4bda-8db8-d447f7f24f04", "value": "768:olrFlF3ZJFEF3WMMNaYszOtpBxZ6oRmdMCcbIa8Vt2:s3N2kxNaNz2pF6oRmdUIa8Vt2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771380516, "uuid": "24ca8400-3977-48c6-a794-239f30908700", "value": 42643, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771380516, "uuid": "adc96bba-10ad-4e9b-b76c-c922b0ae34ac", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5cfcf7cc-0c6f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771380786, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771380786, "uuid": "421f67d4-5fbd-44a1-bc86-bb0dc0aa30af", "comment": "Malware payload (Mirai)", "value": "6410b69bd13940fa2fedceea08164f6e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771380786, "uuid": "d4287b87-d48b-4f48-a728-3c70742caf3d", "comment": "Malware payload (Mirai)", "value": "b823eeb737c32467cd191989d5320d13d5c5b82262a18164a7b84b88c8d1dbb6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771380786, "uuid": "1e591dc6-dfb6-4e7f-929c-b7bc7cb727dd", "value": "T13BA32B8ABC85C702C5E1A1F6FB1F51CD371643A8E3EA7147CD19AF29274B86B0A3B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771380786, "uuid": "44a39d62-483a-4519-b509-58beb62ecf69", "value": "1536:AjrAexK7sRRhwylK4/lZQKYPqr/JVkvqkeifNCG8vln4b+R:AjrAgzdwWNZQJPqr/JZhiffKln4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771380786, "uuid": "52730e91-3148-4106-bf11-e6f2556a10e8", "value": 103820, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771380786, "uuid": "908fc0d2-9291-4a2b-82e5-dea8c291642a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "193958cb-0c57-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771380842, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771380842, "uuid": "7577a614-2b91-462c-a553-b12dbac3e592", "comment": "Malware payload (Mirai)", "value": "7f0009cb8688558bf6c93f414babf13d", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771380842, "uuid": "e42c097f-e9e8-436f-8aea-f784f98b527e", "comment": "Malware payload (Mirai)", "value": "617db5bb5702af00e1f092a74abb5dfe5d726d351c115255ace7dd455d801beb", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771380842, "uuid": "44ec0870-146e-47dd-b299-49bac68d3bde", "value": "T17AC31856B9519B11D4C721FAFA9F414933136FBCE3FA3102DD20AF64278A99B0E7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771380842, "uuid": "ad5047db-8fbd-4216-91a7-38fa35f2a747", "value": "3072:Ta74VtinFIDK7zXOUbaKDB7gMVpX8vweXLV5DE1A1+:uKUnCK7zNbaKDB7gMVpsvwMh5+A1+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771380842, "uuid": "effe080d-33d0-407e-a62b-78b777385e5e", "value": 129684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771380842, "uuid": "f774ec02-bd11-4f95-9f26-239380d206b2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bb09aee2-0c51-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771380845, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771380845, "uuid": "2e9321df-b5fe-42a1-a887-83b730a0e644", "comment": "Malware payload (Mirai)", "value": "fc3aed8c44471b963bf9f5c73774b35f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771380845, "uuid": "af4647ba-d1b8-48d1-94cb-d4bcc1f0918f", "comment": "Malware payload (Mirai)", "value": "db5af46ca41ba7b49819cb4d70c9b6791410e36445801d5c09708589cc58de48", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771380845, "uuid": "9ff5e670-38bc-4fc0-ad60-99985343ef58", "value": "T11A056C1BB2B374BDC557C03443EBCAB2A935B43502226E7B55C8D6303E56E701B1AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771380845, "uuid": "1441e519-a82a-40dc-b08e-c6edfddb8837", "value": "12288:mAusGq838R4sE0D/JkqEvdh3obv9qvdoUbt5H7ETbg3xNZdzuFY5JykrtY4Ub+HX:esTr4shkqEVa1qloUbtiA31/Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771380845, "uuid": "1ddd0bdf-2453-4b52-b636-f7974cb0f56f", "value": 850696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771380845, "uuid": "a41425d5-632d-4e03-88bc-bc864dde69cf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "50d79216-0c7f-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771387638, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771387638, "uuid": "2cddffdb-048f-4073-af08-153d2d667483", "comment": "Malware payload", "value": "c0850d4046aba816584a7921cf150378", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771387638, "uuid": "c5161f19-3485-49bf-a38b-0da842e724ef", "comment": "Malware payload", "value": "7157b2f01595b417f3f36c5c18c3bf9794ebb9a00345ef3d5f4f6a28849e22f6", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771387638, "uuid": "01fa5447-3cd8-47a7-a239-a7306f6c7377", "value": "T174F01D786AB229778661AF08B411D8B9F8A7909C0DB78AC4953D01FCC567605FE70D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771387638, "uuid": "3e9c7236-ab21-44fe-a893-58ea5c32b54e", "value": "6:bocPcdbdlhcehci0dFhcqhcrWitPQcGQcNhFd1QcgQclLKiD7:bgbj/1TEXhFKLK27", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771387638, "uuid": "82101e89-504c-49b3-b481-d5fb9b55f602", "value": 564, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771387638, "uuid": "2c4c11d6-5d90-48f4-8665-d1b7f8b965a6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f8a7da87-0c93-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771396509, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771396509, "uuid": "e059ff40-ee9d-40c8-a5b3-6d514e2c3ead", "comment": "Malware payload (Mirai)", "value": "d5fefc5a33fdbcf2dfc38126a837dcd2", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771396509, "uuid": "7a6bc302-8a97-4b9d-b9b6-20ed46d52544", "comment": "Malware payload (Mirai)", "value": "ee582c6c16f4fcfb074f159c31ddcfc3eb6e8a5c629c23fc835320711e1c5c4a", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771396509, "uuid": "46b921c9-da1f-4175-a370-31c354cf6422", "value": "T134A533E81506AFEDF9EDA7BAC9AC5AB84734EB7FD1ED86080CC4857D480049E071BD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771396509, "uuid": "0c4754a1-3a7c-4a99-9195-d00c1149f13b", "value": "49152:muCRY1fpv5xCbgIlzlMi1z6YLGZhdMPdb8SEgDZI:mhuxpv58UHu2Y6fd6d8SEg1I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771396509, "uuid": "4f2a62e0-a16f-48fd-a619-ccf979d67de4", "value": 2259524, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771396509, "uuid": "d564f4a0-cc4c-4d1b-9d0e-127484628098", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "30a26f46-0c95-11f1-8369-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1771397033, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771397033, "uuid": "7f3a2284-2d64-4076-9d44-2f250ae23386", "comment": "Malware payload (CoinMiner)", "value": "81a4428062677611e56eef37fb780082", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false }, { "name": "sosokenota", "colour": "#504c6f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771397033, "uuid": "b9fc4c62-aa35-49d5-a4f1-7b541ef7f8fa", "comment": "Malware payload (CoinMiner)", "value": "4416f6d73dba2fb3decbeaa1082c9d0e35f35d0a7409cef7c4c9c2fa21835e12", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false }, { "name": "sosokenota", "colour": "#504c6f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771397033, "uuid": "96898011-16db-4016-a02f-bb62ce7d0f6e", "value": "T101463348FFEAC5B2C29365350846A75194B8EDA11334CA8B64F03E275CF66D369363", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771397033, "uuid": "ab70c2f5-de2a-4d7a-9e64-be936189db86", "value": "f6baa5eaa8231d4fe8e922a2e6d240ea", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771397033, "uuid": "f9e2cabd-a8a8-4c16-ab24-c036df97b3a5", "value": "98304:sw567u6PsCaHuBn/OlDnHZVO3XS2HgaGYgbrXR7U6UpqjNdoxNjc3DxE+KcdMy3p:swePsPk2lDSS6/dEN7Uvp4QNjEDS+lGm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771397033, "uuid": "70d2d847-c906-4d0b-9265-e3df26733e05", "value": 5487320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771397033, "uuid": "4fce8c5b-8118-437a-9bf3-6524f7d0a9e4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "536cca7c-0c97-11f1-8369-82aee05be84a", "comment": "Malware payload (XorDDoS)", "timestamp": 1771397950, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771397950, "uuid": "788016c9-7304-4688-9e39-58fc19bf77d5", "comment": "Malware payload (XorDDoS)", "value": "deb5129de8e3749dd7bad82c22a0ce0d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false }, { "name": "Xorddos", "colour": "#d055b7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771397950, "uuid": "d4e608cc-59f9-45dd-b691-7864a2f32358", "comment": "Malware payload (XorDDoS)", "value": "b62be5224f27f9438213215d0549319111ae87383cbf33fc0939869ac90f9b58", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false }, { "name": "Xorddos", "colour": "#d055b7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771397950, "uuid": "7b69a479-61c5-4227-935f-0281af9fbe1e", "value": "T119C45C06F283A2F7D42705B0124BF7BF8620F63594129D9BB7989D5AB9338F12A4D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771397950, "uuid": "0dfeb2e4-5449-491e-a887-ddb379dd2a4a", "value": "12288:VB2bw1CH/FwznbIU9sE8c8lqd49N94wT4JXALLp6yWrk3:VB2WCH/eMU9Uc8gd49N94BJXALL4ru", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771397950, "uuid": "6ea36e21-1bd8-4607-b0f9-3d636c73161c", "value": 555272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771397950, "uuid": "67e93624-a9f5-4982-8595-6f18ef070012", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dffbe16f-0c98-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771398615, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771398615, "uuid": "06f8d220-5f08-430b-8c0d-1369a55f8190", "comment": "Malware payload", "value": "87768f15b94335604003b012e5c72d8c", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771398615, "uuid": "34c906f9-9843-4e60-b845-704716d22981", "comment": "Malware payload", "value": "9e32ed7ec8c5c1e86ca1b3012f33523253895b351466c41dccf2a0426665af92", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771398615, "uuid": "6d6cf0db-0ec4-430b-a1e6-f9850d4a8cc1", "value": "T1AC94D07DF762A5AD6A5C5683F007DD080FC4CD6B8425E0C58E1E0DDF2BAAA43F6890", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771398615, "uuid": "1054b9ad-8769-44e5-9705-2a7aaa1438eb", "value": "6144:H0eoJVJT46FlepMENJWxx1jIYCX+4uk5HW+ZSifEUZ2zblan3qQ4jWdGi5XQ9rQ:UR746HIrNJWxonO4x5/Pkl0uWzJQ9rQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771398615, "uuid": "baaa23e1-43d8-43ba-9855-507a93918711", "value": 447940, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771398615, "uuid": "b73515d6-8c4c-41b8-a24a-fa72f823d73e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef1e0e03-0c99-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771399070, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771399070, "uuid": "dbce378e-4a48-485b-8ac3-572deec223d8", "comment": "Malware payload", "value": "e699d32972229eadcf60fc1e25c0b6f0", "object_relation": "md5", "Tag": [ { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771399070, "uuid": "39699106-e4e1-41ab-96bc-94fdfc3aa609", "comment": "Malware payload", "value": "6b48a1703a107f55f85eb15d5daa8c429b7a7b80bd9abc28e5542ac02e9f5842", "object_relation": "sha256", "Tag": [ { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771399070, "uuid": "1eb62964-fd79-4c51-93ac-b77799d9f3a6", "value": "T17382A627CD049FF00D7EB3E16497A816CA624212BA347949B98DC5E97F33664DBCC0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771399070, "uuid": "9e27ccc3-a12d-44c1-a886-ef6f7b08ffa7", "value": "384:KwG58RhDqOCg11Lmw8ny+/GAHzqcW2lAG9MF4:KwG58PNL5gPzzWwAG9N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771399070, "uuid": "7e984d47-9da9-4f67-93b6-baa30502d254", "value": 18922, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771399070, "uuid": "430bc3e1-d250-40a5-8a7a-4cd7d3d5665d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d013d570-0c9a-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771399448, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771399448, "uuid": "87a9443a-ed48-4c83-aab1-7b89c8451414", "comment": "Malware payload", "value": "534c838da3bf1fa623af1c95fb3dcd59", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771399448, "uuid": "392787a0-3388-4cd8-8a5f-7cbdb621d0d6", "comment": "Malware payload", "value": "f1b046bfc66f01968545bcd163afc4cf58eabe917e32e3e7c4f8402c5722a886", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771399448, "uuid": "d0e2774d-65cc-47b9-9075-ceed6746c305", "value": "T1398309327488582A210B428FD267336C70AFDCE2D611E5B6F6F622344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771399448, "uuid": "01bea983-2d30-441e-b1f1-88fcb6aaffed", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbntWaHVN/:XEKltp9txAX/yr2pbtWeVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771399448, "uuid": "b001484f-3cc1-431c-a3d0-893506eb70a1", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771399448, "uuid": "465654c3-b107-4d82-b5f4-9b03dbc9f653", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c9fc8d74-0c9b-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771399867, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771399867, "uuid": "0af372be-80e1-463f-a05e-cdfdaf55cef4", "comment": "Malware payload", "value": "c2f358eb5af1c995d85fd095bd1b5298", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771399867, "uuid": "04cf52d6-72f7-4a37-bf43-2dfa9f98d69a", "comment": "Malware payload", "value": "b3b661697c3d540f4337b7a14499fae895271d4c38cc6374962a4e77ce863907", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771399867, "uuid": "ee75f1e5-4e6e-4ba3-a04e-93d1b6d8385a", "value": "T1A334123C6FEC7C92C13BD2AE518D1A9273C268C3752CA685AC856D3CC65BBB8D3111", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771399867, "uuid": "b6c9b42f-d7f9-436a-b1ff-b6357750aa04", "value": "6144:FxIdNBcu3JjmynguDtOKD6Tl/oLa8tvw4FwHPs54:UNBccjnRBMy/w4yL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771399867, "uuid": "a546dc07-991b-4d04-9c2e-4e5da5284d1c", "value": 244800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771399867, "uuid": "098cb200-48db-4691-ae60-b09272840e50", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c9fdfa65-0c9b-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771399867, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771399867, "uuid": "5e5c8400-36ba-4045-b27a-b81f5fb1b614", "comment": "Malware payload", "value": "d4d12cdb92fd4c7eaf98daa918ca1913", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771399867, "uuid": "87ebd9d5-12a6-4628-87ff-8c9cc5dbb859", "comment": "Malware payload", "value": "6c50637d59af48fea0066437f6bd7c71694062a907ee50bba10d5122dfe87b16", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771399867, "uuid": "392efc0a-f20e-4384-bcb7-2799e1dc5b38", "value": "T1B0B423D17342F0B9DBE4E35AA6ED38B8717153734562B2C6249A12AE4B0E2F33314D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771399867, "uuid": "3c8885f9-f4c8-4803-b227-4dcb078fd678", "value": "12288:mzCntY+e1uBA9bL7D0GqiBRNBzagnEstiIdgHzF:I0y4G7jqizaWEs9q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771399867, "uuid": "67d73520-cc1c-4814-81d9-f39fdc5cbc5d", "value": 528448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771399867, "uuid": "9cbaebc1-48ff-4b2a-8fe8-45c3b737b358", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca46647a-0c9b-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771399867, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771399867, "uuid": "5e1d1290-2c5b-4301-b007-ba81684e6bc2", "comment": "Malware payload", "value": "2f80a096c98177fc9d054e9516203e0f", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771399867, "uuid": "b7f5df68-4abe-4c6f-ac89-142ec0003435", "comment": "Malware payload", "value": "692e7593e4dcf3b690bb666dfd67e57cf6a7b16263a0f779cc534fb15376ad5e", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771399867, "uuid": "3d9d825a-9ee9-4323-9711-a85598ca755f", "value": "T1AFB42339C6376689AD449E36A130EA6919C3D4069109DF9F2CBBCA771FCDA031270D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771399867, "uuid": "616b072a-bc47-48cb-9e13-740777e1d00d", "value": "12288:EKPXPkIFXiDzWj/35AN6aq2pRONH2J+bom16PXv:EKPXPT35Uq2iNH2UcM2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771399867, "uuid": "e1e81510-a547-4a7b-868b-a46185339db9", "value": 528448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771399867, "uuid": "ee0f5abe-ae2d-49cb-9e3b-4c842286ead8", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca585b72-0c9b-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771399867, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771399867, "uuid": "5faf4071-f74d-4b7b-b3ec-e4dde21513f9", "comment": "Malware payload", "value": "2ebff8440a8d26bd806a1b9146194676", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771399867, "uuid": "8fd20552-f624-42f7-a4f7-d4a4dcc7bf2e", "comment": "Malware payload", "value": "a80a5893d899f161cf922b5bb14452d039d8a5694fbfab1aa82c1bfd003edfe6", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771399867, "uuid": "ad89724c-eeb5-4b46-98a0-e58f9c007a8c", "value": "T170B423527BA8EC3E967E672BDDCB0ED6D95934D45CA04343DA8D2D17CBDE2D2018A0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771399867, "uuid": "f7f4c327-6f4a-4084-8c4d-4b09ade358d3", "value": "12288:HZm/jGbfH8hS9wjaEuNBvb8xxqnwADSWiIDPXkS0YutmigDhi2F:I7GT9wjaEurwqnwKSW7PkS0/tKVrF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771399867, "uuid": "ef4b2596-8b74-4628-bc64-b3e88ad90176", "value": 528448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771399867, "uuid": "c14a8ef3-ef4c-462e-951e-fa2ada318045", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e984a35-0c9c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771400170, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400170, "uuid": "91c1ad60-8715-4055-8009-a7f7fac50c44", "comment": "Malware payload (Mirai)", "value": "de73fa06ff5f3d5d143a26ffd661a6e4", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400170, "uuid": "3c682753-0970-49d3-aaa0-c28d78366a47", "comment": "Malware payload (Mirai)", "value": "fb51cc30f5ac43a9cc4ee8e036da03135fdfdb5c285d651682e96d42541fd678", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400170, "uuid": "6035559f-c06d-405e-9d1f-2687d06d6459", "value": "T17031AD9FA0F41A81C6CBCE0070E58DCAA39E999473F94732EC851EB69489D943C59B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400170, "uuid": "03c52a57-3bbe-42c4-9165-bd98058f1f74", "value": "24:HDdQC1WKrBM/hpi1bWK2wc6fko7egKPJd4vH9:iC1WJJo7eg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771400170, "uuid": "d7ddb378-f668-4f7e-9ce1-651fa3ced5b0", "value": 1845, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400170, "uuid": "7d9b2b82-520a-471f-8dd5-9898a14308a2", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7ed1a050-0c9c-11f1-8369-82aee05be84a", "comment": "Malware payload (njrat)", "timestamp": 1771400170, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400170, "uuid": "519a5b6c-8401-4e9c-9fe8-5ce0d2053ae1", "comment": "Malware payload (njrat)", "value": "08aca902632976774636f2556159d761", "object_relation": "md5", "Tag": [ { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400170, "uuid": "d2d6c4af-0710-442c-b3f4-c64f603bfb41", "comment": "Malware payload (njrat)", "value": "5930ab67fc7f8b4c21ceb60ea2eb2f7a6409582397ae248aabc214abd0e22559", "object_relation": "sha256", "Tag": [ { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400170, "uuid": "78ab6584-b51f-40a6-85d5-5e4a5b1ea850", "value": "T1E1F4F0222D422A25C97A5FB9C06711A877F0D8432267EB7A6FFC04F46DB3759C8275", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400170, "uuid": "3350ccad-3a58-4749-9afa-1066e8804e20", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400170, "uuid": "d9482ab0-c70b-4596-9add-bb2bc899d6e5", "value": "12288:XyWmMHyTGZ7qGszIMjy1j89CFnLT/N0HPNI0iAxxrKXBxoo1C7UUXJblNB1c:iWRdhpLT/4PPH7caoc7XJblNB1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771400170, "uuid": "9c899696-2331-48ed-bc5a-7d743524bf2d", "value": 726016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400170, "uuid": "df29c32f-bb8b-4d13-8271-5ed7af580038", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f2cee9e-0c9c-11f1-8369-82aee05be84a", "comment": "Malware payload (DarkTortilla)", "timestamp": 1771400171, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400171, "uuid": "ea2a8664-242f-4e10-9116-5a17888931bd", "comment": "Malware payload (DarkTortilla)", "value": "45b134dcf1bae5b1f415f377b29393cd", "object_relation": "md5", "Tag": [ { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400171, "uuid": "68b6c8f8-4a15-42b2-b82c-a3747f747d94", "comment": "Malware payload (DarkTortilla)", "value": "498a318a261405e073f01eb5a715305d0f202e21bef42e9a473d92bc2db33ac9", "object_relation": "sha256", "Tag": [ { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400171, "uuid": "e0be91bb-371d-4cf0-ad99-ec7d6ffcf77a", "value": "T12E5501275CC315A0C9B40FB4D2AA04E873F0C65F1555E77B6AED02F4EE66A0AD8234", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400171, "uuid": "cd593c0c-ae23-4d7f-b69f-17459a349547", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400171, "uuid": "e50be5bd-5f62-458d-8aa7-fc98f69cbea9", "value": "24576:u/khpLT/4PPH7caoc7gCnRveYepqMKDmfC4KOSSn2M6p5eJblNB1:uKLzswaoSRveYkqM3fC41p2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771400171, "uuid": "50a0b4c8-f79f-492c-b271-e86bf0ed6d5a", "value": 1395200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400171, "uuid": "f686f030-9f90-4cbc-b3e1-7634f9c497fb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f62b664-0c9c-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771400171, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400171, "uuid": "4afbdc7e-3c19-45ee-a475-4f09f43f1733", "comment": "Malware payload", "value": "881d1699b146803a1d17887193dd1c9d", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400171, "uuid": "685a58a0-689f-4474-8601-4b2ea1b5cd66", "comment": "Malware payload", "value": "b115b04b197b112eecf668fa549f65189e683cb87050708a72fcca268c9258e2", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400171, "uuid": "824f3b0d-87eb-4d5c-94e1-7a25f0b23bb5", "value": "T14A16333C129D5CF2ECDA49BA52F9B26171329E12F7E396510F2DA29314CB2C5365EE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400171, "uuid": "b4599103-44b9-48ae-b997-2d5fce46730d", "value": "98304:ajcvlKwJujtETnmAefkBE4XEVWCvN+kibtLkcutxeriRQ:a+lKwJ0ErmA86E4GvN+Rw9RQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771400171, "uuid": "ae56b355-2601-44dc-b298-f911afb23115", "value": 4069723, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400171, "uuid": "d109aac3-2698-4b28-b55e-56b90294fc5b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "80a232a2-0c9c-11f1-8369-82aee05be84a", "comment": "Malware payload (QuasarRAT)", "timestamp": 1771400173, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400173, "uuid": "46c90680-105c-4536-a239-ede85f78f18d", "comment": "Malware payload (QuasarRAT)", "value": "268fae4066afe5439b4fd6e5ec142929", "object_relation": "md5", "Tag": [ { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400173, "uuid": "fe196505-d34a-4e63-a5a6-b8ac9d1d0eb1", "comment": "Malware payload (QuasarRAT)", "value": "40c6d95876d7a085020471145c41cd5a16090625919d5de147334a52d24a6f1b", "object_relation": "sha256", "Tag": [ { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400173, "uuid": "851f5038-5905-4320-9a2b-5942c85ef526", "value": "T1DB4623393D825404CA680BFC803695C63BF1F68F6B16C72D7BED129CDD42A4B9B276", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400173, "uuid": "94de29a0-d95e-4e53-9841-a0f261db3a89", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400173, "uuid": "32614da7-404a-42ca-bf68-5d2641fe7cb9", "value": "98304:OcRDwNuAWm3GMvD+dHLRC9AdY3WkYSyC:OGlNm7r+dRCWRyy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771400173, "uuid": "c3bd2e11-51c8-4393-b9d7-cd9d1ceab144", "value": 5630976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400173, "uuid": "c94e24c4-7c71-43b5-bbdb-d01eb2fe02b3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81fad077-0c9c-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771400176, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400176, "uuid": "6b2ce19c-0f9d-4545-9903-06260da06cbf", "comment": "Malware payload", "value": "03cc5a865501e6434eecabc1e640ead1", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400176, "uuid": "d03876cd-1c59-40ee-8fc9-65cb832d4efc", "comment": "Malware payload", "value": "8524c04a63ffb797e378aae715689c21d530711136ce3f0cbdd4f65ebd8c1216", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400176, "uuid": "74a285f6-81e5-4b85-8fce-31ff985826b0", "value": "T1BCD623AABF88ACEDC4F2463719B557A0113ADD2D86CBE7CB85D8707905B70C09E41E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400176, "uuid": "723a9232-bccf-443e-98e8-81f1167ea703", "value": "196608:brjy6IrGxABG2ire+x7mi4kUQDrKIEQcs6EcZID6r1SlCObRUVieNU8k05zlUtG/:HZIMRE06EM2ayxtUVi8Uh08tG3PH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771400176, "uuid": "db5f89b6-3a7a-4332-a86a-ff9fcd348a08", "value": 13072663, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400176, "uuid": "29b3c3fa-d71c-491e-a8c9-0d41dfd5e5b8", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8bc5c9b6-0c9c-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771400192, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400192, "uuid": "f87efe3c-9e57-49df-974d-f99bba4b944b", "comment": "Malware payload", "value": "b09cd68771785785316025d7faffe363", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400192, "uuid": "37a6ed9a-c405-4978-a0fb-492db23b16f7", "comment": "Malware payload", "value": "8bccda3153ba7e10950c4b24b84637daeb8f8a54c2311f867d5634a060f7de62", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400192, "uuid": "46d250cd-5e47-42c1-ab64-17dbefa83f25", "value": "T10C179E201F5CDC96E4F26807D78EFB25197BD601A74FD09893BF18F9AD11E26A8CA1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400192, "uuid": "aafcdfe6-2abe-40c8-8348-2863a6469c9c", "value": "196608:npWGZQdcZS64vOkWtUVbteGISCZLQNRhX7Hz+gZPaGPRu+ZOdSdIAGhOjSWmbvhh:nPbZ0h7z+mrI+ZOSGhmkZtBgo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771400192, "uuid": "b77ac8d5-aa68-4052-b487-d4f81cd4e21e", "value": 19333120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400192, "uuid": "a852d641-8f38-4310-8586-7b09d5f57f7a", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8d4994d3-0c9c-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771400195, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400195, "uuid": "a0fe54aa-6821-4fd5-b060-83d06aaac258", "comment": "Malware payload", "value": "9c27d6a3c4ffdefc033c2f4cb826230f", "object_relation": "md5", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: lunex", "colour": "#cb4cba", "exportable": true, "hide_tag": false }, { "name": "pw-lunex", "colour": "#A9A8CD", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400195, "uuid": "712278f7-029a-417f-a543-840f29b9acb1", "comment": "Malware payload", "value": "5ec729292f5a70529fd335b34451fd40cdcb2deda7011fc965730db79af2c9b3", "object_relation": "sha256", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: lunex", "colour": "#cb4cba", "exportable": true, "hide_tag": false }, { "name": "pw-lunex", "colour": "#A9A8CD", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400195, "uuid": "ae5fcab2-028f-40dc-b721-b30b848dd1ca", "value": "T1DF08330CD35819D5CFB864F689D35375C8D3990F8A03A9C749B9872C084BAA79EC73", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400195, "uuid": "4af40b14-4d75-4f24-b198-91bb7ef5a162", "value": "1572864:putv3aqpik/0utYY7hISfFYMxosZLR2rMBNB/waJMkVIUexBDPlP6TaErGRF33:cV3aVanYstfbSsP2rMBNB/PMIexBxacH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771400195, "uuid": "ddc81f5b-9701-4ed2-83ae-a699c90d461e", "value": 84820712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400195, "uuid": "f5f39b37-9562-40dc-9a01-421d9f40c4e7", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8e2e870d-0c9c-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771400196, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400196, "uuid": "59a44dcf-ccbd-4fdb-ae37-8d995c0e9709", "comment": "Malware payload", "value": "635c804db9bd198eb601f0c36db4f149", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400196, "uuid": "53838762-07ea-4bf0-a453-825bad163228", "comment": "Malware payload", "value": "541282ca90ef948f9af4ad2db421c25b5231553cfc4f70dab18074c628442845", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400196, "uuid": "56359ea8-e619-4591-97ed-885ddfd0b22b", "value": "T1D1C633751B68B90E2C2E275CB867D50D18B3572903CEB097C215F230676C629DB7F2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400196, "uuid": "675830e6-3132-475a-875f-919dc77440da", "value": "196608:A1EcHjfgCtnN1eg+MDzQyGiXWle0piGFpI5zorkc8t/qy3KzpGgvKDpj7:KzgqNxTQyGiXWMiiz6nu76zTvKDZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771400196, "uuid": "c30ab695-b9ce-4088-a7df-28d32ce203da", "value": 12302855, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400196, "uuid": "eb59ccf1-43b1-46d2-83b0-f190405df135", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8e6ef8e2-0c9c-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771400196, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400196, "uuid": "f6988780-1019-4ea3-ba35-15515a1f716d", "comment": "Malware payload", "value": "2249365c8168d97b97320b7b775e3b21", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400196, "uuid": "80a39ea7-9a54-4e6f-8ba3-e6225e874817", "comment": "Malware payload", "value": "c8398a39f44ab9043a046373c67055d25bf9444c7de2d23f80cd1d3bb98c277c", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400196, "uuid": "dd3bb3a5-3ad0-40ee-8244-584fa5b63fac", "value": "T117873A43F8E21DE4C4E9C575D165816BBAB23C2D1B3823DB1AA0F7201F3ABD06A767", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400196, "uuid": "76368a76-cb44-4754-a58f-7e5be891dcf3", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400196, "uuid": "0babb85c-40fa-49cd-b44a-e731db40d6b0", "value": "196608:mUrvspFlqsS23eCJJsW2u+0kNKJo40544aWUMJQcjo+0Tuih5sEydSL:mUrEpSsV3pJ8FQJY5SM8T0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771400196, "uuid": "7e1f419c-bc57-4200-8efc-3983f40c6329", "value": 36686848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400196, "uuid": "68c4747d-b6c2-44c8-b7b7-94f75010614b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "97874f92-0c9c-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771400212, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400212, "uuid": "0a0ea857-11bd-4dc0-a3ac-54e25ec7b812", "comment": "Malware payload", "value": "de1c07a4fdd63d8fbe71fc0eef1b6a4c", "object_relation": "md5", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: lunex", "colour": "#cb4cba", "exportable": true, "hide_tag": false }, { "name": "pw-lunex", "colour": "#A9A8CD", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400212, "uuid": "a5a4a172-f938-432c-afb5-8ce0a9c10f11", "comment": "Malware payload", "value": "5ba5ef946b6bbc98862c8d99e63536839ec7a22f149bcdf5c30b32b47181a411", "object_relation": "sha256", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: lunex", "colour": "#cb4cba", "exportable": true, "hide_tag": false }, { "name": "pw-lunex", "colour": "#A9A8CD", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400212, "uuid": "25b94f5c-1afa-4c26-87be-b1e529a286a7", "value": "T14B08332A4BF5B879C84916352117807DCFD1D3E19F9B7417C898C6608CE2EE8DA817", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400212, "uuid": "5d3add5f-1346-4ec1-90df-e383a6060ecd", "value": "1572864:koQQykPrE7CX5x/BKJiIgGw6WEpvoRl2m+Xm+8zXugyDHvcHmOAe:HQDgEepx5KJdbJp5m+Xm+8ixDHed5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771400212, "uuid": "7d8ced63-be04-4536-a97a-121a3c7a0f8f", "value": 84270158, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400212, "uuid": "35bdb14c-1cef-400c-ac2b-8e2c909b734b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c8f5926-0c9c-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771400220, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400220, "uuid": "cac5a422-96a4-419d-9851-2b6be4df758e", "comment": "Malware payload", "value": "573d2f398ed51189df5eb9b458a148a3", "object_relation": "md5", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: cyrex", "colour": "#c7fa8e", "exportable": true, "hide_tag": false }, { "name": "pw-cyrex", "colour": "#d542d1", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400220, "uuid": "338a817e-ae5a-4224-a7a1-c71044811be5", "comment": "Malware payload", "value": "01b610697bfc4f0e3561c78c703b979ff3e5cecf376ffb5c14cb7661a7c19698", "object_relation": "sha256", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: cyrex", "colour": "#c7fa8e", "exportable": true, "hide_tag": false }, { "name": "pw-cyrex", "colour": "#d542d1", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400220, "uuid": "f2fe3afd-959a-48d3-9ab7-f12ed567c56c", "value": "T1D0183364177159B5C93ADFFC6FA64EA79420CB36EDB2249EA3CD449034E02ED1CCB2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400220, "uuid": "bbaf5e7b-2a1a-436a-b770-b56fb26aad84", "value": "1572864:coDWNT8imSeCvOBdo+elzOF2U+3iD/db65qffzf0e8mR2MnhKOAOwV5bIv329jlG:co6TDmSeYOLo+HFbAiJS2TF2hOSW329c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771400220, "uuid": "5ba89195-4e17-4692-a54c-0dab1692d852", "value": 90606206, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400220, "uuid": "d1675314-2ee7-4843-a37e-05a8bb3792cb", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a27d5084-0c9c-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771400230, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400230, "uuid": "4c2404f1-39ec-483d-be29-e63e1e06aee4", "comment": "Malware payload", "value": "9da1d6efa7bb5f37c8d56d64067415d6", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400230, "uuid": "d5fc6b82-efa7-4620-92ce-234db2dadddc", "comment": "Malware payload", "value": "33d26e10c1d2f640d60b95e9cb66bf04f88ffae5cc148a3e482aaea9e8c0b8e6", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400230, "uuid": "eacde4f6-958c-40a9-bd1d-e5900e52f97e", "value": "T1E5873B87F8E22DD4D4EAC571D525815BFA61382C0B3C23DB1AA0F7241F3ABD06A76B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400230, "uuid": "e16597e1-aade-42db-9af4-3f09471c7731", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400230, "uuid": "a4eda08b-267a-4eb8-91a7-ac77957d3d3e", "value": "393216:dTeUCz4DMcV66W4z/dpf3XhRUU5DSL5bFt:dtMcU6W4z/dpf8U5DS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771400230, "uuid": "8bdbdfc5-c575-45ab-9fc8-caa5b063e294", "value": 37022208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400230, "uuid": "d1b9a8da-2ac0-47b3-9176-24258057f465", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dbeeef2e-0bd4-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771400527, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400527, "uuid": "d736c6cf-b2fb-4680-9db9-4e04ff611aba", "comment": "Malware payload", "value": "18bd2b846c8c70341f3c6a77cf5ff929", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400527, "uuid": "3a753fd5-a9c2-4de9-8cc0-45541e733852", "comment": "Malware payload", "value": "55ed77b15797c81f13f3cddc818d23e293d90d08b0764a675505ce99b94b1c3f", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400527, "uuid": "bcfbaccb-4d42-4740-9594-3615b65027cd", "value": "T1C5233BF60723ADCF972B0D21E50C1205ECA8E8A772D990BDFF8109594EE9518CDB4D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400527, "uuid": "3e9af583-2f30-4e53-9238-569c8b58a318", "value": "1536:D68wy0cvvO+9ADZZ2VAryLgKg0vZMjmg8Ks+VB:D683TOYQ2VcykKg0BOt8V+VB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771400527, "uuid": "bbf1b95f-214d-4b16-9850-91559d189e98", "value": 49839, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400527, "uuid": "3d59dbc4-fddd-402c-b466-49c3320623b7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76c5d13b-0c9d-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771400586, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400586, "uuid": "24f49ffe-6ab6-479d-9122-9c017f29c192", "comment": "Malware payload", "value": "ab4e96f77203e63120b102d90e1befd4", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400586, "uuid": "4fb31647-2ff5-4716-b5df-36074116a435", "comment": "Malware payload", "value": "0e09737078063e76658646f95390ac60d197e6f7f4d10cdbbae060c601450271", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400586, "uuid": "74df5c58-0fad-42ba-9a76-ea568304b9fd", "value": "T1F3234BF60723EDCF872B0D15E40C1205ECA8E8A732D565BDFF841A598AE9518CEB4D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400586, "uuid": "57a7b336-dda4-4073-a83e-45ee403e2f53", "value": "1536:inD0u5U1jO+9ADZZ2VAgyLgKg0vZMjmg8Ks+VU:inDKVOYQ2VvykKg0BOt8V+VU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771400586, "uuid": "0d0c31a5-f689-4d94-b7ee-25f653a9183c", "value": 49839, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400586, "uuid": "0a4467a0-5e1d-4f73-9f82-5e1cc160f8fc", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76ca1828-0c9d-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771400586, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400586, "uuid": "8a1357f8-19f2-4673-90ba-42abe52e9e15", "comment": "Malware payload", "value": "b0a1050f69a9ced5915412d080fa62fe", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400586, "uuid": "5348cc45-e126-4b8e-b063-2f4e00bcd72b", "comment": "Malware payload", "value": "f2351a69a5f002bcab083355f2e5b73925de14c38d570ef9c3d48477229e8b24", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400586, "uuid": "4fdccf8d-a85d-4221-86c7-cef5b6bc72d2", "value": "T156235CF60723ED8F872B0E15F40C2201ECA8AD9771D994BDBF8909994AE851CDC74E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400586, "uuid": "d02b1522-2b1e-4ad5-94c5-046c45c604ae", "value": "1536:U9CPqr6w9cGRMBY7R5Yo01/tSGbErz/V17eaT7+Vi:U9/ryqMBYgo0ivlT7+Vi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771400586, "uuid": "bb701884-55c2-4fb6-a653-98205b52ba36", "value": 49155, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400586, "uuid": "9746492a-5d9f-4fcc-93bc-12204b0f4d5d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76edc240-0c9d-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771400586, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400586, "uuid": "185c3ad2-9c2c-4404-8fe6-ba9eb2627e43", "comment": "Malware payload", "value": "4cc7985dcd2350bd9fffc2280310df44", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400586, "uuid": "8c9fc04a-c9ab-4e5d-8c05-0931526afd5f", "comment": "Malware payload", "value": "231173ffd32e70fba706b68a247a9dc9505a539022884eecde45d606f9e7bb0a", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400586, "uuid": "bba7f2b0-037d-4fe2-b719-3f56bf2ab1fb", "value": "T148740AFA1223AD8FCD260D00E00D0117ECB4BC7B72E554B8FE4495B059AA558EDF5A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400586, "uuid": "a68f07b4-936d-41f0-ab3b-43e7ea977943", "value": "6144:EkHMsxGACdSkBKOeZV7QzEtks4dGQexrxEs3bfVdtgxCw:tHMs8E5trxrfV7a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771400586, "uuid": "b624ce29-9c65-40a3-8605-8529f3d02668", "value": 363867, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400586, "uuid": "adb4fcc0-4e00-4bf6-a1e9-2a89f859db95", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c0373574-0c9d-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771400709, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400709, "uuid": "ac0bb13a-8b8f-46e0-8877-e7db9398b4dd", "comment": "Malware payload", "value": "ead57ede9647c3edbcd7860984dd52ec", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400709, "uuid": "17b81472-600f-4928-a068-dd8e13ebbc48", "comment": "Malware payload", "value": "1e41789a48a95e046fa36011c2c7ba403ea77073b98cc55292cd0529de3a40a6", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400709, "uuid": "6e84a0d4-4721-432c-89cb-f6bc9e4a1e6d", "value": "T1B78412729904EC8F0F0E879CF0779AA55EE44EC7C8B5E0DA5488FAE2935FB2224175", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400709, "uuid": "d0c6906b-84ae-4e16-8a7a-81a2c1e9982f", "value": "6144:ADkiM+KD/2pjhPo7U1tqmfJtCgN/40ELYE08aUkQJU97mgZEMDD8UkarCF3rwQns:ADkzdD/2pjhPMccmfJtbN/O4jQR+YUnB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771400709, "uuid": "2190987d-93ea-41b4-8889-bae174486124", "value": 376155, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400709, "uuid": "87fe4f2e-a699-4381-a57d-06ea43fd7f4c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "063092bf-0c9e-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771400827, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400827, "uuid": "9da165bc-8692-4390-9718-10dcf648db35", "comment": "Malware payload", "value": "d1f79bb03a07239719a918a7854ddbc4", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400827, "uuid": "afb2d4b6-aa47-4ec5-a863-16b6f6bc6055", "comment": "Malware payload", "value": "008a44830b941b497e989573bdbfd9eb4a3c69734b26b34cd548a57f5e2b8440", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400827, "uuid": "dcec400a-5e7e-425c-a768-ff868c7bb06e", "value": "T15584233221975C480A6855390B5B067BBDF403D710A9EBC9ADC1BBC781376719EAEC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400827, "uuid": "b9255887-766d-4ff7-a84a-4a584ab42bc7", "value": "6144:ruiLcmLxlRrCXZfutUlaGVxxwNtJIAJ1b/QkeX+lmnaB9skB4kX:ru+LfRryZuUsG3KDJIAJ1bdSwmaB9sED", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771400827, "uuid": "43e86f46-3909-4269-914a-082bf3514942", "value": 378394, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400827, "uuid": "ada9d9b6-84b1-4297-8224-f8569592ce10", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07469308-0c9e-11f1-8369-82aee05be84a", "comment": "Malware payload (Formbook)", "timestamp": 1771400829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400829, "uuid": "300d8f88-7edd-4f25-8730-a21c7a9a5237", "comment": "Malware payload (Formbook)", "value": "98710889cd69c93b9f54c7875e6d7ad2", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400829, "uuid": "e4327fe4-bfd7-435e-8f17-90cbfa800845", "comment": "Malware payload (Formbook)", "value": "7c5cbaeb20361e8885e5cdb09526e75f1fc6c7e8fc2457c83418891feab4c9ee", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400829, "uuid": "bd7714fd-1ed2-41ad-9b29-65e76f299960", "value": "T164652361FD766CA503845234206E5E0846E19F874C0879AA3F8C99CF0F6EA8F85779", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400829, "uuid": "3a6f5065-ab97-4012-8407-91166c362bf6", "value": "24576:3j2xIvn78DMkIl4GJGGAK+jeHAW7M9icxsh4m+mJ5jCUUn7u5Zhaqaica:3SweMvF4u+05DgmT+ica", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771400829, "uuid": "c63f512e-d33c-4c5c-b940-8f5f0a9715da", "value": 1523869, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400829, "uuid": "c0b55562-d9dd-45f8-9096-cedff6197a14", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95dc9030-0c9e-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771401068, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401068, "uuid": "e464ab86-615a-42c8-9369-b4d8adb67693", "comment": "Malware payload", "value": "257ec2aa226a4bf48c1ba7b06cc629b2", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401068, "uuid": "624444f8-15fe-4712-984f-e5c9338ace76", "comment": "Malware payload", "value": "0fa25c971d0d3df8c67f41bf8ea262683da7df9b97876621b6f86a0b25bb8e7e", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401068, "uuid": "7719965a-2541-4255-8469-b9d3c34aae1b", "value": "T10FF423AEEE554D108B4AC51C4DCBE62F00A1C1D3EBB0ED42451CED89DA7F2899EC2D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401068, "uuid": "011b0eb3-12be-4b70-bdba-5f34b31baa66", "value": "12288:JRsjQKJBNT3/pXCT3IirEcXCZUfJK95jL0aNP5CTKqlVsAYXddfTXmyEnS9:WDbpXBioculTLb5CT94nKymS9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771401068, "uuid": "09ead1ce-2c97-425c-8bfc-c35ca769c831", "value": 750656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401068, "uuid": "d6dcf1b2-8e03-43a4-9686-209e4690f8e4", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b97c88e3-0c9e-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771401128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401128, "uuid": "1480960b-87cf-45cd-8d25-ae23e2ca6e03", "comment": "Malware payload", "value": "3ba68d135cce70ecc833ed2996d79979", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401128, "uuid": "b3274976-6d5a-49aa-a33d-34d04f01a475", "comment": "Malware payload", "value": "9ea92320907fb4ec21c444f263b340e4e2db1cb0887593dc20be5c52abb217d6", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401128, "uuid": "e22c5474-4802-4e90-82f8-266ac8c14b78", "value": "T1CAF51110D811DEA2025C8264246A5E872A504EB70C48776A7F8F8F9E1F5F61FD47A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401128, "uuid": "333e7af8-7219-412e-bbd4-adf45694808b", "value": "49152:aBYZ5+InKY22C2LBBMP0IaISF0Bl90HP+H1kdbN+yOL3pQDhJ4CcB5lZLWSL:2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771401128, "uuid": "4d471e65-9492-4041-983e-738b1e5f47fc", "value": 3554709, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401128, "uuid": "45ed0fb0-511b-4261-a1d5-f6f83c10af75", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dcab83d9-0c9e-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771401187, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401187, "uuid": "24ce2b72-f9eb-4311-bc4c-60294bbf107b", "comment": "Malware payload", "value": "d017e4c89938a895c6056403f7c6d0be", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401187, "uuid": "2e47a434-ecc3-417e-bb8f-906dd8f8ea82", "comment": "Malware payload", "value": "7c52e453f5b51592b8b9f6aa15a1b816d07d2882118bacf09e98922173491e53", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401187, "uuid": "ac47a1b0-98f1-4722-bd67-60dd867283e3", "value": "T1D0652320DE1A1ED02B68B32660DADD0509D197D78C097504BF8DA4DE4F2E38F94BB4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401187, "uuid": "a9909787-f8d4-4f28-8a90-e82dbb57b6fe", "value": "24576:Vjigg5NN5KDgBqf0TtZ5BphNE3QzfggMCY/bVOd4PBKqXCK+x9+E:gLyWaAMcTh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771401187, "uuid": "20e9b14f-f01d-4ec9-973b-c90515ba7045", "value": 1505433, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401187, "uuid": "0258c4e5-3101-4bb1-9ba5-aff48c6158a7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dcad2218-0c9e-11f1-8369-82aee05be84a", "comment": "Malware payload (PhantomStealer)", "timestamp": 1771401187, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401187, "uuid": "01124533-0f76-4293-aa9a-5c67e9954638", "comment": "Malware payload (PhantomStealer)", "value": "bb5b7bcc95795162b79b74bfa38a3f31", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401187, "uuid": "8b807d5b-9f03-4588-92e7-a71d0d4e8f0a", "comment": "Malware payload (PhantomStealer)", "value": "849a780985cdee9040d70b8be27b8b1fdca72c974a17dd169ac2a989b1930aa1", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401187, "uuid": "10d6ef72-f043-49f5-be15-298e78c26081", "value": "T1B1062351ED481EDA03689A39509F5E0865D00B93AC56B8863FDC20CF0F6E79F547B8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401187, "uuid": "f2644229-db0e-46f6-9348-e6c66950ddb5", "value": "49152:anCLOBk3eXir2sGfif1NqbQFpuQTk3TPekCy02UZQkazEWcvmnXVL76PP:t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771401187, "uuid": "e9a3cf15-8093-4101-91f5-dd6fbf25a962", "value": 3656073, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401187, "uuid": "99a9da7f-843c-49b3-b400-42d580b4551e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd4b414e-0c9e-11f1-8369-82aee05be84a", "comment": "Malware payload (PhantomStealer)", "timestamp": 1771401188, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401188, "uuid": "9bee5603-8b85-4c67-a6ce-d21edc1cd180", "comment": "Malware payload (PhantomStealer)", "value": "906deb051d3074d9e94e3576f18dc02b", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401188, "uuid": "7f27280b-f230-4958-9080-819081da928e", "comment": "Malware payload (PhantomStealer)", "value": "882f1511c67b8ebdd00fa5a836f2821e40ccbd52a2fcb74dde7ddbc8fde9aebe", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401188, "uuid": "aea9e193-be57-425e-a2b3-c970dc164cad", "value": "T153F51150DA19CDA5061C922864655ED32A900EA39C08BB793F9F2F8E4F0F25FC4766", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401188, "uuid": "738fc556-e631-4f7d-83bc-6428bc11e2d2", "value": "49152:PrWY1mpbKL0sMgOm+h7DqJN8fspxt3XIfge5lP858ospzZhG3:v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771401188, "uuid": "c554e481-6293-4d1b-87d2-e88d005ac1a4", "value": 3554709, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401188, "uuid": "ceeaef36-d5ea-4b7b-84c8-d2f94053d5c9", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "65c3b102-0ca0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771401846, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401846, "uuid": "f26b47d6-2873-414e-9564-64d52af54e69", "comment": "Malware payload (Mirai)", "value": "3d50650a648764501c1e2a60b579c427", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401846, "uuid": "04c98dbb-d23e-452f-9452-b27d4589d12c", "comment": "Malware payload (Mirai)", "value": "0391734eb7aa0ea1e978ca1eb0c2f14b7dfed5fed09c3cf372c4513224e88f1e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401846, "uuid": "af6cc726-e23d-4fae-a8ec-f0e055847cf7", "value": "T1F5F33969BA0F6C41F2C2D3F9DA8C87E13E1735E3C6778DA1790252EDDBA39D949805", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401846, "uuid": "4147db26-ba22-43c4-9ffc-53ca9395c5c0", "value": "1536:3dMiHrrc/qDHavM5Dtrg89RPA4b1X75rgmnX7Dy+IfMpDEn5p5M/LW:/7vDtrnPTR71gmX7Dy7fMpDxq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771401846, "uuid": "599096aa-7ddc-408c-9cfd-b84f5a310dca", "value": 157544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401846, "uuid": "32b09fd9-56ef-4e01-a501-0cc985c5f362", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "69c3904b-0ca0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771401853, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401853, "uuid": "b09251b7-1f9e-4f93-966f-fb9309c90c25", "comment": "Malware payload (Mirai)", "value": "a01146a7f970b248fa0f14f7ae4ab49a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401853, "uuid": "75c1227b-b4c4-4729-8496-55b456899c15", "comment": "Malware payload (Mirai)", "value": "a8ecf6c41a97c3cbad799cfa8df7a3c4c2662551cdcfd3c5c506e802197761da", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401853, "uuid": "9279d33d-be8e-4a0a-8b42-7bc38b32e8dc", "value": "T17BC30956F8819B11D5C151BAFF0E124E77131B3CE2DE7312AD24AB307B8A8BB0E3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401853, "uuid": "ae1df261-53dc-4e5f-8ca1-93014678415c", "value": "3072:fWD7YhjFMX+maR8TcDeRqQV3tNQYciYTG1j:fWD76aX9aKTcRQVnoiYq1j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771401853, "uuid": "9f2ee28d-3090-4a53-82bc-646096113199", "value": 129244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401853, "uuid": "329f468e-500e-4bf6-bf95-7f00fe804421", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "69d6eceb-0ca0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771401853, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401853, "uuid": "456934f0-b3c3-44c5-9bad-f7c167c9c506", "comment": "Malware payload (Mirai)", "value": "d6a3cb92c4b6a52d68e8a7326e9188ec", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401853, "uuid": "457630cd-6b75-4c35-8293-895782fe4793", "comment": "Malware payload (Mirai)", "value": "e0cf5e22f26ad92af04d47b7d6f0cfabb1ca995d494de0c20eee78b2291d0e2b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401853, "uuid": "f82f936e-8bfa-4523-a370-c5aa29c8e128", "value": "T1AFC39DABB24F1051C82647F41BCB579C2E3325019E2B9AE77C6E373E1A369DE58063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401853, "uuid": "8951787b-14cc-423c-9960-4da39294a3a7", "value": "3072:gf0GQgHfg5nBR4YYSOxTKB6Aq7mgbgiCrheiiU4/qe:gf0tJBR4NSALD7rnCrheiUqe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771401853, "uuid": "a53d7dd8-6291-4351-ac01-a2833d9858dd", "value": 124344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401853, "uuid": "e087e95b-ddda-4ae7-83e3-01cbda6f9ee2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "69d743c6-0ca0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771401853, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401853, "uuid": "bc46277d-a728-44d1-a3cc-3716b09755d8", "comment": "Malware payload (Mirai)", "value": "39c1ba8b2a2e9fe4e891c9cf8197908c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401853, "uuid": "2220ebaa-4ce6-4803-931f-7ba51632a6c6", "comment": "Malware payload (Mirai)", "value": "47211bc5318a0a940a9bbd822a712ad392f5bf7259f343b126ceaf1a03959ce2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401853, "uuid": "4dbb1b12-7472-4eb1-a881-e0126e4b3e2c", "value": "T1AAA328A3CC766F58C628D5B4B0B18F796B93AA6081475FBE1567C27480C3D8DF6063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401853, "uuid": "c2a4c82b-14c4-4dd2-a2d7-44d5394612bc", "value": "1536:71ufPeqU2CVKCsNV7lsLPC9z+NzWuBx/3RhyXA0:wbU2RC4kPCtSzWu3/3L10", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771401853, "uuid": "cd7a2f53-16c6-4540-8fda-4fe6bb189e27", "value": 105056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401853, "uuid": "c541c2bc-8bea-40ab-81a0-185ac9692ad9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a86efa1-0ca0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771401854, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401854, "uuid": "8cf209d9-d327-49bb-842d-f34851c2dbbc", "comment": "Malware payload (Mirai)", "value": "115a06fddff3e9707deaf5896d63b9ab", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401854, "uuid": "f8d6b10c-51b5-4a3d-a20c-f4aa96e12d45", "comment": "Malware payload (Mirai)", "value": "1fc381e68e378a00b766422addaa4fcdca5135bb3c578fb8989d330e9a41c910", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401854, "uuid": "50790cbd-1c4b-4869-b5a5-e4b0f97f9634", "value": "T19F23F123456AF8F1D02869BF804DD584D4AEB59013940F7A80FCB5FADDF2A943E209", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401854, "uuid": "33631dc5-bb04-4ee2-a0fe-3eb820bdf62b", "value": "768:SInEVflzTpXUiyd0voPa/tawgkPqTbj7gx57UDQoZkJsoSdU14G:js/JlRvoPa/tP2jgz7aqJ7X/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771401854, "uuid": "5b82a14b-d55f-4d0e-9451-208326837107", "value": 47768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401854, "uuid": "1a8b8bb5-cf61-4d8a-8a6c-db425e1a3076", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a8aab4c-0ca0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771401854, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401854, "uuid": "06c41d34-61ee-43e1-b2fb-0d8369367fc2", "comment": "Malware payload", "value": "f062256a728938037f48e484fbe39e2c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401854, "uuid": "07304d0e-c087-43a4-8ab2-9a6862772155", "comment": "Malware payload", "value": "cdf6274b285a878c90ab83043f151754e46b957db39631e598f34b1d6b99424d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401854, "uuid": "f02e2f31-c022-432b-854a-8eb6a3bc426b", "value": "T16B32C517A7BBAE1BC4D037770193072162E95F916124472FBD0D1C8E6E9A3412D3EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401854, "uuid": "17f74c8b-a4ea-4621-8537-79b736258520", "value": "192:xvrOR1CQOsz1NxfAz+OH9iG0GhWaDpU/O7Q89AGSyb4qeif:xvrbCzfap2GwIU/kwGSvUf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771401854, "uuid": "bad031df-4197-4a31-915d-a52f76ada3ca", "value": 11024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401854, "uuid": "34b88bba-64f9-400c-89f5-bd057a1edbd0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c1a9ee8-0ca0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771401857, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401857, "uuid": "96807ff9-85b6-4a07-88c7-cbf49c1a8fa5", "comment": "Malware payload (Mirai)", "value": "738c2f6b6d7516ab504217f2991d4f2e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401857, "uuid": "c7719ba0-3188-43f0-9c6b-b6a6f3c9fd54", "comment": "Malware payload (Mirai)", "value": "9989c3049e0c5728cdf5d1ab5ec56feb172e1743ed720acb218649fc2d364fef", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401857, "uuid": "2885f5ff-b8b7-45ee-b347-35e8e8280b29", "value": "T193B30945FC505B17C6C652BBFB4E428D7B2A1768D3FE720399256F30378B96A0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401857, "uuid": "4a63459b-febd-4654-a139-8fe3a78e0c7b", "value": "1536:TUK9yqnU8vGRz4VA4j6T9y28Ty6O5FtZpqQcZlCtwywXvqcVuafhPeA45Zvz:AixnUHz4Z+5ypkn3E8z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771401857, "uuid": "70597e24-2934-470f-944b-7994c0eb3565", "value": 117280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401857, "uuid": "89e247a1-8920-428a-96fe-d03e344fef05", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c2b9f9a-0ca0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771401857, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401857, "uuid": "d71c3b6b-3e1b-4f5f-9c8c-0100de5e81e4", "comment": "Malware payload", "value": "7869991a17896b65ddc7f797d6a973a1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401857, "uuid": "b7c51027-8fe4-416e-a082-931278378ab5", "comment": "Malware payload", "value": "f47f31744963241467016fad235123aac00d057da927225d8ca852d0460ff496", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401857, "uuid": "7f94376a-8b5c-4354-bcef-19f44e041d78", "value": "T19EE3B71A9F910EFBDC6FDD3302A9060635CC954722A43B763674D528F64AA4F4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401857, "uuid": "24ceaddb-a0d2-44ab-bc84-516b86359c7b", "value": "3072:axjJw1Cc/0s6YAPwenUr48pzfR+Joney:axlw1xAop0YfRe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771401857, "uuid": "00e40b6b-c2c2-4fce-97ce-925e46c20d8a", "value": 156680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401857, "uuid": "6db3c603-9f0a-4ed1-85dd-10f7db1ba541", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c30766f-0ca0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771401857, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401857, "uuid": "890c2930-90f1-4d52-93ac-ac6f994b05c3", "comment": "Malware payload (Mirai)", "value": "6d00d7a83f0220814a38e1d8993e5acf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401857, "uuid": "9de0a43e-ac39-4887-acc3-137253e6524c", "comment": "Malware payload (Mirai)", "value": "40c63c16669111687fd70a7dff477c5de0d4315ab4546616952ff9fcbd09dd64", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401857, "uuid": "1704b64d-2bdf-4d5e-9357-5baaa20e47c9", "value": "T1B5D308C7F900D9FAFC0AE7374853080AB230BBA545925A372257357FED7A1990477E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401857, "uuid": "f1bdde1a-da46-49c8-8174-7f7e3d90d660", "value": "3072:OXbul4MGHJvkrybLutTK/OwpiZdDoOPVO6V1jbiALNHFInx:rrybytG/Oyi42VOgLNAx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771401857, "uuid": "c2e144cf-75f9-4178-98a0-e8acd3e8a483", "value": 140064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401857, "uuid": "9992e9f2-9689-41c9-a7dc-ca4cc700e548", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c321ac2-0ca0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771401857, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401857, "uuid": "2739db38-b990-4056-829d-01cb68281182", "comment": "Malware payload (Mirai)", "value": "91a5064e4dde7d32a8789ca60313c5e6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401857, "uuid": "a1aa784e-7673-486b-b1b7-2aabd55834a8", "comment": "Malware payload (Mirai)", "value": "a77342953b19d227b0246218e03b861f48163616413cbd02abc0017cb134e09d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401857, "uuid": "5c729d10-b522-4195-9811-9264c5970b14", "value": "T18FE3885A6E228FAEF67C873147F74A20976D23D623E1D684D2ACC1141F6038E545FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401857, "uuid": "140d0702-ba47-4e8f-9cf5-8d43ef8b5814", "value": "1536:p+fTcKot8sp2MKypYz8ZOfGQ+v3eB/hub8mXRCTUGk4onuftL4Vx2dbK:pYlybKpzEOfGQ+vEubTt4ouftL4SdO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771401857, "uuid": "31d81cba-9bba-4419-ab21-294bbee75226", "value": 156680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401857, "uuid": "d82e5bdb-604b-4414-b095-92c7c3f9b66e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c36aa30-0ca0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771401857, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401857, "uuid": "cbe10b67-b17b-4455-9c06-1bfeb07396c9", "comment": "Malware payload (Mirai)", "value": "3376a94c2bf552c391ec5c3f61f828ff", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401857, "uuid": "c17eea8b-e015-4f7c-9c3b-d9c8b4b63698", "comment": "Malware payload (Mirai)", "value": "0f5ad08e9c2b029898dc2106c9b84e7bede41df4f1d7b63e1dd78755170ece27", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401857, "uuid": "ecd69bcc-bf00-4472-b316-7c90ea8db0b8", "value": "T180B30945F8445B17C6C666B7FF8E438D7B2A1758E3EE720399256F30378B85A0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401857, "uuid": "f5fa0c96-0e60-4257-9693-8ea311ded1db", "value": "1536:57jnPq8azP4V8YOTIBRvyNOzIuSIwYeFWd/lk68wywlQ3Ym3Tb/V1oEakCxk:1zPqF41OUBljSIxecUtCm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771401857, "uuid": "54f102b7-3bf5-4624-b3c8-62b41ecfeed0", "value": 113184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401857, "uuid": "e00b9c5f-b296-4db8-a8ca-e98b98bfc143", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c37bfda-0ca0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771401857, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401857, "uuid": "720b2dc6-7212-44f6-ac47-a81410ceff5c", "comment": "Malware payload", "value": "605ad704eb7e52d7d038edde889fbd17", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401857, "uuid": "8e977725-d8b7-4ab7-8ab6-59c7161fb146", "comment": "Malware payload", "value": "ceff501f84a07e94e7d0a9b2732457aefc736159c9a73f2a8c80d3745f269887", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401857, "uuid": "2c226f47-574e-4fd6-b112-02786388d2e5", "value": "T1C7C32A05B30C0D47E1633EF43B3B27E193DFDA8121E4E640655FAA8A91B2D32558AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401857, "uuid": "3573c14c-d471-476f-8ed2-2eb818a5ea80", "value": "1536:68B72AZ4ex10JrZqQ7UrZb6wI0vAnjiLVRuzae8Dhq6N2te5f3dmJ:6eB4exMF7oZKJnCNYaUJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771401857, "uuid": "46506869-86cc-4cfd-a3b8-6b8ae7550605", "value": 121508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401857, "uuid": "b9d4500b-e9f8-4e59-8854-e8f4b35175db", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c37e856-0ca0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771401857, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401857, "uuid": "8e8022be-abac-403d-9236-ed59b65b0dad", "comment": "Malware payload (Mirai)", "value": "f531243a3e500283c11d08fd0e35ba8c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401857, "uuid": "b101e797-2fb5-4fc5-9d60-d30908f6e5ef", "comment": "Malware payload (Mirai)", "value": "0ca32f4de6c7ffff7908e5f2d68408738bb1e1b9d2e65175fa269e3abe414a45", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401857, "uuid": "e187102f-a0d9-44e7-8dd8-c0dd1d90e3b6", "value": "T15A333C4DF783E0F0DD4B0531115BF77E96349E025124DE7EEB98BE66AE32A02711B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401857, "uuid": "bd6291a0-dd2a-4a7e-a3a9-666990da917a", "value": "768:lw5A3X1eCZWUJ2SNpRflrFWwqTlFNB5azjYvzNeVMU2331ANA0B7RhuqDV98oN+s:lwkt3NpOzwLMU431ANA0BLBCMr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771401857, "uuid": "a6e175c4-284f-4ec9-8d7d-33ec55b1a03d", "value": 50476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401857, "uuid": "b20dd7f3-905c-4bfb-8d6a-616e95bf42ab", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c3ebaa0-0ca0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771401857, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401857, "uuid": "0dab67e3-c60c-4f53-830f-938d3420a4ba", "comment": "Malware payload (Mirai)", "value": "cea1e30a909111f336b286b27cb42f42", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401857, "uuid": "775bc50d-03b0-40c0-a9e9-ce6fd51b95ed", "comment": "Malware payload (Mirai)", "value": "4a7012327dbcf34c13f88a11977950c9a59168f5da3d5c77f5b73782bc940a44", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401857, "uuid": "7b898e76-7060-4e1c-9486-6e151150faab", "value": "T141930749FD406B10D8D635FAFF4F024973934B6CE3FA7201AA245B2523CAA6B0F765", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401857, "uuid": "955b9bb6-ffea-4f3e-b413-631b614d0151", "value": "1536:wqnZK8D4zgUdtS0tFbvacgzafVAweBuqKlUI9HiWNRIbT2gZ1YYn:C8NUv5nTacgzafVAwe4BNRIbT2gXn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771401857, "uuid": "c18e664c-a9d9-4caa-9d25-49fdf83e37a9", "value": 93252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401857, "uuid": "40da512c-de0b-4337-907f-c34415e09b5d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0dfecf58-0ca5-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771403846, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771403846, "uuid": "da8887b8-e7b1-4a25-ac6b-811c8d934485", "comment": "Malware payload", "value": "f0587cd7b8bdd9721f209c02f2a5c86c", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771403846, "uuid": "93c75623-d3af-4053-92b4-8fa43eed63c5", "comment": "Malware payload", "value": "f8c6520a919c8f22fea05d2143320bc0464ae0b1df78e20c09e379c298bb496b", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771403846, "uuid": "8ca66711-badb-4c35-bd7b-84b97a34416c", "value": "T125B423C7671D87D55F60CFC32F4DF9278E3A50235A0454911E8FFE458B8ACE806AB8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771403846, "uuid": "c46d5035-c68e-4af9-94f7-60069cc87423", "value": "12288:d7x2iSFK7QUbgDY4pNna8cJIAxpK0T9fsiYvp15wg0w+nthU:dx/epIfJhxpK0xsd6U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771403846, "uuid": "284b688f-d848-4b17-8ab9-3c1fb5bddeb7", "value": 528448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771403846, "uuid": "42180c50-7fdd-4c32-bf2d-b98a1816d26c", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "88f1e127-0ca7-11f1-8369-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1771404912, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771404912, "uuid": "9efa498e-5141-4a3d-a7e2-c873451564df", "comment": "Malware payload (CoinMiner)", "value": "247b0015a59185df92b82751e06c7f45", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771404912, "uuid": "7d166dc3-1c08-4054-9955-bc863d129911", "comment": "Malware payload (CoinMiner)", "value": "efac57361fa125ca73858831c5b7a1e8f236add5c534925c98c48204328c8540", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771404912, "uuid": "b7746e39-7cd4-4ac8-91db-6e18e6288567", "value": "T1D3B6BF14A3A900B1E577C730CA669733CAB17D964B34C50F0699F2522F77DA29B6F3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771404912, "uuid": "ba2791e4-ca59-4180-8a8d-43ec94b73198", "value": "f9733d815c562b4051f00a897b1b84e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771404912, "uuid": "5f4c27c1-77d2-4a61-8459-c4a2c5739c9b", "value": "196608:h47+mVAW0oF+UNjFvuzVdx1c5W/k32GiNxNUNEQ2/DQtyuQ+ps:h4ymVZ0ozjFvuzVdx1c5W/kfiNxI2cyZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771404912, "uuid": "ab318dca-6f4e-418f-a33f-911fb9d2bd0e", "value": 10515868, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771404912, "uuid": "27e02e5d-32cc-4122-b518-3c12e880f302", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b8188fa0-0cab-11f1-8369-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1771406709, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771406709, "uuid": "055f570c-7fa1-4993-8e1a-c2ce3a5dd000", "comment": "Malware payload (RemcosRAT)", "value": "dc5fcde2a5267835282e12360a492f31", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771406709, "uuid": "42afb1b6-bf70-4c1c-907d-91d168f252c5", "comment": "Malware payload (RemcosRAT)", "value": "0c6e1a6a0e8570928419086f4745c2317b9447e87e1ad49228e75de541916aab", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771406709, "uuid": "6c8e1c15-05f0-4e59-9938-94ce48cd7d55", "value": "T121E4AFF65395EC8F0E1C0E95F508074A1C6C48D7E5B8C2B47A82B8F9869A1A44EFCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771406709, "uuid": "17ea05b1-082c-451f-9a3e-5c7e80dcbd33", "value": "12288:+wVh8P5yyBqrjjZ0W2s4oO9ZYg3UtSwImcyjaJ+hE7TqvIwh:+su/BqrjN/2ZoOH3UtSwImcyjaJ+h+Tc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771406709, "uuid": "a079cc2d-e4c6-40d9-8cb8-6e1143ab4c20", "value": 676527, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771406709, "uuid": "2cb31564-063e-41a4-814f-bd4ee8c4c426", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e48e1715-0cab-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771406783, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771406783, "uuid": "1cb7aa13-0b5a-4dfa-9451-555183285633", "comment": "Malware payload (Mirai)", "value": "f186d507e46ba1e1561e0c3bfbdf2211", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771406783, "uuid": "5e6f3bd9-55d1-4261-b329-cca4d24d89d0", "comment": "Malware payload (Mirai)", "value": "745c5ab4b34f118ca62625d9da447b933d67f73feb66d0bc5a96edff1239d813", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771406783, "uuid": "3593e980-8315-40df-993a-4cacfa461f35", "value": "T199B3E816FBA10EF7D86FCD3742B9074528DC550A22E83B767974C528B14B24F8AE39", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771406783, "uuid": "bafa605e-5404-48e4-8b3c-50ecad679772", "value": "1536:SYyLIViIDh/qt20YTd7TKiTbF7V2SunT/eu82XXgk3ZUtyZ4l9yEWJ:S7LIVDDRlBd7u20Wu8U3+3yEc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771406783, "uuid": "7efcc2ce-da7b-424e-bef5-617a522efdc5", "value": 114068, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771406783, "uuid": "ca0c2234-b326-4759-897a-4e72c9377934", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f35ad9b3-0cad-11f1-8369-82aee05be84a", "comment": "Malware payload (Formbook)", "timestamp": 1771407667, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771407667, "uuid": "f71be6b4-b3f8-4e53-aabc-e8331599e677", "comment": "Malware payload (Formbook)", "value": "0d59c3e58875df30eb618f7cde7cc80d", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771407667, "uuid": "28f5aa1a-347f-4d0c-9f8a-471a87d47232", "comment": "Malware payload (Formbook)", "value": "9c0a21132a4bb82e3a9cac55be46caaf7d2733b5bd215c89fee0852453bdc4a9", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771407667, "uuid": "4b573ed4-0035-422d-8f00-7f9ee04ef1ad", "value": "T10F652342EC685EF902941221A5EE9F4A670047676C84F6567F9E40CE0FAF78F45338", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771407667, "uuid": "3a04b81b-8ce8-4b41-bdb8-3127616bb81d", "value": "24576:yRNSXzTq7l7tqJKoWPLYqOgPo5nDbervNiz6z2VFlUgR/APO5Q:Mmzu7aJKjPtIDirNRC+qQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771407667, "uuid": "c529b100-3e59-49dc-b0a3-78af9b78d193", "value": 1523869, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771407667, "uuid": "6c0022eb-86bd-44d3-a1d5-b6b51cec1090", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cbd68a8e-0cae-11f1-8369-82aee05be84a", "comment": "Malware payload (AgentTesla)", "timestamp": 1771408030, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771408030, "uuid": "e3e3e41e-8864-4ff0-9d05-a7134c97aca1", "comment": "Malware payload (AgentTesla)", "value": "2381a3c51b46659e514d473acdc1af76", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771408030, "uuid": "2ce0c111-6a38-4882-88a3-29f717c332e0", "comment": "Malware payload (AgentTesla)", "value": "a5d62bc2eae1d3c2680043a5e8a586c11eda232195aabed9cdcee20169525a8c", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771408030, "uuid": "11197b33-09a0-43bf-8343-2f2d49a3d945", "value": "T1C8952321DF188EC106D0831934DDAA5429918BA34E99B18A3FDDB4CE0F2E75F2576C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771408030, "uuid": "db8b1656-3008-4dc1-9201-76c4786ca779", "value": "24576:jMuut88jnt0JQTHTdCPiJcC6hoAqG3Ai2D53QUXtyYWMXp6YAlQ1y38BDri8fNRM:kHTdCP9rJ13WbWb0q8FJfj4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771408030, "uuid": "038f3801-6f82-43cc-9038-79db51d80d84", "value": 1921113, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771408030, "uuid": "020f2df3-3b35-4f01-b652-f1da59e691af", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2f2ad48b-0cb0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771408627, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771408627, "uuid": "e4b7c9f7-efb9-454b-a6ef-c442ad74cbb8", "comment": "Malware payload", "value": "83eebc4909d3179f5c8cea4899c85348", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771408627, "uuid": "16ccc12a-52e4-4505-8177-17ab464350e5", "comment": "Malware payload", "value": "1e54902649dfa5f7a8bab0461974444fb1f224294009030de740995320a6fba0", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771408627, "uuid": "ce2c4a1f-9c9f-4bc9-8985-2b5edc062288", "value": "T1FC73016C52415439C748ADBED16A09B4F668E2C12790B98F35B2E39F4D0C98F7F07A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771408627, "uuid": "09e83f92-a7d8-4b9e-8932-42daddce42d0", "value": "1536:UST/e6CRoSu1pn36oj7WouZkcB0GJY6y7RlLbn0A8gN:UU/3NSqQoHfhDbV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771408627, "uuid": "603c5934-2fd4-4e3b-b9f5-28a686769b56", "value": 74149, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771408627, "uuid": "42e8adb5-154a-438c-924a-170c1fc74ed9", "value": "application/vnd.openxmlformats-officedocument.wordprocessingml.document", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1d924c6-dfe8-11eb-bc10-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1771408754, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771408754, "uuid": "ee958bcd-a5bb-46ef-be70-5c817c5a2ba2", "comment": "Malware payload", "value": "6b0fb88c187a6dbf48017f66f262edab", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771408754, "uuid": "c16d5594-beb8-4d58-9fee-7289b245cf7c", "comment": "Malware payload", "value": "ded36b111f815e57e2658bd881beaf247be1fea999902456df83840100f5ae65", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771408754, "uuid": "9a6e65b7-0c90-4ecf-9320-31211ae32540", "value": "B9D3128BEF368C1FDB002E7216DB4B9E6C6D395B41CBF4A8F9C1818F13A11C57952215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771408754, "uuid": "58da8923-86d7-41af-9ed4-d5e9a0561f7e", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioX:p3lOYoaja8xzx/0wsxzSi6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771408754, "uuid": "f60922f0-de1e-4cf7-add0-7f1a31daa286", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771408754, "uuid": "16fbb7b9-3b81-4d2c-ac8c-e5e197a61348", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "71288d07-0cb1-11f1-8369-82aee05be84a", "comment": "Malware payload (AgentTesla)", "timestamp": 1771409167, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771409167, "uuid": "8b5fd885-0932-44e9-a162-c63bf4d37a10", "comment": "Malware payload (AgentTesla)", "value": "3b2b581730cd31274e02416337c7843e", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771409167, "uuid": "2f845261-f44c-44a7-a954-a9ad9ca52721", "comment": "Malware payload (AgentTesla)", "value": "27f5ef50f73cd8551aaa10097b6cfb5014205b89003c47ef5985d35397b9ba87", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771409167, "uuid": "621f4af0-85ca-42ad-b4cb-d813500725bc", "value": "T121252331FA06AD640BACA01915BBD90C697A0B6B4D1D33567FDC40AD1FAEA9F04763", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771409167, "uuid": "3782aba0-872d-4cdf-8112-ccaaed635dd8", "value": "24576:v3bs/l2oRPvXKUNmc+1RSiHzUhj4pCKgNI1RzRF5fvERU0:vbEZPIDTupXdIL9yU0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771409167, "uuid": "a89beed6-ad04-4fcc-9c4d-d5eaf9f07118", "value": 1033061, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771409167, "uuid": "4663e88b-cf0a-4e18-a2e1-e7a474bf63ad", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "71a844ea-0cb1-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771409168, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771409168, "uuid": "48c6a8b1-b443-4d25-9d6e-8d49695dc907", "comment": "Malware payload", "value": "b2efac3e8e7df55b3f58238cd5bcd62a", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771409168, "uuid": "9f7cf048-6d4b-4241-8370-213226284581", "comment": "Malware payload", "value": "d2b48cb58798557015e530c896ec94d7a92e6caafd06da8b374ae6094d7ffbb4", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771409168, "uuid": "477dd9a3-7e88-4a12-95cb-2dd51b90658d", "value": "T1CBE4B0BA5355AC9F4E1C0E65F408074B1D6C48D7E2B8D2F87A82B4F886A51A44FFCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771409168, "uuid": "d75b3e07-13fb-4e19-9612-6320ed4cab90", "value": "12288:7lyd0KtLQw+MyzGH6bhDLiz9I7Wbap0oNArZZK2xn8eGbSHO4iTdQfOCbbF:7lHKHQzM6b9OztOp0oaO2R8eGbr4iTyv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771409168, "uuid": "da376767-7536-4df1-963f-694d09fbfa68", "value": 704515, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771409168, "uuid": "8eec51aa-f5aa-45de-a707-037c2026c485", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c4d1829-fdf0-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1771409767, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771409767, "uuid": "d6694b71-b6fa-4c86-b210-aa987c724285", "comment": "Malware payload", "value": "923512a587018a0238163c44bf1bb48b", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771409767, "uuid": "fba92aec-acbf-4753-92ba-b2846b1b913b", "comment": "Malware payload", "value": "75825457412f9b879942524281940d7b4e470955894803d63d7d233d929c6ffe", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771409767, "uuid": "8dc710df-f64c-4b87-a80d-a5b7fc2f2766", "value": "T183C32BFB2113ED9FCA170E68E44C1315EC68B1EBF2D490A4FF4497A14DE551C9CA8A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771409767, "uuid": "f277aace-6672-4922-8a0c-6fbceae0b920", "value": "1536:KqPswPNprYy1aAHVkrsUOTk8MIVL5XIGhdB/7jwHOhcs/CSwmzdHUXppVLFzBEoa:KqVPn/aAHVkFOTk8FlXIGhXfw1Sxl7r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771409767, "uuid": "1957ddb4-d2f8-42cb-962b-e2e97d8ff488", "value": 122200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771409767, "uuid": "b6856d41-c51c-422c-aa9b-cf0dc4c0fc91", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fae2dcd8-0cb2-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771409827, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771409827, "uuid": "c9d30ea8-1690-4acc-8c52-ed6d3fb34ea8", "comment": "Malware payload", "value": "1af4d3740dac26017544a1e526dfa37b", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771409827, "uuid": "3c8b3388-2685-4731-bbb7-132d49f99d50", "comment": "Malware payload", "value": "bb8f8ecaaab98a58633c52b41b169345e2273a6a7c7702c05a170144f3a43268", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771409827, "uuid": "66ff122a-e21c-4849-8172-cd690d9e67c1", "value": "T10AC32BFB2113ED5FCB170E68E94C0305EC68B5E7F2D894A4FF049BA149E551C9CA89", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771409827, "uuid": "835f70d9-d19f-483a-9d97-09b92cd3552b", "value": "1536:JF6ruIelPyprYy1aAHVkrsUDMI3Too/dbImwNDJ+iWTWM3UZ1Um5dEit41hCIiHM:r6r7qPi/aAHVkFDnsEsc2Z1HQAM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771409827, "uuid": "9cbfaf98-e0b7-44d8-958a-fe9fd04a31e9", "value": 124931, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771409827, "uuid": "0e60875d-57f2-4215-aaf0-ff5f5a80d731", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1eeb0da5-0cb3-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771409888, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771409888, "uuid": "6381a14d-74cf-4f04-874e-0f3630fc8ffe", "comment": "Malware payload", "value": "adedcd76c159ad1c6bef3ea527b7a283", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771409888, "uuid": "fb096efe-aa59-4268-bfbd-178f446cdf4c", "comment": "Malware payload", "value": "977e1684ca908cb7f2d56f8a242b9ee89b25530bcff429ed488e34970eae613d", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771409888, "uuid": "9435d1a4-7589-464b-9f9f-b0f216c42767", "value": "T172C32BFB2113ED5FCB170E68E94C0305EC68B5E7F2D894A4FF049BA149E551C9CA89", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771409888, "uuid": "bac7d8d0-eec5-426c-bd02-2223f9c2114f", "value": "1536:YTF6ruIelPyprYy1aAHVkrsUDMI3Too/dbImwNDJ+iWTWM3WZ1Om5zEit41hCIis:YR6r7qPi/aAHVkFDnsEscwZ1p2AM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771409888, "uuid": "dddd4801-d178-4f04-9f2e-b250183a8266", "value": 124934, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771409888, "uuid": "74155cfa-1074-43e9-aa97-ab78b538dec8", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f2651cc-0cb3-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771409888, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771409888, "uuid": "480fcf53-4f7a-4b31-abec-50f78a7b9824", "comment": "Malware payload", "value": "72b36c578d17e3142ce4f764df7b7024", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771409888, "uuid": "04914781-b293-4d44-97c7-c1f61a9f14ab", "comment": "Malware payload", "value": "2252b104d4b7ae55d88f104537a04e05876a11f16b76782d72b850c265861923", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771409888, "uuid": "15173de5-6a8f-451e-910a-36bb138d1a74", "value": "T18004BFB850EB45D0F00FCE6076F8FEB5956231E3F6DA09711329FA048A9AE553C494", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771409888, "uuid": "1a73e544-b545-4ab0-af6b-7e88e4ce1e83", "value": "1536:ad+5DGDWUuaOlaaPAK7NU2EhKhzhQuKxZVF6/VJU7GiCjt95DLr0C0BH0FsyxsTg:aeU2EeVXeG95kyxLEuh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771409888, "uuid": "d38ae66b-357f-46b3-bf05-44d87d1475b0", "value": 187395, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771409888, "uuid": "35d0f8e7-7a56-4500-a242-a26c4fe34a36", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f724e10-0cb3-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771409889, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771409889, "uuid": "a0ac9b7f-b374-4297-bbcc-00cf97cafe42", "comment": "Malware payload", "value": "c8698cab92e90a5099a1654b7f16fac9", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771409889, "uuid": "2827daef-a71b-4a10-b8c7-51589ff795b5", "comment": "Malware payload", "value": "7f29abad030cfca760f78710ea5de53c75a0295d161c462f186b73f475334be4", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771409889, "uuid": "5c87629d-c494-4f8b-a1f5-6feb4fe8f662", "value": "T1C3652BB8409B45D0E40FEE8075ACFEB2663235F3F6D90A64133CF6448F5AD66680D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771409889, "uuid": "f05bc766-8c82-47f9-8688-ca3b8e809720", "value": "12288:2eGvq0PPPlDIW+NS10YjZ7Og7Geos+QmxYFrc0B9+ONrdPagkCTQyQUFzLwEQEcM:T0PPPdOg7+nYFcTYxjrQyxq+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771409889, "uuid": "e51e8076-5981-4167-9d02-1e9c808645cb", "value": 1495043, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771409889, "uuid": "b0c6411a-b210-414f-91d0-87d6a30491c9", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "42594c6e-0cb3-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771409947, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771409947, "uuid": "b75ace10-3f5e-492b-89b0-ae734b04e14b", "comment": "Malware payload", "value": "68574f04da62f5c686ce237feaae3a9b", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771409947, "uuid": "af7ced86-1446-4d8c-b015-706ff1a9b1cf", "comment": "Malware payload", "value": "1abad0a41c6b7a439b54d1ae63ee07a249fb94f59f5eb313608cebc2abc8828f", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771409947, "uuid": "64b49ae4-8909-4d4c-86e4-40a1180f63dd", "value": "T19E04CEB850EF45D0F01FCE6076F8FEB5956231E3F6D609710329FA048A9AE552C494", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771409947, "uuid": "18241503-5b9d-42cf-ae8c-466680074bfe", "value": "1536:mde5DGDWUuaOlaaBAK7NU2EhKhzhQuKxZVF6/VJU7GiCjt95DLW0u0NL0DyyxstM:mkU2EeVXeG95ryxbX1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771409947, "uuid": "c683d959-d778-4002-951a-3d7772bda1c4", "value": 187395, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771409947, "uuid": "2eec6fb1-6a21-484d-ab09-6f04ee4e243a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3bacfda6-0cb4-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771410366, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771410366, "uuid": "683ba0bf-600a-4848-a95f-ef9f4cfa0c66", "comment": "Malware payload", "value": "94913d3f6fb3c48b052cc18a31011e1d", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771410366, "uuid": "a619d971-4749-4f05-aa7f-607dc693eac6", "comment": "Malware payload", "value": "deadb9fb08dfcc9276dee2bdbec0115dc7903e8ac578a815f046e407696e448d", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771410366, "uuid": "38fb68ca-40c5-42f8-9b45-7d351478be24", "value": "T1E0815D17A454748CE542CF58A66DBEE5811DF13763E075D0067C8F8E7080F243A557", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771410366, "uuid": "ee13b684-aa7c-4a5c-be05-082bd5c11e8b", "value": "96:aQVqkyAuPkUIzNSfVEdsR1a8epqQYatyruQa1M+PqX:aQdUONSfVECR1F8qQYa82eX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771410366, "uuid": "d3bea938-3957-48fa-826a-122cfc492ec5", "value": 3829, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771410366, "uuid": "ab8da867-95c1-46d1-990d-ae9bf22216f9", "value": "application/pdf", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9876b2ae-0cb4-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771410521, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771410521, "uuid": "4f85012f-511f-4ed2-8be7-17d0ede71362", "comment": "Malware payload", "value": "51c0a8b540942cb38395b7c02c61d185", "object_relation": "md5", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771410521, "uuid": "b9b2989c-91a9-48ea-9ae8-a498a3a33369", "comment": "Malware payload", "value": "28012ee3c06a25a8209ca3eb5fb35166d45488b279e43bf8e2b507f515bc9fc0", "object_relation": "sha256", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771410521, "uuid": "ce56da10-f2ec-4c88-a9bd-aa986674b3e2", "value": "T18D764B07ECA505E9C1AAD2358A779122BB717C495B3123D33B90F7282F76BD06EB63", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771410521, "uuid": "68614134-985a-4b80-9859-b5c81fe3de4e", "value": "98304:T2tzY+NvvbsKCCN40GuVEqI7jU2ZRK9cislE:ToNvvAKCN0GUA7VK9l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771410521, "uuid": "e26c45de-d074-4547-bf78-5ea663d593ce", "value": 7465984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771410521, "uuid": "ef83989f-0e42-4464-93c4-7198f15ca98d", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "785894f5-0cb6-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771411326, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771411326, "uuid": "897fe85b-50a9-4749-924a-3b5ba45b7ca6", "comment": "Malware payload", "value": "0ae6e695d99c370c01658b4e93f54554", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771411326, "uuid": "919be196-44ed-40d1-b5a8-d3915abd3f96", "comment": "Malware payload", "value": "5caf18c50a9c5509edd373497ea75783425a67b99e4e3f839d9ee50bdbe14f73", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771411326, "uuid": "70f59d3c-c012-44b8-b85f-fbdb392417e6", "value": "T1D5B42304CCECE4A1ABA22D7170BCE5E558DB33A3AB19F9522582154FC5E538633DD8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771411326, "uuid": "48d1d5e1-9a3a-4966-886c-b4fea84e599f", "value": "12288:/4BqRkljFaImkUd1dACeqaKiCdCBQoC3tLwsZXah:W8kljFRoz/JQdC578h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771411326, "uuid": "0ac39631-cb96-49c2-b4ba-9b4743c7c890", "value": 528448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771411326, "uuid": "e6a6423a-688c-4d2e-9190-45140b31b472", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6d0b5db-7fda-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1771411345, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771411345, "uuid": "78c02756-d1a1-4f27-ab21-e741c33759ed", "comment": "Malware payload (Hajime)", "value": "5377e8f2ebdb280216c37a6195da9d6c", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771411345, "uuid": "c0ad7c29-84e5-463e-aee6-1ead766f1e8d", "comment": "Malware payload (Hajime)", "value": "020f1fa6072108c79ed6f553f4f8b08e157bf17f9c260a76353300230fed09f0", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771411345, "uuid": "4c07004a-b335-4424-8853-e7cb93b29192", "value": "21831229135414E5D62681F1D3FD1B84AE981FA9CEE2EC147C12BC89EE333AD3CD2618", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771411345, "uuid": "101f7b5b-b082-4deb-88cc-d25d570bb136", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J1V+uBNu:yYI0ARqw1qAEv7UIFM8oJorFquyjkRks", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771411345, "uuid": "6032db8b-06a4-4aff-89cb-d016981f525a", "value": 85232, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "189a2a43-b7bb-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1771413970, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771413970, "uuid": "d7b52657-5f72-4d20-8d1f-2a35416c0005", "comment": "Malware payload", "value": "e89f75f918dbdcee28604d4e09dd71d7", "object_relation": "md5", "Tag": [ { "name": "@RawabiHolding", "colour": "#4a63f1", "exportable": true, "hide_tag": false }, { "name": "apt33", "colour": "#810f6e", "exportable": true, "hide_tag": false }, { "name": "BB19", "colour": "#4f0baf", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "darkcomet", "colour": "#3137d1", "exportable": true, "hide_tag": false }, { "name": "DarkGate", "colour": "#180653", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "impersonation", "colour": "#a2d3b0", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "payload", "colour": "#68a2f8", "exportable": true, "hide_tag": false }, { "name": "Pikabot", "colour": "#e499a3", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "saudi arabia", "colour": "#782074", "exportable": true, "hide_tag": false }, { "name": "stego", "colour": "#38259d", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "ViaCrackSite", "colour": "#db8132", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771413970, "uuid": "49014bcb-6b33-4447-b68b-d0a1390681b8", "comment": "Malware payload", "value": "6dc9c7fc93bb488bb0520a6c780a8d3c0fb5486a4711aca49b4c53fac7393023", "object_relation": "sha256", "Tag": [ { "name": "@RawabiHolding", "colour": "#4a63f1", "exportable": true, "hide_tag": false }, { "name": "apt33", "colour": "#810f6e", "exportable": true, "hide_tag": false }, { "name": "BB19", "colour": "#4f0baf", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "darkcomet", "colour": "#3137d1", "exportable": true, "hide_tag": false }, { "name": "DarkGate", "colour": "#180653", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "impersonation", "colour": "#a2d3b0", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "payload", "colour": "#68a2f8", "exportable": true, "hide_tag": false }, { "name": "Pikabot", "colour": "#e499a3", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "saudi arabia", "colour": "#782074", "exportable": true, "hide_tag": false }, { "name": "stego", "colour": "#38259d", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "ViaCrackSite", "colour": "#db8132", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771413970, "uuid": "60ea2dd2-d305-4293-8aa2-ac61bb434de2", "value": "T1EEB092DDBC61E48018E535511EA3B60D146A22EBB9018B4018C00836A96035F8D0AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771413970, "uuid": "beaefe5a-78d9-4265-8c74-083f84ffb1cf", "value": "3:PouVIZx/XMn30EEBuvFfD0OkADYyT0NV9kBbZWM:hax/XW3/p5mmYyT0NVuB9d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771413970, "uuid": "bc2f16f8-7838-4aab-b156-a03b193ee861", "value": 114, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771413970, "uuid": "c6d9f94d-85c7-44f9-85fa-c8d581fe076b", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1771416857, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771416857, "uuid": "14325edd-bf81-4bad-a344-2e9d601f4e43", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771416857, "uuid": "65388d11-0f47-415f-879f-0e56488a35d9", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771416857, "uuid": "6a7e8d57-34dd-47dc-a148-ba2c4c98fb6f", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771416857, "uuid": "5a422b38-c347-44c2-89d4-9cfe7737b5d2", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771416857, "uuid": "9dee31f3-3099-4a0f-8010-3d8ca0724237", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6f5d8e2-0cc7-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771418706, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771418706, "uuid": "ec2cb3ae-2234-4d68-a984-737d281a22d6", "comment": "Malware payload (Mirai)", "value": "61a1d392bb5faaacff70bbfac58192e8", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771418706, "uuid": "367ed9b7-d5ca-429d-bb5a-5df6263d80e0", "comment": "Malware payload (Mirai)", "value": "07aaca5fee5bc2b347ab6d4ea1852aa68fbf4697cae52ae0b5bc12a864cfbb4e", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771418706, "uuid": "8f6e3007-8e51-4440-9958-5398715332ce", "value": "T11C833A51BC818A52C6D112BBFF5E428C372663E8E2EB7207DD285F55378B92B0E776", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771418706, "uuid": "e98214c5-61db-4aa6-9b30-89fd7be88dd1", "value": "1536:CyI2J+My+CZ7yRwF1qjUNJoNGBwgpj61PcB5kSdYZr6rtgXyT1OVhvscop66yEWG:CyIAyH7uFjxNKyg57Qr6rtNYoVyEL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771418706, "uuid": "d7676f7b-8755-4b98-911e-a111c46e752b", "value": 84776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771418706, "uuid": "7f8eb553-e700-49e0-80fa-6e3c6374a0fe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9fc3d92-0cc7-11f1-8369-82aee05be84a", "comment": "Malware payload (SantaStealer)", "timestamp": 1771418845, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771418845, "uuid": "9ab39ea4-e1ac-4c9e-ae6e-ba62206b44ec", "comment": "Malware payload (SantaStealer)", "value": "62419a34f5e72decb6169dc306ac4d55", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771418845, "uuid": "af66adb3-0cac-4e15-a614-7946713a114b", "comment": "Malware payload (SantaStealer)", "value": "0915cc556b439a5d987e3dcc8c529fe7884934a929d52815344175149603ac37", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771418845, "uuid": "f3c28a64-8354-4c95-9eb6-8de1142e0e5d", "value": "T158749E0AF7A914F9E5779178C8130906E772BC5607A0DADF23A04A972F276E09E3F7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771418845, "uuid": "02009b4a-19f4-48d7-8ac6-41c55aa572a6", "value": "b1a756f0c408be3042b4238d2e7b6f4a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771418845, "uuid": "b9e5df71-2233-4af0-ae27-2a686addc57f", "value": "6144:VwC8XPO4Anq98VAkQJzGb78DZY5K7wNiDohtlFsz10sse:VP6O4j9UA3JzGbae5owEDoHss", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771418845, "uuid": "3a580ed6-edff-4163-9b5b-bc0c648ec86a", "value": 356864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771418845, "uuid": "60f3ca87-54e0-4fed-b0a9-698b2569e50c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "87012555-0cc8-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771419082, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771419082, "uuid": "b760e0b3-b714-4fd0-b1db-b7371c3fafc7", "comment": "Malware payload (Mirai)", "value": "e6c49093b02a9a1c89503348294f74ce", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771419082, "uuid": "b10ff045-793f-4e20-8b7a-a23eeea34c4e", "comment": "Malware payload (Mirai)", "value": "dd27f5d9e42031fd70de3bb4d0e4f05383f7082f040b94b67d9e55eeba3eb6e1", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771419082, "uuid": "17b53568-b4b1-4507-a825-76f092afb8ea", "value": "T1A0B3D91E6E21CFADF369C23587B78A21A75833C626D1C685D27CEA011F6034D245FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771419082, "uuid": "8141c3b6-81d5-4171-8c81-b8e66def5529", "value": "1536:071cSXpDd5Ncrg1ntj4YVIwxKCxKzeK8CXYqrQuFxhrdnHDeCWWyEWNn3Ull:61ZZd5NcrdpzYqrQuFXdnHcWyEgn3U3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771419082, "uuid": "f65d410e-d1f4-4988-a8b2-c214da4a323f", "value": 110388, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771419082, "uuid": "f38465ea-9f0e-4690-9489-e434e0fcdd2d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a43c7e95-0cc9-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771419560, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771419560, "uuid": "5e603eb7-dc38-4104-8f47-baeb6ae83dba", "comment": "Malware payload (Mirai)", "value": "a14da6a7d1d44b61eff709a73b09d428", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771419560, "uuid": "6700cf73-4cca-4334-881c-e749df79c6ec", "comment": "Malware payload (Mirai)", "value": "08140c4dffdf26a3b55badd628c1a17761bdc310627da60afe68ebcc880f6683", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771419560, "uuid": "4290d796-0947-43d3-bf75-752bff349c70", "value": "T129B31A46B9919F12C4D621FAFE9F458933136FF8D7EA3102C8206F54378699B0EB76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771419560, "uuid": "204a6d7d-9dbe-4e7c-958b-07a8bdfb371c", "value": "3072:lBkvhQKG/6Y8K4gxqCaRFEYZbdWltmwcBrEbxyEDWa:IvhQ6K4OqCabEYZbdWrmylJWa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771419560, "uuid": "bea5e558-c43c-4524-a711-8d4adcd3b066", "value": 110664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771419560, "uuid": "f8067042-6976-4d2b-9a5f-93198e66ccf1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee869f97-0cc9-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771419685, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771419685, "uuid": "a927a294-97b7-49af-90f9-0400ff177cf0", "comment": "Malware payload (Mirai)", "value": "084be7657aae27cc6c40e3ad3e8b35c4", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771419685, "uuid": "bd4aad4f-80ab-4abd-b98e-e15cdf817e12", "comment": "Malware payload (Mirai)", "value": "0ff29a840946c413333e498da27af1542df446867dce1601a9b7854a81b730fa", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771419685, "uuid": "2e4263ad-81f6-4ba2-ba33-c902c033d368", "value": "T101134AC1A643C1F2EC5212F5147B67628F76E4365A7DFA92EBA92531FC03B10960B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771419685, "uuid": "e6ebb5e4-d89f-4e5a-9764-4f4f15a39348", "value": "768:QQaiSup66OkEgy5oD5YQuj4JYUTeU4wQOngspVI/4bOGd7nX:QQaiSuptOkEX6D5YQ/JYUeUDtgspDbOY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771419685, "uuid": "3d697851-bce3-46d6-a252-919d5b9a8b22", "value": 41840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771419685, "uuid": "9b21bf34-d458-438b-826c-72ccbe1faa69", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "58c63566-0cca-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771419863, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771419863, "uuid": "906ef8f9-81b5-45f4-aa2e-521ead6b3f17", "comment": "Malware payload (Mirai)", "value": "a051ee63d3ce11053dcf074bc00a1b5a", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771419863, "uuid": "b8b1e79e-347c-4af3-8c1b-887d290af087", "comment": "Malware payload (Mirai)", "value": "23052e606ffbdb6e02560f90348a42887bdad79861484930a4925d08fcf48ed4", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771419863, "uuid": "a06091b6-e568-4795-a9c8-90e96fcac7e5", "value": "T1C3D312B38A39B3EAF461E4A0F75C338D500162D9C948A661774964661B5838F0B6F3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771419863, "uuid": "c5f3759e-7c6a-4f86-9bce-7800773ad4ee", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xY:2IIKXhZtL7jOTyIG87e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771419863, "uuid": "3b607e3a-b34a-42be-8b57-21ff5155e4d8", "value": 131860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771419863, "uuid": "6d2f0ea7-e45e-4cc8-ac80-3ac24b0dece2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "48bea113-e617-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771420581, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771420581, "uuid": "a4fd48f3-c18f-4c63-a96c-4abc05db003d", "comment": "Malware payload (Mirai)", "value": "3386536939d4be9510b76a3902e81215", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771420581, "uuid": "a0d59e05-18a4-4aab-a615-f04700900f55", "comment": "Malware payload (Mirai)", "value": "f10975f7ed0d62119552e06dcf250bdb6255ca935223a04eb42d9eb273b9409a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771420581, "uuid": "b7c152b4-279f-4246-8d83-72ebe4f90c94", "value": "T196733A0AFC81AB11E5D422BAFE5E5149335347ACE3EA7112BE105B2D67CBD5B0F3A4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771420581, "uuid": "402d0665-13f3-47a4-b329-431cd893fe31", "value": "1536:wwn7M12iumyIZKW2b5HCaKTs/kNlY6ilsSEOZ3k0I:kRAmKW2b5HCaFxsSp3l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771420581, "uuid": "aeab4f0e-545c-4ade-8995-c75b28f6be03", "value": 75980, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771420581, "uuid": "ccb2f4bd-210b-437d-b7fe-4598eda7fe64", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "97260a33-7fda-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1771420582, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771420582, "uuid": "6e75ba72-f24b-41dd-a769-5dc7c7fd4fe5", "comment": "Malware payload (Hajime)", "value": "b8ed2cb3e9fedec5b164ce84ad5a08d0", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hjamie", "colour": "#0c8ce8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "rdgn", "colour": "#cb07b3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771420582, "uuid": "ea5333ac-372f-444f-9d85-d42d98f6377c", "comment": "Malware payload (Hajime)", "value": "d5601202dff3017db238145ff21857415f663031aca9b3d534bec8991b12179a", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hjamie", "colour": "#0c8ce8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "rdgn", "colour": "#cb07b3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771420582, "uuid": "f0d8c5f7-6c41-44f5-98f6-529f9a5eb09a", "value": "468312CFA4598B66EC7ACDF809DB59044D46621E738B75EF530CD59C2038B862C8E92F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771420582, "uuid": "b92cc514-b2ff-425e-a090-0757a3a67d3b", "value": "1536:m3LqE6rUQWzVQR7iAGEcUT5PIi7pLqBNs4LOjcwf4nB6XuzGNy+iSc7tNUZM:mOE6PWo1T5bz4LVMXuzVNScWM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771420582, "uuid": "2c396924-60c6-4a1b-b563-f6cef83c9de9", "value": 85128, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dca0e51c-e617-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771420714, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771420714, "uuid": "88c66de9-4e1b-4cce-b26a-62511b6f0e51", "comment": "Malware payload (Mirai)", "value": "2bafae29232506ff901239a1014a70d5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771420714, "uuid": "3d957945-ce7a-494c-978c-ea9d800d21a4", "comment": "Malware payload (Mirai)", "value": "b9563f0ef194f197544f823880a085e93a2ef6a1e7e3d1b840b882d4d5b3e61e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771420714, "uuid": "17784dd0-1005-45f5-a79f-d2353c882ec6", "value": "T102433907799190FCC89DC17446BAB536D133B5AC23717B653BD0FB2EAE4AE219E6C2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771420714, "uuid": "d3755520-190c-4e07-a6ed-d8ec940fd574", "value": "768:owVcbd2vleysqO0XHv5DZ0/xRodmzHXrdg+cSnsMd3lfjrprBLIkPknbwYTlUxG3:QMfsqO6xZ0bFz7djn1frLIkPk0WRLSm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771420714, "uuid": "91de1197-bb50-4654-a865-ac94d42f1ac7", "value": 55232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771420714, "uuid": "821bda2f-afbd-45d5-9310-9ce11e764ee0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e55c641b-0ccd-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771421388, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771421388, "uuid": "ad44c06d-6547-46cb-9cd4-14cabfdc76ab", "comment": "Malware payload", "value": "7d17a66d97c9a49bba4d8cb580b737b2", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771421388, "uuid": "86e28091-f264-483c-aad4-8f1b19752812", "comment": "Malware payload", "value": "8112ae21c4f684cbd1dec9dddf02cca8a6120e6f1cdd6b3b893ba66661d3399c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771421388, "uuid": "12662cee-586f-44e0-ac0d-b4472354ff21", "value": "T1128308327488582A210B428FD267336C70AFDCE2D611E5B6F6F622344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771421388, "uuid": "4db40e3b-5218-48ec-922b-2c10026a354f", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnyWaAVN/:XEKltp9txAX/yr2pbyWFVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771421388, "uuid": "2e633d4c-a7ab-457d-8c8b-91f5827df0d2", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771421388, "uuid": "47b173cc-79f1-42b2-a348-e9894d8ff294", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "69d3dd80-0cd0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771422469, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771422469, "uuid": "9ebefcfe-0ac8-47e5-8564-98156e10a7b5", "comment": "Malware payload", "value": "ef43c06628f76bc293f657401a721c81", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771422469, "uuid": "5f2139f0-4a54-4576-9639-ccee20f30aab", "comment": "Malware payload", "value": "4930ec121bf93fc6847f7bd22e04d551ae4a2d1d22dcf2046915d3c123258ea3", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771422469, "uuid": "04debc93-1b0d-4709-8e4d-33e5839dc7d2", "value": "T1CBE59DB2A207FEEA566A0DACC4503D006C9958B7571252ECBE8D07CEF1AE518DDFC8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771422469, "uuid": "418c5b3f-d01d-4675-a0ef-311ce5f811c5", "value": "24576:8+EhkjixLXR+bG/f29mFusqa+n0tkR5JoZh73VVPYDlJ0K3x0cG80cBrgGm+ScLo:8UixbItdTrJoFVPMvXGhGmZ1CSDB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771422469, "uuid": "1c42dff6-f92b-40f3-9119-73c4fafbce69", "value": 3208028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771422469, "uuid": "592169db-47ae-4858-bf44-871879d8ccd4", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "980c18d2-0cd0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771422546, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771422546, "uuid": "705223f9-8665-4524-9726-cb36e65f628b", "comment": "Malware payload (Mirai)", "value": "de50bbcfb585e5f8c24c328d64695cc5", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771422546, "uuid": "0a157017-5b0c-497e-a4e2-23b331481f17", "comment": "Malware payload (Mirai)", "value": "074e3c2812afb7695b269df9c010f7208e50188648e5bf2c0eeb2b7b6ea01c5d", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771422546, "uuid": "3f76242e-4b65-4b91-b5b8-8b80e8bb88e8", "value": "T15D834A51BD918A12C6D112BBFF6E428D372613E8E2DB7207CD295F54378B92B0E7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771422546, "uuid": "2908f2f0-a4ce-41d9-8da3-fa15dfaee11a", "value": "1536:zbjF6HQZ8oSIq9Yz1j3c8QLCvnhoBZBwgpnwPC515Mwnv0pnOh6TkOaq166yuvtG:zbjF6HG8z9i1JGBfsC5sSv0pnVmstMyA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771422546, "uuid": "b7332c76-80b1-421c-9c99-5ec757bb63dd", "value": 87824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771422546, "uuid": "45101712-bd45-4b60-b689-eb359f329894", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df2090d9-0cd1-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771423095, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771423095, "uuid": "a61adfcc-2a69-4fa9-855a-5dbeaec9b7c8", "comment": "Malware payload", "value": "3ae134a89b96a0866094441e4d7fc333", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771423095, "uuid": "dba2b85f-372d-4e9e-86fd-ff36023e9447", "comment": "Malware payload", "value": "00f0913759f8f6b69c7768b1c0dc93ffc243c0237fcdcf619eb13e31e992cb6f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771423095, "uuid": "14568ed3-2476-4ac0-be02-9d4e91e5d488", "value": "T1BB24CE6329445C15A669144C31CABFBF0D69E4FCE68EB5B1E36D81E28B137850CBBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771423095, "uuid": "3fa344ab-f8ea-4118-b53d-50b2c5c3600c", "value": "3072:Jyn/zIjuYMThCDSXE+MQIFv+/cc8AzatcUvYv1C8ODyqq9JDBGyd:E/zIjuWOdDIFvnAzaWVvZOGJVG2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771423095, "uuid": "b0ca3e98-2803-4f8f-85e3-890197c2bf22", "value": 223305, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771423095, "uuid": "54659a93-dab3-4b8b-ab4b-077d31cafe81", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b991261f-0cd3-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771423891, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771423891, "uuid": "d5e2f34b-a086-4a77-acc0-9322be90dbb1", "comment": "Malware payload (Mirai)", "value": "1e197cf9490a41334ccf39c2135c84cd", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771423891, "uuid": "3426433c-d9e7-48d1-8974-c849b7456554", "comment": "Malware payload (Mirai)", "value": "031fd8631be408a30071c8f0fa12c4fa6ef059ca0838da8f46c4d6114e5deae8", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771423891, "uuid": "cb22391f-491e-40ce-aa15-4c661a3302d4", "value": "T15A4107EE60750381E5CCDA24F5F489D45305EAAC71E82673E9492F76E889D803011B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771423891, "uuid": "f5ceecee-c8d9-45c4-9565-a38ac3f5ad7f", "value": "24:7DdKW1BAuBM/h7b1bElD2wh6fnNo79gKWJ+4GHw:cW1BUckNo79i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771423891, "uuid": "e4b67e46-41ed-4417-9d3e-95e996bbd778", "value": 1930, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771423891, "uuid": "586d8b85-403e-49e8-93a7-2c822037188e", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2843d226-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1771423922, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771423922, "uuid": "52ef0c43-da52-4905-b3ec-654c7765ee62", "comment": "Malware payload", "value": "5ea3839ef4effebf0c57e18742d1d284", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771423922, "uuid": "2e5b84d9-ce6a-43ba-828a-027db87d108f", "comment": "Malware payload", "value": "64d671e954c370655d61855ba22381f9bbd929ac713322765686619cebeac480", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771423922, "uuid": "93aa557c-8698-4dad-add7-5ff773b2712f", "value": "5A831229135414EAD62681F1D3FD1F84AD591F69CEE2EC157C12BC99EE333AD2CC2618", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771423922, "uuid": "a8dac46d-101a-426c-a939-36f19e7a5388", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J1V+uo:yYI0ARqw1qAEv7UIFM8oJorFquyjkRke", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771423922, "uuid": "9f67f8ad-d2d0-4d82-9dea-d3a7aeae3832", "value": 83984, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7cbe45b-0cd4-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771424291, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771424291, "uuid": "a3d109d0-94ac-4f5e-8bc6-59444234a588", "comment": "Malware payload", "value": "9c7264abf898a1feb3a75704bcdf4653", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771424291, "uuid": "7dce1838-fff2-4075-9afb-cd8ca4941936", "comment": "Malware payload", "value": "7e85fe05518bfaa5f4ae7f217e26b443034cc0e50b0a532d54d1ba7a5a4474b6", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771424291, "uuid": "19ed5865-2aef-435c-b7c0-4bb98f61a8c5", "value": "T133C3D6DDB2E27025439324A5157F410AE27B2E553C4B8290D17EE9D4AC7CE8E817BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771424291, "uuid": "c08a2edf-bda6-4eb7-8825-58ad70e0b053", "value": "1536:5wxqb5bdwL+pBFz9FSUsqLonQNYgetcVPkx2cnYteolbFr3rd6TcWmuZUfFi8AiE:5md+tz1VP9ftrdruZ5QZ3fav8rA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771424291, "uuid": "ffbdd85d-0d3f-4243-af04-8271c9dfa5b0", "value": 120719, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771424291, "uuid": "49c1b5f4-0439-41a2-955b-feb3ef011274", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d298ea5d-e61c-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771424557, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771424557, "uuid": "76b3ba74-707b-4504-9d93-f4d78d1df012", "comment": "Malware payload (Mirai)", "value": "c6178113fe057572e3b42a8877adf1dd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771424557, "uuid": "a3226526-e380-4086-abcc-6828e5ed0531", "comment": "Malware payload (Mirai)", "value": "dbceecf7aa2f90d713ed2875745c3e4bbeaa017472048091201bd728eb507d8e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771424557, "uuid": "16ec0116-f8b5-4489-b79a-68e37c07c84d", "value": "T12363B74E3D215FADF768C73447734E309799239622E0C685F2ACE30D2E6020E655FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771424557, "uuid": "47a954a6-c5d3-4ace-9d0a-7c33ac740306", "value": "1536:7mh+uKLZhZLRWZ5jWqgTioXAf+hm1pcHkSJ9Bg71pjXBsS5+Zn/aj:7mSZhZlWQaPcHkT1FXBNIZnI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771424557, "uuid": "e29f61cc-0089-41ef-bef8-1f33b742483e", "value": 72712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771424557, "uuid": "b3f95dca-894a-43e5-91f9-6c9eb1ddf676", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b30da9ad-0cde-11f1-8369-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1771428605, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771428605, "uuid": "cc0dae28-f718-45d1-b05c-781662fca8a0", "comment": "Malware payload (CoinMiner)", "value": "43ae0fce42dccf0e5fdc4ce1595f0d87", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false }, { "name": "sosokenota", "colour": "#504c6f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771428605, "uuid": "436b4f68-8831-4822-a123-32fb6db3c77d", "comment": "Malware payload (CoinMiner)", "value": "25f27ceda292165749c5ae267f86e42cff40d501635959c3fe8a9d6116b4f3fb", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false }, { "name": "sosokenota", "colour": "#504c6f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771428605, "uuid": "7b8107af-1f47-4eb4-a5f4-ce90b33485ea", "value": "T155363302B7CA9035D9C11875006A1FFA2AB5DD6A1320F6CB85A0372E5DBA3D55E3C2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771428605, "uuid": "359190ab-78d7-458f-882f-77c81477fd6b", "value": "f6baa5eaa8231d4fe8e922a2e6d240ea", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771428605, "uuid": "6879c9dc-bb1f-4738-80b4-51aa1f8dd30e", "value": "98304:695gK2d/ChcToJIIYzX1mqqWDM+9In3ILDVS7BaQl:69iK2IIoJLyX1mxzYt0Ba6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771428605, "uuid": "9cec2504-63d3-4e8c-9750-ee4e17e62993", "value": 4898872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771428605, "uuid": "852424ac-37b2-49e4-b66c-778eb9a24c4e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "482ecc83-0ce6-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771431861, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431861, "uuid": "167f231a-c8b3-4b16-b0f8-fbf8583e2a43", "comment": "Malware payload (Mirai)", "value": "538b385c9374274098318a4076b65ddb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431861, "uuid": "857a48c2-e62b-4099-96de-3be9a6e5abc8", "comment": "Malware payload (Mirai)", "value": "dbc513133d93b21bb64b91866cc7031187217354b51215b8c134ef44a8150013", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431861, "uuid": "423f4c01-3e9c-472f-a158-e2fc4a0cee42", "value": "T160934D49F753E1F0DD4606B0116FB73D9674EE224024DE69DB94BEB7EC32A02A21B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431861, "uuid": "502e2a82-5d87-4ee7-b0b2-24a582f6788f", "value": "1536:6b+jK3iQd3q2A6ausTZlMvDCypOkn/OhdtIGDT9Yjr6gUJ31IiyvCar:XYta2BtIlMvDnOksvTygSi0D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771431861, "uuid": "7848fe00-9fbf-4003-9bbc-81c892cd58f1", "value": 96680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431861, "uuid": "45700d9c-91c7-4276-815b-33e33fcd9b06", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4833ad66-0ce6-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771431861, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431861, "uuid": "0f182d49-6831-44fa-b467-76746b1c617c", "comment": "Malware payload", "value": "8b8a8edb8b9ea5d0a419110edb4792fc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431861, "uuid": "27b19c55-ec31-4a18-8fdc-4b6d2c8d7741", "comment": "Malware payload", "value": "a1e305f93ca28b706def540d2e1e75c430117c61f30cb495fe5174d2ed19348a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431861, "uuid": "d71eb154-e786-4e8d-9cb7-2e0b46d60109", "value": "T1C0E31A45FC518B16CAC662BBFF4E428D772A5768D2FE3203DD256F20378B85A0E361", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431861, "uuid": "65d30da9-0232-40bc-8007-6b8c971e3e45", "value": "3072:/e4xyQkeipAxA6iSTsV5hfmr49ETEbOIcGoyJLTJ6n79jF:W4xyQOpAxHi9/Or4OTESIpoydT8n7hF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771431861, "uuid": "5da78f10-7a7c-4609-8abe-b005210c489b", "value": 150200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431861, "uuid": "aaa72ae7-8db5-4019-949f-7242e6e099bc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "48343120-0ce6-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771431861, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431861, "uuid": "20ade389-25c0-4eec-bc46-21d37d64233a", "comment": "Malware payload (Mirai)", "value": "e7058a3f74649a5124a9fe8c6f4e4310", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431861, "uuid": "aea948bf-db5b-4ea8-b5d2-bb92c9ddf524", "comment": "Malware payload (Mirai)", "value": "a9d6bef8354c72cf77eb3b3aa6b444d33ad8c2dc5758270e493200b0aef3b359", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431861, "uuid": "37206655-52f3-491b-a0d4-5747f4ba8b53", "value": "T154F36C07B9C1D0FDC8DAC2B44BAFA126DA32F50E5134725F27C86E262E5DF216B2D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431861, "uuid": "5610b733-1e62-4593-98ee-80bd5a008327", "value": "3072:BL09YaD9dEou1RoM1t1kSKYpl+HpBbqPHCoNJzoSsE:W1UXJWJ6jmE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771431861, "uuid": "7b1e9e72-405a-4aec-9e9e-ab099ea66ca1", "value": 159792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431861, "uuid": "a4237687-122d-47d3-ba04-2f0e78616e06", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "48345b51-0ce6-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771431861, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431861, "uuid": "ae59a31f-4c74-485e-b2a0-b9a1a951b219", "comment": "Malware payload (Mirai)", "value": "c90e5c466b0598aa08ed4e327a8f8541", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431861, "uuid": "3d0c6e1f-c65a-45cd-9064-f8db70b23090", "comment": "Malware payload (Mirai)", "value": "e45776a46841d0f5e09e577998ecffa44862def0540a992b75f113b12037b65b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431861, "uuid": "6961367b-5afe-49c1-8699-d2e562ffe2bc", "value": "T19DD36B77CC266F58E525E5B1B0318F791B53A950818B2FBE19A7C6788083D8DF6063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431861, "uuid": "4fef519a-bb73-4cd9-964a-d90012071dab", "value": "3072:cHGWR6GnPBdFLipEAIepiG4MBW/F1A7tEu:OGWR6Gd1ipE8wMM91CEu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771431861, "uuid": "e3ea041e-b6ec-40d1-b99c-3bfd273a48d0", "value": 137980, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431861, "uuid": "cf99476e-29f4-49f4-b4c4-362f28e2f85d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4836f590-0ce6-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771431861, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431861, "uuid": "ebf7d2dd-7f58-44c7-a2e7-a3bf16042deb", "comment": "Malware payload (Mirai)", "value": "eae037112be292519ec0cf26c67acfc7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431861, "uuid": "ee328591-754d-47ee-8004-f9614398f53d", "comment": "Malware payload (Mirai)", "value": "4c929497b3e360a85136bfd75abd2b57a30c294ee833642a71dff035d9c535b3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431861, "uuid": "51ba3957-3fa8-43f8-aa72-61bc723b8991", "value": "T1C8E3F649ED41AB00D5D536FAFE4E428973534B6CE3FA7102EE245B2123CAA6F0F765", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431861, "uuid": "c0239555-d265-408e-8506-a1ba358f3d6d", "value": "3072:Z7Yinkzc6QgeTRy4J1jPJIqxpY2WZZUqa/u9iyV8wSflCIhfzy4q1tUaxz:RYinkzc6mTRy4JhJ1pYHyqa/giyV8wS2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771431861, "uuid": "baa0b82a-ad52-492d-95bb-0b1847836714", "value": 145128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431861, "uuid": "d97c1ac5-1e0b-4121-b02f-51a05b12d720", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "48372186-0ce6-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771431861, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431861, "uuid": "9e480c5f-5f46-4e67-9986-e908bb3538d5", "comment": "Malware payload (Mirai)", "value": "bfeb37e0dc757bffa86e165cde8200e2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431861, "uuid": "f9da60d1-3a0e-4426-8a4e-84a371f1b039", "comment": "Malware payload (Mirai)", "value": "06cdcf6f8568c67f75e2cf78fc2c52d6f558c329b80ba3cca0a2797fce6deadc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431861, "uuid": "3e8a5c6d-de91-479d-ae97-b8ed46bd4d2d", "value": "T17DE3BF97B7475050C8E10BF84BCB5BAC292B21119E6B88F77C2E363A19775CB580B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431861, "uuid": "229fc98a-dee9-4c50-bd06-c17131b917c1", "value": "3072:fy8eWABo0777gzgW06WaqaX4vge7NCgXCZvCA+gq:fBeWAu0gf08Wn7RCZvCEq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771431861, "uuid": "c9a7b919-13b9-4132-9d50-335d13cf2808", "value": 157140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431861, "uuid": "0d321456-99b7-4506-98e4-03cfc6cbc938", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "483736d2-0ce6-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771431861, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431861, "uuid": "f4d93cd9-142b-4b67-8995-5b216f71edd3", "comment": "Malware payload", "value": "d22af06653662bea335a0b9a55a21820", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431861, "uuid": "37cd52db-daef-4174-a713-2e166068565d", "comment": "Malware payload", "value": "a8a0e0913be2adfe2b39761cb252df0b25a99eac6f96359200ab452b51ba03d7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431861, "uuid": "4de9fd01-01b1-4648-9f33-6525ddf3859d", "value": "T1FEE31945FC519B16C6C662BBFF4E428D772B17A8D2EE31039D256F20378B95A0E3B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431861, "uuid": "9d1bcb35-e5d3-4cab-8c39-f367f8393070", "value": "3072:IzBs49tbMgxKZJ9LwjFNMrXlQ/4QP9EfSf4PTBkOZeq+bH1I7se:6Bd9xMggZJ9LqjMiLVi64bBkoebVI7se", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771431861, "uuid": "00ba9308-2b7c-4dd6-872a-d134af640cc7", "value": 154168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431861, "uuid": "25176591-2c1f-4af6-b51d-f26ffb84c902", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4837760c-0ce6-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771431861, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431861, "uuid": "9a3fc42e-85ee-4739-bac0-3d3c62cd1d87", "comment": "Malware payload (Mirai)", "value": "8b8412bdfccd9c6de0f7eb8cbb98cbbd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431861, "uuid": "7f6b5ec4-19a2-4280-ac78-1c2d9cf0ed2f", "comment": "Malware payload (Mirai)", "value": "542412fb3a2b0f3704c1fd9f6eb603095f93a1676e9104339136c3aea238f608", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431861, "uuid": "f9522512-2c78-4a30-94f1-5b297e8f2445", "value": "T104146CA9BA0F6C41F2C2D3F8DE4C87E13E1B35E3C7768971791212EDCAA39D959905", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431861, "uuid": "d1e8016c-7910-4b2c-b1e0-8ff2824f2970", "value": "3072:Bxq5+DWlIzP1l0N26fxiqH0QwO9O7grSaioRplMlE/7oq:3q5+DeIzP1lq2qxVH0L7g+Eplv7oq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771431861, "uuid": "19234525-62ae-422d-8a4e-e7f13fbce2f1", "value": 206832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431861, "uuid": "e2413ebd-8f7d-4155-b29a-ebe3bbaf46c5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "48381bd8-0ce6-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771431861, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431861, "uuid": "7014ae3e-6551-47da-8f5b-969a0f26be1e", "comment": "Malware payload (Mirai)", "value": "1c47ab86c484d844f38689f3b7e071a8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431861, "uuid": "b6e31c84-2f4e-448d-a73f-9dcf09720e7f", "comment": "Malware payload (Mirai)", "value": "8a8ae61eab18fffcd81e21096b264beb5f81b927c1702ceb2d5cf9d5047319ae", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431861, "uuid": "17c8afca-0bd3-48fe-a79c-44f752b577f5", "value": "T138042AC7F900DEBAF40AE33748530909B130B7A204925A777257396FED3A1D91977E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431861, "uuid": "3c6151b5-37c6-4b30-ab19-a9e00a5a57ae", "value": "3072:MyjKBqyGL2/aJmvVah14yccUVuS6nYR0tocbWuobHvHJtD7hJV3jbiZLoHb6YTyc:4y3oyclV16pt877hOL4KKL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771431861, "uuid": "e10a45de-cbfd-456d-8231-c5e764411ad8", "value": 177636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431861, "uuid": "12aeda45-f796-4951-9d08-f98352783f1d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "483957af-0ce6-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771431861, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431861, "uuid": "82531d5c-703e-4ba1-a2d0-21fe692f712a", "comment": "Malware payload (Mirai)", "value": "756416ac0adc4c5f10dba2759fcd2afd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431861, "uuid": "18675e39-ebb9-460a-aed1-463d8a64a530", "comment": "Malware payload (Mirai)", "value": "faec0b3aac31748c51407af7a881285a293caed2c84174a2414d7ff85375e15b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431861, "uuid": "c72afdd0-9548-4118-a1c4-3a6daec57cd5", "value": "T1C1F31956ED819B11D5C152BAFE0E528E37131B7CE2EE32129D246F347B8A87F0E3A4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431861, "uuid": "de39001b-54d4-469f-b70f-89cd970e7368", "value": "3072:DDw5Qcqgs41ZXOPCFd5QajQJXXfvvaIo8TFxZT/FHjgM977PF4Y:Hw5Qcq41ZXOPU9KXXfHa/8JTjFHjg67N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771431861, "uuid": "555abfd7-86ca-4262-a4ed-cb79801344de", "value": 166548, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431861, "uuid": "2d0a5d4f-61f4-4a42-9136-a48d8148d5d6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4839e39b-0ce6-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771431861, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431861, "uuid": "d554ee45-47d4-4e0e-a738-7009b65647a9", "comment": "Malware payload (Mirai)", "value": "0ebcb75042b1b85cea10582979244695", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431861, "uuid": "77672bd8-8610-4139-b2db-74b8ecbea390", "comment": "Malware payload (Mirai)", "value": "a450de7063259b3892e4538020a0c4ff0203400ca522ad03d0a0732474b4808e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431861, "uuid": "20a0025a-eab1-4407-b99f-41a7cc53e899", "value": "T1FFE33A02B30D0947E2632EF43B3B27D193EF9A8125F4EA44355FAE4991B1D32158AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431861, "uuid": "b09fbd8b-ca90-4339-8f77-5e04d1560171", "value": "1536:2rLBS5yxpEfHAjQcqf3nxC5nMAZ9GxTTi75pbBEvWGfqb67cuN+L7URMzQGCW0de:2PBS5VfA2xFuRVFOvlFMzqWq5eG3U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771431861, "uuid": "4c92045b-4a91-4b4c-a06a-394e19d9e6e1", "value": 154348, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431861, "uuid": "cacbec45-9539-4406-beb9-b80c1d3ffb0e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "483c4c73-0ce6-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771431861, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431861, "uuid": "023be3bf-88ed-412c-ae42-d8e631472afd", "comment": "Malware payload (Mirai)", "value": "bd990586cf7176c2e6a573176dde7197", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431861, "uuid": "10892627-2cb9-4dd9-9fb5-a608232823de", "comment": "Malware payload (Mirai)", "value": "35074e677812d2ed1c44262931d1b2be81a5b0b52431fccb0759f39322b9512c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431861, "uuid": "f23de5b6-c653-4df2-a5f0-d4dc584b6054", "value": "T1D114851E6E328F7DF368C73447B74A34975D23D626E1DA84D1ACD1052F6028E681FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431861, "uuid": "7e36ace2-8a05-467e-9620-a6c3f3f783d9", "value": "3072:Y8Rmsk+9dRgZe3yiuPTk+FFwHWBKgs5MXcDpgSkbtdt6nwkZ8:Y8RmskzmyiuL7DPeexPt6wke", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771431861, "uuid": "da6f4e80-7098-4173-bdcc-a21e5d0f482d", "value": 203384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431861, "uuid": "6423822c-4ff0-4ec4-b1f6-acaae47a3894", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "483e29bc-0ce6-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771431861, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431861, "uuid": "f8ef3900-fcf8-4e53-a434-c275978944e3", "comment": "Malware payload (Mirai)", "value": "cd5ca05ccd27f213181b9a5fc7b2fdd8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431861, "uuid": "eea86c54-070a-40ab-a40c-c38f5b0f5b1d", "comment": "Malware payload (Mirai)", "value": "7933b080c35d1edfb9016113a3b48b65cf7a1ce2c8ef73fe9889b32faeb3cf3a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431861, "uuid": "14eaf1ca-a5c5-4e73-9e1f-fe965df5885e", "value": "T1F914C70A9F510EFBD8BFDE3342E9070635CC650722A97B363674D924F64A94B4AD3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431861, "uuid": "b9f8922c-079f-43d8-8c16-a813971e1be2", "value": "1536:yFtyxWIoQqOWMDxRMCXRpvj5WmYgWGOJeYH+n9riu+VfojECb1qRZ1qzYz0II1zJ:XqQhpI7Kuf4bU9wFeXh/zV2Av86iX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771431861, "uuid": "494daf5f-261f-4d75-91a6-7b34406fa19a", "value": 206360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431861, "uuid": "e2a6a794-d57b-4f04-b3aa-99b8349ed8c9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67311966-0ce6-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771431913, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431913, "uuid": "c950b9f2-78ba-4752-99b1-19fd6f0bc64d", "comment": "Malware payload (Mirai)", "value": "cbf3ab4031d35ba2a47d51ba08597bad", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431913, "uuid": "a64c7cf9-3f35-42af-a48f-9a389ea93f85", "comment": "Malware payload (Mirai)", "value": "a184e55ebf17d046a8fb9aa450d6475046f475d0c7da1545f33c3df58bb5dcce", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431913, "uuid": "f0dbc48d-bc1c-47f6-a756-df2f2b220cb8", "value": "T1A4034B278976AB1BC6D4637701D783A1D0FF1B801244175FBD4B4C9EFEBA3406A6A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431913, "uuid": "27865f26-d6c9-4339-bd89-0f57b21769b7", "value": "384:KvkjZr62tQqCTHkCjpTepGyppAWcIhRZjBtwZkr3+3OXJQpC2xJEP2/ojRjVicOQ:Pj2qCTEepSpDckckrOxC2wOwVb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771431913, "uuid": "4ed0ff4a-67cd-48b4-afe5-3772415e89b7", "value": 38540, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431913, "uuid": "7ff03c72-a44f-44f6-89d5-23c8758503b0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef01548a-0ce7-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771432571, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771432571, "uuid": "725dc86b-6834-4478-902c-a5df4ed15935", "comment": "Malware payload", "value": "21b6c1f6c7b6dcc9cd56ee62e0a6a820", "object_relation": "md5", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771432571, "uuid": "5e7d7739-7033-45c2-9853-a705f911a659", "comment": "Malware payload", "value": "0811c7ba5dd996eb2b448d4222e803162673d8bb6d2bcca1f5e1370976766408", "object_relation": "sha256", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771432571, "uuid": "8d4d7a3f-faff-4df3-9d51-1f92fa33ef26", "value": "T184073351A6F5DA2278355D7CB36CE79893F0A8681147CD93C9300FB0464A46CBFBAB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771432571, "uuid": "9a53b2dd-b4c7-4858-a576-82394398a4b1", "value": "393216:aP9hFxlBhPhJ2mPt5lGE0aruOOFlFfngb:6RhJzV5QESFlFfngb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771432571, "uuid": "a0b60790-7d45-49f9-8682-83b22b409f41", "value": 16988009, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771432571, "uuid": "89f4219a-7125-457d-87a2-933f177655fa", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35668f9b-0ce8-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771432689, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771432689, "uuid": "69c509c1-fef6-4fb4-a128-bc7e6a92be41", "comment": "Malware payload", "value": "76354be1ec2c69442329eaf8d46389ca", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771432689, "uuid": "48327e96-0b2b-4d7c-961f-8954552fff7d", "comment": "Malware payload", "value": "03c5a26a3c0c793994b85d2a1759deea82579c881e89ad825b985d15c43ef67d", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771432689, "uuid": "4c2d0ce9-9957-4541-8f35-78371a7e6eda", "value": "T1849633C6E369583FCCBB41390DAA973512229D26DE82D70755A43B3C793B6840FA9F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771432689, "uuid": "8a4abd15-f725-40cd-ac1e-a0078d1ebcb2", "value": "196608:/l2NijM1SKhvtLj9l6hRteQ1blMCIcF6vEbvotYvfo:t+iI1SKnpObeQ1dIcpbAIA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771432689, "uuid": "ef5cdf9f-0bee-4e44-b2e7-43b3ee3f1030", "value": 9324603, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771432689, "uuid": "3d709250-063b-406a-a1c1-3fdc8e3bd6e4", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "356b0a67-0ce8-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771432689, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771432689, "uuid": "ffa9918f-f845-4600-8e87-26b9558e6548", "comment": "Malware payload", "value": "1aed010f10b237fa4ac3ffe1c78f1486", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771432689, "uuid": "eee63a28-4f6e-4010-9d3b-c47809f1137f", "comment": "Malware payload", "value": "59bd5011be93e9f724a61549099ddacc7471e406c96ea25dd78cfd711ccff09f", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771432689, "uuid": "e77ceaf6-c5fb-40ec-8650-8593abc53e60", "value": "T12DD5AD8AFB0C992FDCB6103A5DAA037126175C9A8D82D7433404772CB9B76C84F5AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771432689, "uuid": "c96858d0-a2bf-4305-858e-81b1e0b7995d", "value": "49152:ZtID0eicSd/+Nqq8F2+Va7tzlgsSic3QpmxP:ZtIkbssqTmaJOic3Qpg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771432689, "uuid": "9863a510-d4e1-4963-9959-49e39a8bc984", "value": 2780800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771432689, "uuid": "ce830255-3755-4772-b552-f886f5a423ca", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35756408-0ce8-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771432689, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771432689, "uuid": "51f33ede-9d0c-41a8-92bd-dde559d63739", "comment": "Malware payload", "value": "5d70f828c5f55e7d12adf4c6b658be2d", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771432689, "uuid": "7f8816fb-4e5c-495d-8f45-d90808992922", "comment": "Malware payload", "value": "72af34a9415d19b9a3f6b3bd14336df08c3b419bbec5feb79396e7f1ca054aba", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771432689, "uuid": "40a3a3b4-bf68-458c-9fe7-3b77682a5b7c", "value": "T1A5F4232AFBD188B3D4854E70859D6332E638FF39AB34B15AD74E0E0AB8343517919F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771432689, "uuid": "3a9515a0-1b22-4e8c-947b-e588308f5a77", "value": "a6d1f237a38b6e7d3a48b606fa0d7939", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771432689, "uuid": "db14b878-ba98-436e-81b7-d4daaf5d88b4", "value": "12288:RTX/+0osETuOGFHQ1dLIV/EeXenMFAwtDoMKtKWX1kkH3UcNgf/J8:Z/+SOwHt/3XenaWwWX13zU/W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771432689, "uuid": "f3f4710b-899c-4a1a-b4d6-2bf3aba48f31", "value": 787364, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771432689, "uuid": "412a684c-df0d-4fec-ae1c-d2a5797616ba", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "39a20a8e-0ce8-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771432696, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771432696, "uuid": "a884d61b-eff5-478a-af5b-24dcc60c09e6", "comment": "Malware payload", "value": "5afc5632319f0d2772c218ba5b02fca3", "object_relation": "md5", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: lunex", "colour": "#cb4cba", "exportable": true, "hide_tag": false }, { "name": "pw-lunex", "colour": "#A9A8CD", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771432696, "uuid": "9a342a51-2c1c-4143-9144-3855df0d6d51", "comment": "Malware payload", "value": "47566c1d2b81a3179aaf69f75234b27cff1637ebb94b7bb2ebb69e6fb8159810", "object_relation": "sha256", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: lunex", "colour": "#cb4cba", "exportable": true, "hide_tag": false }, { "name": "pw-lunex", "colour": "#A9A8CD", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771432696, "uuid": "94aa6483-904a-4503-b9d0-9d8448a22400", "value": "T1DC083383EDA98CA1DDCBFDF392CA85B3E08D65789AC11150E3D4800945C8E5EDBAF3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771432696, "uuid": "f2cb3c34-8acd-45fe-a1c6-79bdf62c5fe8", "value": "1572864:O6ecREYXFya9jeOdI1erkYOB2iBrqxzJQv1yrp8Eb8REfKL2cBoyBTNJpD0tv4eY:O6ecRj13iOdrkPB+fQUrpnbWEfKL2byT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771432696, "uuid": "17e4a864-7b27-409f-956c-85be4a496bff", "value": 84648471, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771432696, "uuid": "33e5b1ab-4e1d-45b6-9133-81d169193fe3", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a1ae35c-0ce8-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771432750, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771432750, "uuid": "fbdf724c-85fb-4398-9258-f81d40693401", "comment": "Malware payload", "value": "f03eecf313adba90699371e4b66ca718", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771432750, "uuid": "ec9c8b76-50e4-4d9c-b74a-e575bf9c040b", "comment": "Malware payload", "value": "b73ce45f837e67b2f81565c63c8601ec0b89360101331f89fc6821e2fb60a7f6", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771432750, "uuid": "cce43f4b-906b-4ffc-8edc-39408d8e0754", "value": "T1EA234BF20733EC8F9B2B0D15F40C2211ECB8AD9735D994B9BF4A199A4AE451CDC74A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771432750, "uuid": "409979f3-6f5b-4c24-95a0-d035d2346684", "value": "1536:EajROo+9GRMBY7R5YZ01/tvfSErz/V17eaT7+VW:XjuqMBYgZ0VvlT7+VW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771432750, "uuid": "d23028fe-3a1c-4546-aa6d-7f773b7609fc", "value": 49155, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771432750, "uuid": "819976a6-d023-45f7-b18d-45f6735636d7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5501013-0ce8-11f1-8369-82aee05be84a", "comment": "Malware payload (RedLineStealer)", "timestamp": 1771432930, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771432930, "uuid": "9ab0b8d9-3a1f-425c-ad88-acb35b2276eb", "comment": "Malware payload (RedLineStealer)", "value": "47429ffbe0cf6a734196534823c7e07f", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771432930, "uuid": "9a2d31eb-18eb-49e5-8a9f-cf8f54e00596", "comment": "Malware payload (RedLineStealer)", "value": "6630b43aa6aed23ad6bca86985f38e0dc5d55e0a79c13e62144dcc87a928ad2a", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771432930, "uuid": "fa8acc6a-cf03-4091-9634-c2d4a95317cb", "value": "T1F8871212B9AD16B9C5FAE2388469A211B67238650331BBC71BE8157B1F376D46F3F3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771432930, "uuid": "114edd58-7d71-4c02-bfc2-90031d6888ed", "value": "1f74bdd8275d1c99b371f4a5243e6cb0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771432930, "uuid": "c7c94020-b876-4cb3-ae4c-c2103ec8b8e0", "value": "786432:ni51FLXqrRtb/S/N1ILX3JtUpTbLYH49aj3SWL:i51NqrvbY1u3HUxbk3R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771432930, "uuid": "7ad22d7e-8b8a-4f82-bd73-537c95455af4", "value": 37302784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771432930, "uuid": "b66d1ff0-2661-4360-b1e4-64679cfdea8f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "764e9959-0ce9-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771433227, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771433227, "uuid": "f881eb7c-c501-4b06-bec3-530352b4adc9", "comment": "Malware payload", "value": "fb34247c424711893ab8897222f11770", "object_relation": "md5", "Tag": [ { "name": "asy", "colour": "#d20689", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "CaminhoLoader", "colour": "#0a1beb", "exportable": true, "hide_tag": false }, { "name": "dcrat", "colour": "#75ce72", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771433227, "uuid": "5962a0d3-a89a-41cd-a192-55dc88921b28", "comment": "Malware payload", "value": "896742f42a04bbb043d94432df7bb8f01cf278116c27d01a753db4495ee5532c", "object_relation": "sha256", "Tag": [ { "name": "asy", "colour": "#d20689", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "CaminhoLoader", "colour": "#0a1beb", "exportable": true, "hide_tag": false }, { "name": "dcrat", "colour": "#75ce72", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771433227, "uuid": "6927ad8d-5d36-4cbc-9828-4e303b2cdedc", "value": "T1BB76127DB07C5C40E7D694569286B0EC8E6C1996F32B0AABF470C3DEC661ECCE16E8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771433227, "uuid": "9e1fbf20-b65a-4c54-a57b-f4a853c22521", "value": "768:jZbTzJm5bjT8tVTU3VT9z1CmNdSfcv1h3vWHP9uCoY8ZaV+vS6pZjQslNzdxHQSP:jc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771433227, "uuid": "7fb86a50-335d-4dcd-aedc-50ddc3c0f57b", "value": 7652020, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771433227, "uuid": "9d3279e5-1e36-40ca-b76a-7f2b3b14a7bf", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8846073e-0ceb-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771434116, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771434116, "uuid": "cb614685-7a23-4a70-af9f-ee02298d0b39", "comment": "Malware payload", "value": "ded02fee6291455efcf64c47fa82a6aa", "object_relation": "md5", "Tag": [ { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771434116, "uuid": "d42801c4-bf05-4b72-b561-25b15d179f42", "comment": "Malware payload", "value": "8b830f87be92486468561ab3f41a08bbafb24e2602f77a431ca42c15384fcc06", "object_relation": "sha256", "Tag": [ { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771434116, "uuid": "c69fa5b9-8e3f-49b7-8eeb-dda0a39cb70c", "value": "T13876136D5B7AC9B1D104C3D36B7BA724AC10046C077AAED95FA8CDCED6C5C39E8198", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771434116, "uuid": "80fcd824-0233-4276-8d3a-784a862c4984", "value": "192:bnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnn+:0i19RcfZt6DkaH9X0gIcwCtol", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771434116, "uuid": "fc0e5557-f6d4-4a7f-b831-2f30ac4de392", "value": 7270912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771434116, "uuid": "9e8d5413-2222-438e-9bc1-1b6fc3bf4253", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f175f410-0cee-11f1-8369-82aee05be84a", "comment": "Malware payload (njrat)", "timestamp": 1771435581, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771435581, "uuid": "2b87ba0e-e41d-46c8-89c1-ce3606b30223", "comment": "Malware payload (njrat)", "value": "589a56978552986c0b7a724452989e4b", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771435581, "uuid": "9ec350c4-d529-481e-afab-fa2b40be254c", "comment": "Malware payload (njrat)", "value": "6be3f79dfd7a14b4b568675da231eedbbd232d7fbab76e25a9f252f5b5facad4", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771435581, "uuid": "175c7ae3-e70f-4a93-b4c4-d370d862fc52", "value": "T1BFF41267B26034E5D167067BC1218642D3777C758B16ABEF13A8838A3E236C19E3C7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771435581, "uuid": "ce352d9e-696d-4110-820a-c40fea920ca4", "value": "469e59bd592f93ae01ff61cd0d813e4e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771435581, "uuid": "145e631c-1e9e-4e18-b7e3-15099a9fd60c", "value": "12288:Ir8VpxdYrS5SVuuMPzB+AdhKX2BBGFldiWq61RXZGchIzjNATgLZZL9Hg9TKxxmB:28VtMykAdBgZq615ZGce/N2qZZiRnD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771435581, "uuid": "5533f8a4-62a2-4b8f-9a75-c77252955d99", "value": 785100, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771435581, "uuid": "21fd0256-c338-43bb-81f0-1446420cc02a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd107053-0cf0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771436460, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771436460, "uuid": "aef3c3a1-a107-48da-8c2c-600df1cf7cfb", "comment": "Malware payload", "value": "014a7e192d6f2f9a4b029e535b85d5ad", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771436460, "uuid": "f8aad3b7-e138-4de9-b323-7989c0f59b0e", "comment": "Malware payload", "value": "6b1a68cdd0f9722f456e2cd9c666b69bcbc67ee050740e982256aa19cfbf4268", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771436460, "uuid": "f48d5ce1-d280-49e1-a2b5-dcf8b4a1e00f", "value": "T1F934F1E78B7742B101421CC285F7EF080CF5AA8B46805EC97ABD5AB4AA9F5C137553", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771436460, "uuid": "7982004c-e808-4cc2-81f9-aaa7b7747729", "value": "3072:mj9navNGnykuc12hmSSzXgZYOF7EYKgwYRU3XEt2tERVMMiP7X0uweSfzPXba6Ik:u9ANVFhF1VKgwdHAV4hD0uweyQ2Gqd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771436460, "uuid": "038d04ea-a28f-4908-8de9-594b18c3fb7a", "value": 247889, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771436460, "uuid": "ff29e567-7a7e-4d59-8e52-ba494f676f6b", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d760bca7-0cf1-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771436826, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771436826, "uuid": "f9152ca5-f311-4e85-bc2f-1b0a01d38c7c", "comment": "Malware payload", "value": "ac698304842890ba704cf0a0c810d5ce", "object_relation": "md5", "Tag": [ { "name": "BlankGrabber", "colour": "#f1c814", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771436826, "uuid": "89ac86e3-2615-4720-9c47-243c8749cd91", "comment": "Malware payload", "value": "43dac84fcc25935ae002fb9513c199f6aa988e32f0157d25670ea4a2ce018703", "object_relation": "sha256", "Tag": [ { "name": "BlankGrabber", "colour": "#f1c814", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771436826, "uuid": "2fa72f23-ee56-4cd0-a5a4-78bec632c447", "value": "T135F6339493E448E9E967583E4D619012F3F2F86107A1DACF0BD44B672F6B2E99D3D3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771436826, "uuid": "f2dfccd4-a567-4c7e-9283-1303d5c59a57", "value": "fa28a256f23b68ab4376980fd1ab2aaa", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771436826, "uuid": "08ef9965-cb91-4eeb-85c0-91c5cb531892", "value": "393216:jVuEmNGYN1bPsZg2KeiCxK4BHsFhktlapPLbYYYH4a7o:BS/N1ILX3JtUpTbLYH4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771436826, "uuid": "890d833b-9724-4d9b-8b75-bd4ea4b61c1c", "value": 15662080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771436826, "uuid": "d33b2e2f-943f-4166-beff-b791fd1c93e0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c561deda-0cf2-11f1-8369-82aee05be84a", "comment": "Malware payload (PhantomStealer)", "timestamp": 1771437225, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771437225, "uuid": "e1b8b38e-688e-43c5-97e9-2dc7477ed54c", "comment": "Malware payload (PhantomStealer)", "value": "7fc201de9880eb14c12edb1b2816dc73", "object_relation": "md5", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771437225, "uuid": "952e324c-bae2-4634-9168-9ac8cded87ad", "comment": "Malware payload (PhantomStealer)", "value": "455a9909fc582c3ae4208542b242c6b7adb1b54b900f22992ed0a5b140784aa1", "object_relation": "sha256", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771437225, "uuid": "6cfd751a-1bc2-4c65-a6cb-efa5e5d3de20", "value": "T19DF57C5DEBA9535FF2E785F0A83998421F780F7B007E7AF581BC2901F6C4A9614B41", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771437225, "uuid": "fca4c269-9d52-494a-bea8-b7e3f1504286", "value": "49152:muBFbr4g2pQEd7g2KRMW+IoTnI8XND+wBQBGEVbrudinxhdoYmGyvfLvNTSLjI/u:V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771437225, "uuid": "ada5907e-bc11-41ba-8c88-b51bbff06c39", "value": 3513095, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771437225, "uuid": "f0c0a7b0-8982-4bd9-afac-929e1cef7319", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "145fdaec-0cf4-11f1-8369-82aee05be84a", "comment": "Malware payload (QuasarRAT)", "timestamp": 1771437787, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771437787, "uuid": "4382758b-48fb-4b7b-a34e-dd7289fca31e", "comment": "Malware payload (QuasarRAT)", "value": "f74bb47bdda7e7d715d8a579033c98a6", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771437787, "uuid": "9da3b1d3-9754-4223-b07e-bb04ab9de2b1", "comment": "Malware payload (QuasarRAT)", "value": "90d5dca5a7c377d98eb2e739ec1309304432827633ca25b2fa8e031c2f271429", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771437787, "uuid": "ea3a868d-9c88-4bca-84e7-518423828cb9", "value": "T19756220168C95AD9F439463598B142300235BC570F916BEF899CBF73B812BC59D2BB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771437787, "uuid": "5323dd85-c248-4243-b8eb-81b93c632ffc", "value": "4cea7ae85c87ddc7295d39ff9cda31d1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771437787, "uuid": "52216daf-ea9c-4c75-9853-19d47fd15647", "value": "98304:Aaffffffffff31LRaffffffffff31LcNffffffffhRgr0imalJPkoAMnv5dr6N3o:l6gaJsavvrcqxzFAsp1Ng", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771437787, "uuid": "2ce5cdf8-5bfe-4782-af21-c192dee8d54f", "value": 5915136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771437787, "uuid": "80caf65a-e31f-4ed4-9aa3-a448572b2cc4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "040523a8-e5c0-11ee-b38b-82aee05be84a", "comment": "Malware payload", "timestamp": 1771437790, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771437790, "uuid": "f9e9e1ce-d374-4c3a-878b-176d438df013", "comment": "Malware payload", "value": "724f25e7f93eae0ae54a80142e11b7ef", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771437790, "uuid": "dab32364-9d54-41ee-9278-0ab20b46b210", "comment": "Malware payload", "value": "ab69ef32017a5365ee0e7faca03e1352382865c5672e989d99d2d77ec91c33ef", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771437790, "uuid": "a1bd6995-c274-47c0-9290-8a065aedbbbb", "value": "T16D356D56F9808EA2C5D8177BB75DC35833534B78D7DEB102CD08672877AB94A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771437790, "uuid": "35c8d738-f3cd-49cb-b6d7-897f99094159", "value": "12288:00Bw2wHeeJgR3asIAksAi0uObzkzOgFr1qwRcFjV1D7a9KbsaKjpeFmz4T28bLv:00BnRED/TwOjX0a5xTdv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771437790, "uuid": "6700c3d2-308b-44d2-a104-6bb3d2a163f5", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771437790, "uuid": "a43d8f19-de69-4e91-8cfa-27ef4c2ed33f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771437790, "uuid": "a51349d4-19b0-473d-91ce-a089e8bdc6cc", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3ea0263-1a77-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1771437790, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771437790, "uuid": "0b9dda33-1609-49e7-aba7-caba3b9f50d4", "comment": "Malware payload", "value": "567d3249dbe60fa9478a424a69c2c535", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771437790, "uuid": "1458019e-9c33-4acd-b4e0-66ae9508fe69", "comment": "Malware payload", "value": "ff70c53dd6e9806c588d8f78ee35d406db0879bf5419a18a87c7982c79e3e9bb", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771437790, "uuid": "1ef50d30-c8e7-4444-aa13-366bf7558280", "value": "T19F05E184F5E01E67E487813F9B8246720266ED5FB34AC317574876BBB4BEA34EB153", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771437790, "uuid": "6002f948-8184-48c5-8d0f-c6e50fedbbd1", "value": "12288:BZpdDbfRWxSYOkwVcqcMFT5G1z6EtYOyDIGOnd7w4bLvVc:BHlb/KwiqcMFUzYP8GU7PvVc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771437790, "uuid": "504759dd-d926-41dd-add8-ec054079517b", "value": 848048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771437790, "uuid": "db912544-0acc-4945-a736-2dc4d59c54d6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771437790, "uuid": "e24139d1-f3ee-447a-9854-c899affb8296", "value": "t189217143a83f9f3ad5a2d8b0dc6a0725512b5702b4f9e7109f3ca9d06c7a016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cae4e4b-16ee-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1771437791, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771437791, "uuid": "805250b9-74bf-4151-b291-62b002ce114a", "comment": "Malware payload", "value": "936b35bfee8232f437bf6b46e88401dd", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771437791, "uuid": "7df983a5-81c6-4938-9be8-de53b7cdcd15", "comment": "Malware payload", "value": "de9a5647bdf02fa2b927566c78e54d5931e25c9f07d2ab884e135766815d53cf", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771437791, "uuid": "37de3216-271c-40a8-9770-3e94ee7b859e", "value": "T1B9356D56F9808EA2C5D8177BF75D835833134B78D7DEB102CD08672877AB95A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771437791, "uuid": "05396458-fbd9-488d-8be7-42d63f9adfc0", "value": "12288:E8dASOYRNCAJump208iJftl7zmnSrlcaUxQ5TVFQGl9eLtRajZa6ZTxIVD7bLv:E8dbbsO38+TfgRinIVvv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771437791, "uuid": "dfeb0e85-5345-4b8c-a996-ea08597a0ec2", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771437791, "uuid": "0f7360a4-fd53-4f99-85d7-ab730c9d9f88", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771437791, "uuid": "3e2d0c29-8dea-4f7d-98ea-73626f470254", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fa7ce9e-0807-11ef-ab08-82aee05be84a", "comment": "Malware payload", "timestamp": 1771437850, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771437850, "uuid": "b9fecdbc-0d08-4423-af1e-7f02cbfc8dc1", "comment": "Malware payload", "value": "df64a5c787f34c5b38c8103a67e3d97c", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "trojan.sshdkit", "colour": "#25313a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771437850, "uuid": "f1972f01-fc26-4213-b4e3-b4ac9b6c0230", "comment": "Malware payload", "value": "6f1bbcaa6efc41ee257919a85acc9ea5b1f82c8def103e39629e0b5161800ccc", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "trojan.sshdkit", "colour": "#25313a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771437850, "uuid": "eb684cbf-b789-49d7-b17c-6aeb45d2bc8c", "value": "T11D356D56F9808EA2C5D8177BB75DC35833234B78D7DEB102CD08672477AB95A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771437850, "uuid": "e2d86b9b-e7fd-493b-a4fc-125ad77b9305", "value": "12288:sQFoCapOujNJ7h8SYIhU1wwy7zh36bV7CIBolbVtE7ZdXjboyjBNY3v9fQbLv:sQFbJi5Pa/CbmzotVqv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771437850, "uuid": "59257b97-69c3-4105-8a64-83f449fc11e3", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771437850, "uuid": "56b104c1-2b66-4b32-8be0-36992d429bfd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771437850, "uuid": "40ff1a2d-ac45-4961-9d44-1a34cf82fae1", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78df924b-0cf5-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771438385, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438385, "uuid": "18941628-c4b4-4b91-8c0a-fc0080b7aefb", "comment": "Malware payload", "value": "8360e33f8394537cda9c241e7dc16cb1", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438385, "uuid": "66d6df9e-0aae-4e61-8d73-e408a33f534d", "comment": "Malware payload", "value": "71715f3dffa1f759daf555579cdd0c275637c3e47668e89dabac66c0a9529ab9", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438385, "uuid": "94baf545-f46b-4475-a9d8-096866e4d7bb", "value": "T12A51B38F739BB722AFD3D472B45521302683C165D0ED5A4CF6C438DDD06DCA4A29D1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438385, "uuid": "5e183d22-30b3-4574-b095-ab0e495ed5a5", "value": "48:wOqNZNfgNU/qNuNbKzAddqNYN4tCXaqN1NLc5QyqNNNTERB211qN1wN1A1V1a1fX:wOqNZNfgNU/qNuNuzAddqNYN4tCXaqNZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771438385, "uuid": "ddd5caab-58aa-4264-828a-bc1ce9f92c1c", "value": 2544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438385, "uuid": "6a2a837d-67c6-41da-abc6-8c1bb6b07233", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c3ea8a02-0cf5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771438511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438511, "uuid": "9254173a-7d07-4db3-88c2-d9f7c4005e87", "comment": "Malware payload (Mirai)", "value": "d3f777f7839081c621f06d2acdbae1d0", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438511, "uuid": "48b1cfba-d975-4b09-9ead-b41000bbbcc1", "comment": "Malware payload (Mirai)", "value": "a3344fdea80d4978a5fe3ef2543dad8b14cdb2929a137ff5ce846a3f609d55fe", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438511, "uuid": "073e5ffe-e54b-41ce-a938-dac89faa2bba", "value": "T11EB2E12065579664CF604C3DF8B6EB023ADB0B7EC2E937033685012C96DA90558BDF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438511, "uuid": "4d6c8237-1a0e-4360-8c5d-102fe4583ec0", "value": "768:4OZD5qANHlLPWzt5suQeNg+6j+uwas3UozMs7:4OZD5qsHl4Dwem+6j+uwXzZ7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771438511, "uuid": "971b8d6c-911f-468c-b24d-a25863da3300", "value": 25104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438511, "uuid": "4dbbff7d-74ff-40fe-b695-4193cb045266", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c3eaa24f-0cf5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771438511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438511, "uuid": "2989f15b-8eaf-4628-be8b-2c1dd133e30b", "comment": "Malware payload (Mirai)", "value": "f9c1f683fe3036b43faa9a5b27609235", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438511, "uuid": "fb3552c8-6a57-4bfe-9204-4ff5369070ec", "comment": "Malware payload (Mirai)", "value": "ac28aa2fbe9ff0528536fce7aa701f01842149ec8a0a4c435d682f44de054160", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438511, "uuid": "e0cbd4bf-48ef-4131-bdae-cfa3e07bdedc", "value": "T10C13F1A356187C31A5B4A4FAEB25CB425E7201F8D3F133352704DE25A8C82275AF57", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438511, "uuid": "0935e0b0-6989-47a2-b482-8733004da7d6", "value": "768:SY6nZiLt5rvQHasMyyQO8QXUODxk+Fz00u58aTcNn9s3Uozd:fCcpvQHasuJ++FW5RcnAzd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771438511, "uuid": "a13e3e1b-4a6b-4d8b-bb9e-556e9101fe26", "value": 41620, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438511, "uuid": "e1b43147-6f01-413d-a37e-de82fa4a05c2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c45310bc-0cf5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771438512, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438512, "uuid": "3ecf52ea-4abc-47a4-ac59-910a80c03f0e", "comment": "Malware payload (Mirai)", "value": "409a08594f9e527368c3394773080b0c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438512, "uuid": "49f75716-6b77-4467-b923-7390f1cfe065", "comment": "Malware payload (Mirai)", "value": "58f6f5ac44d446bb9eceb9eceb7849cdf43052e68e88dec6278d049c0c3f8e63", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438512, "uuid": "984af8a1-9b56-41de-89bd-56101d4bba3d", "value": "T14D9328C6B401DC7DF80FDABB4463290EB631E3611A935B26675BBE53AC321E05917F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438512, "uuid": "763893c2-f947-4d7f-8c9d-c3207fe2d743", "value": "1536:qsdLEbXJld3JWU6FRs/yeLn2lTjiGtFW6yh5Pb8bQThLbKrhsX5ZH1M0zznBheZh:qrWXFIyeLn2ldw6yhBruuZVMq6uaBrOO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771438512, "uuid": "9cd845ac-bd0e-4408-b33e-bb664c052730", "value": 96732, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438512, "uuid": "58545841-5e49-41aa-8aa5-6add94ff9289", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c476eaf6-0cf5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771438512, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438512, "uuid": "68d19ca4-6740-452c-aa6b-389690252ca1", "comment": "Malware payload (Mirai)", "value": "2cfb216f15e41767b80ae565b3adc20d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438512, "uuid": "71ea127b-e651-490e-93c6-3bbbe2fa0983", "comment": "Malware payload (Mirai)", "value": "e9e2e3ce2221dc85c5864337b54ae4863ead655db85c711b87a8bd2ecbee5d57", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438512, "uuid": "34af7680-1ff7-43ff-85e5-1ca301355cb0", "value": "T111739E23CCA61998D25C42B8B170FE3A5763D81056936FF7059ACA7AA047EDCF8093", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438512, "uuid": "d729c3f3-0ffa-4f49-9c1f-187c85d0b8a4", "value": "1536:0/C/lVA7lvDQuh23KoJeE74kvJgC9aglZQP+Y:0q9VURQuh26oNNvJgNGqP+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771438512, "uuid": "78a9a3da-f019-4ba1-929c-4bbb3408cc0c", "value": 80372, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438512, "uuid": "879c76e2-0906-438c-a97a-19f9a06e94a5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c477dfc1-0cf5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771438512, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438512, "uuid": "03218977-c2cd-4f38-a65f-7b8084203b7c", "comment": "Malware payload (Mirai)", "value": "c07f3d82ac0fd062c2be6a612c902824", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438512, "uuid": "9ca563e0-fa39-47ae-ad0a-fa725b0b0994", "comment": "Malware payload (Mirai)", "value": "fef2eb6f39205bb097d7e44f7804fc04616c00a6d0db98e03ef96874244f7083", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438512, "uuid": "fe115485-d6f1-4617-bf0c-b86c033bed22", "value": "T1FB13E17C030F08F2EE3599319BD81BE01DB202739547DE5EA179E1D359609BE3693E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438512, "uuid": "215d3c78-af92-4890-b09c-191c0d0ebd54", "value": "768:sls4wXUXTCPZyiWUEm99uS9I2fOivDY2k9SanPC3BmwMDjf010XlmhzJgGlzDpbQ:slSXUOP8iRBFIEv27PYBmJns1rpVJu3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771438512, "uuid": "f2a34b2b-65af-490a-8d37-38b7e984a314", "value": 43288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438512, "uuid": "584d1f8e-71ca-4e82-a06e-53bcae69b396", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c482e2f5-0cf5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771438512, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438512, "uuid": "565b88d2-3a76-48c4-af4a-86cea2a1b092", "comment": "Malware payload (Mirai)", "value": "71c018c93e09ca8789371e315c69c470", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438512, "uuid": "447f3748-06a6-4ac4-abcb-c853db8a76ba", "comment": "Malware payload (Mirai)", "value": "f9132d227a1f0e08d98ac0185264d356e93b15a7c1912c35c1f3a98a61cb1c4c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438512, "uuid": "09a76aca-bdf1-4c89-aec2-6e4e4e54e156", "value": "T14A63021055CD99A1CBD111B3FCBEC853BBAC93F692FCA80E2325C655E3F294265F14", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438512, "uuid": "d2cc8c32-813d-4c3a-9c87-56a703db047a", "value": "1536:pMyXG5+FLTeIHbCSxsONHZJ45o3za3L7B9mHgTt:pMy25sLB7tFHs23mLtMHgTt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771438512, "uuid": "c3cf3d38-67d8-41e2-b9f9-2ca314cc621f", "value": 67428, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438512, "uuid": "064ac66a-044c-4db4-9927-02885f2cee73", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4ad60dd-0cf5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771438513, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438513, "uuid": "58356d45-3aad-4977-93cd-78bc16a5900e", "comment": "Malware payload (Mirai)", "value": "48194c71f924ab6eb1272026fac9e797", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438513, "uuid": "b1efdc2c-b9d0-4b7d-a8f6-abbe15f79aa6", "comment": "Malware payload (Mirai)", "value": "c612ce7b5788adcc74e1fbf45a31d416152a520c5d6d7f04e7297f6ecc96b049", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438513, "uuid": "4326dfd8-23d4-4e47-9724-c5fe2df47139", "value": "T190C3BE97F78B24A1C86146F007C77B8E2EA361119E6BE9E76C0E653B193A0DB19063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438513, "uuid": "5a1885f6-505a-4326-bc25-f684b81cd1ee", "value": "3072:h35sfcq8rU8sZ2ZWL+tupAByFC0Pg5/q:h31q8nHWZpJg/q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771438513, "uuid": "b7e156b7-514a-40b9-8ddd-7e82196df482", "value": 124352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438513, "uuid": "cb4768e5-0c50-48bc-97f8-e9e4685c9417", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4b0673c-0cf5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771438513, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438513, "uuid": "56af42c2-b569-468b-8f8a-188910e9360f", "comment": "Malware payload (Mirai)", "value": "a16a970fafe58f8c5e42c6929fa2820e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438513, "uuid": "c5dfac5c-904e-4698-9390-bd355fdd9f33", "comment": "Malware payload (Mirai)", "value": "2619a10770b6735120ff951145cbbfdc349a1c93557fdf997a56c72f05bff4b1", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438513, "uuid": "5882e0e1-ee55-4811-9091-e1226a16506b", "value": "T12113E1DDB17070F2CDFD747FB4A6C3A119807382E6FDAF986B224491A656D96A0CD8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438513, "uuid": "61716393-3ea6-4a96-bd0c-712fe9ac76a9", "value": "768:Kx4mYFFkS3n06sFREWfY1Zc/Yw6eHLCbrOByCIWu0/q9HM6TwUWbkIiOCU2iVjWV:KxhYHkS33c//6eHLGzZ0y9s6F1ZO2iVo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771438513, "uuid": "02c3fa21-9ebc-4851-a280-e467aadd23c6", "value": 44524, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438513, "uuid": "24455e9f-8245-4db3-9158-4804f4a9f1fc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c53a4dd6-0cf5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771438514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438514, "uuid": "dca0fd05-d04b-4305-9a59-ad86733c02e2", "comment": "Malware payload (Mirai)", "value": "804a76cc3a833bb0202ba51f0309b39c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438514, "uuid": "c4842f38-f6be-40d0-bbdb-fe6b2e83fe1c", "comment": "Malware payload (Mirai)", "value": "76fc5fa329f7fe311b7e6d74a2c1d6f1efee8c9d820a481e44b57760977a9e17", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438514, "uuid": "7b433dc2-07c5-46dd-a38e-5cb3fb9be690", "value": "T1AD13F15AA23C0B15D7FDBC3960EFA8561484870ED64588F5EE8277E16A12F08392D2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438514, "uuid": "ef28196e-6843-4d99-a1b5-7d2e4ce4b00a", "value": "768:/zDT+5mfT/P0B42qES1B0R8yc+6yzEo3hAiZk6VnbcuyD7UHQRjH0:/a5E2lSYR8ZaPRS0nouy8HyI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771438514, "uuid": "ad4f3445-c556-4b71-952c-aadabfabfc1f", "value": 41832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438514, "uuid": "d9248f51-5e98-425d-ad90-95194ad094a7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c56379c1-0cf5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771438514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438514, "uuid": "61ce9c69-489c-4686-9693-e0d7e3d6d5a7", "comment": "Malware payload (Mirai)", "value": "a28e9981d989bb56b97285008b9b45ef", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438514, "uuid": "9c6ca0cc-fd86-4cba-9c64-bb06cd797e82", "comment": "Malware payload (Mirai)", "value": "2234c5ad4f38df0ddb71f87a3789a2cf861f4f2bd7db843c1bd1ef591a810b1b", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438514, "uuid": "1dab6877-04e7-442d-9d26-d342997c7eb6", "value": "T1BD03F161C4593E13FFDFE32D7B92A1C033E2A12B27577E1317895F824606C8A6421B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438514, "uuid": "8b064967-4f70-4816-bab5-e02119387d48", "value": "768:MzvKZBZGZzAWyFTTVwhOJMJIeacJqfOam6pVeGb72ivgZsBXD4uVcqgw09u:Mz/dAWQYOUqmgVeUlKsBXD4u+qgw09u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771438514, "uuid": "61ff9362-ed83-4ad0-9a79-f98dd237eec7", "value": 40124, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438514, "uuid": "c1064938-1d2e-4203-be46-a7de12cbe899", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c63af6b5-0cf5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771438515, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438515, "uuid": "02c5d592-db8c-461d-9ede-f031f2c7925e", "comment": "Malware payload (Mirai)", "value": "91f922e5c94827ff72af59bb5b467fa0", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438515, "uuid": "29992b01-421f-4972-bd38-de84bac9cf99", "comment": "Malware payload (Mirai)", "value": "319d9d1e529560228df3c58f29f8090ad8cd087ce992ba2e3e92b59502178e0e", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438515, "uuid": "e87d8112-64d2-4895-8c2c-a1941843e386", "value": "T10C934A22B539093BC5E4953722F35326F2F6438A14AC8B2E7E710E8EBF156D026477", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438515, "uuid": "8c08cb82-cb2b-4835-949b-d8e86902528f", "value": "1536:zCTLJ0Jld13m/EqBtga0vStPhYm5roASoAteS5:GiLuW9a5hYOc4S5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771438515, "uuid": "e3f773d1-4980-436d-8c7e-36b552a45ccc", "value": 91976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438515, "uuid": "e87fadad-61ab-4abe-b1ac-402eac76cc39", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c691b94f-0cf5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771438516, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438516, "uuid": "7884a3dc-9a04-44aa-8016-8f9c9c13540f", "comment": "Malware payload (Mirai)", "value": "3ab8791fd67338eaa3177ec47a7df7ba", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438516, "uuid": "62a39ac7-f590-4af7-86e9-a6722b4f76a3", "comment": "Malware payload (Mirai)", "value": "bc9c9c728baac458f606c8901296cb7295b08f0f13818b4d89684d8fbf5e27c5", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438516, "uuid": "a63bbd4b-2f27-4ebb-b3fe-4d37d536c97a", "value": "T15E13F130F8D8EA7EE5B25433EC9645568BAF36F6A8D7EE1652B502800A478017BF58", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438516, "uuid": "56eeca23-534b-4c5a-b3a2-1f1370f79707", "value": "768:4rzD+G5vIf2SfshirzIho+CVNj82Q9xxj7gOL0qYEo1+9q3UEL8b:4vDLgfnfcirzIho+0NjW8XfLs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771438516, "uuid": "a0a22f55-c2b4-42d3-986a-102d4b201709", "value": 44772, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438516, "uuid": "f05a6fdb-0879-49cc-ab78-64162c81780f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c69c8d1d-0cf5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771438516, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438516, "uuid": "c2a9d821-8931-4e35-9899-1cfe667e353c", "comment": "Malware payload (Mirai)", "value": "93d908fdf4fe448d9f34e346ae86f5b9", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438516, "uuid": "6db1055a-b56d-42f3-b0ba-c31f1a8c67ab", "comment": "Malware payload (Mirai)", "value": "5c705c70e87615cd2d226105f2079a95836db427c84d38baa2bb821daa881cf1", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438516, "uuid": "8768f9cb-d903-4904-b396-af22604b779b", "value": "T17A13F1B761AFEABAE97618FD6E0D5384D520C51F94823FBB84F0B51D01B30122A06F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438516, "uuid": "cd8b1322-0895-4502-a9fb-f31e81324d09", "value": "768:JhIfHyA8J99JgD00/1kx+TNDCraQS8xnCO6+mFTGEXWRrKtMox+JLH/6piEj2yBd:JhIvyJ7gq+Tia+xne+mpnXmhox8LEicd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771438516, "uuid": "80b2af4d-c433-44c9-b100-d18911600c32", "value": 41980, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438516, "uuid": "728c446e-78e1-43ec-abea-77e08469b5b1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6a6ca95-0cf5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771438516, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438516, "uuid": "7303df66-f5e3-4faf-b8fd-98ce5a2e8a8b", "comment": "Malware payload (Mirai)", "value": "ed0c56d86f82cf5f3594f45b2165cbcb", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438516, "uuid": "0046a6d1-3bd1-49b1-a2f5-a82db8b1a389", "comment": "Malware payload (Mirai)", "value": "54b6c012bd3bcda4dac68ff91783687efecb33da8c034c3da78503c4053553e6", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438516, "uuid": "88effcbb-a097-46d2-ab96-6baa2a79b58f", "value": "T17D03F17A91D5492DD09B43707CCEFF4F41289468CAFDD0BABA98A036A494BFC295C0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438516, "uuid": "08cdb751-fcd0-4c46-b50c-0855e8f9f05c", "value": "768:+2rJeRm10OTa7HEOerokYnVAn5/3TUzeekH7I2r5fDnUnbcuyD7UHQRjZ:T2fnerokYVO3akZDnUnouy8HyN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771438516, "uuid": "4c224355-34df-484a-b009-0f526da4e21d", "value": 41304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438516, "uuid": "4e3e35bc-4623-4f7a-9760-169f10367d54", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6d49378-0cf5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771438516, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438516, "uuid": "3ed59ab0-b834-4786-824c-255b5013617a", "comment": "Malware payload (Mirai)", "value": "d5fba7f2e60c358a43601584ef79ae1f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438516, "uuid": "7ffedb70-f1bc-4617-ad3a-3ec12c8ee427", "comment": "Malware payload (Mirai)", "value": "2fdea35950d735f2f97a13f7189d7951ae9d27c5ae504448b1ade310edb8e5b7", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438516, "uuid": "51dd9921-b05b-41ea-8c12-dd682277312d", "value": "T1AF03E19644D01A10E08EA73D84BF7A891568CB8D705858789F49CEB3ECC9F577B1C0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438516, "uuid": "83da55f9-aabd-4f77-b775-9085a444c657", "value": "768:jpD441TCCHW4bGJqaOFwdsfOIytgOMlgj3dlbFQm7c9ES5SEI9j3nbcuyD7UHQRR:jpN5CIbamirtZMlY3dlbFDc9ECYnouyT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771438516, "uuid": "1dd71411-fbf6-4b09-9e1e-daee1b86f549", "value": 39684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438516, "uuid": "126fed1e-295a-4fd9-9486-e870c0d114f6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6f715d5-0cf5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771438516, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438516, "uuid": "224c9d91-ff98-4241-8a71-8db3d95ef175", "comment": "Malware payload (Mirai)", "value": "8d84b47d9593c97b4736e27b48899a05", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438516, "uuid": "2479b651-2a4a-4c57-96b4-5ce421ab1409", "comment": "Malware payload (Mirai)", "value": "10510d1fd3ff4e050340fa0d620f7ef0b3b232203a0edd5afac7a1aa55d244d5", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438516, "uuid": "29567475-b619-48df-8ac9-8afe664030e6", "value": "T1F451D9CE12C587B15E6E4967B365E48A7C9DD4992087DF36CEE834E3044DD08205D7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438516, "uuid": "1373ce8c-b460-4003-847e-1871135f6346", "value": "48:isFfsy9sjrsqoYs05sYJsbTbLshvsIlLsthJsydsW1svrsfbsK7W:io9KpnrAYvL6Fba8tW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771438516, "uuid": "73e6853a-39d9-417a-8ed4-3eb4678ea722", "value": 3164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438516, "uuid": "2aeff8e0-ca35-4ed6-8944-c69c7b0da143", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dcfce4c3-0cf7-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771439412, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439412, "uuid": "b75c6f5e-4bbd-4f03-83b9-3f6b7a119738", "comment": "Malware payload (Mirai)", "value": "9fdf05841c063a2f751e348bfc6f2ec4", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439412, "uuid": "7d93ec74-c0d0-4625-9910-ee3a9b089005", "comment": "Malware payload (Mirai)", "value": "33446f98e49714ac509ef7a5f542c9bb557968f2a640f104ce27fca80d576580", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771439412, "uuid": "a7c0a1ef-0054-4ecd-be57-93df38d15dda", "value": "T13661B5CA02C58B715DAA896373E5E4C97D9DE0AE2082DF36CFEC34F2084DD1871595", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771439412, "uuid": "ca7bdfa3-a947-41ad-996e-84a8eded44ec", "value": "48:is0csxGsiUsFJYsb2sDSskTkLscUs7YLsKaJsF6sTus6ssQssfgW:iCfEPBtoe5Le3LQ4FW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771439412, "uuid": "acea9ef0-8c50-434f-9aa2-e7bb47816114", "value": 3194, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771439412, "uuid": "62ef8541-c4df-47fc-840e-6bac82e034b0", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2340fea6-a195-11ec-b287-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1771439425, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439425, "uuid": "32d79659-17c7-4e1d-84e4-83fbbe9db73a", "comment": "Malware payload", "value": "fd489711f80bbdfd13e19b169d53cf91", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439425, "uuid": "be9ee626-fd20-4a87-949a-6b8c6c59d88e", "comment": "Malware payload", "value": "7300b5fe7fd512ac5c004588a2390da754ff3087243644b7e4e6a48a2a3fbb28", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771439425, "uuid": "51707150-626b-4817-93e6-5e43e6ae714d", "value": "T13E64D08AEE00AE25E9C022BAFE5F034973774B6CD3DBB111E620D72936CA55B4F760", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771439425, "uuid": "c20394dd-8bf0-4b49-8ae8-84c4d4e78ac0", "value": "6144:p3lOYoaja8xzx/0wsxzSiDSDP99zBa77oNsKqqfPqOJ:p1CG/jsxzXDSDP99zBa/HKqoPqOJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771439425, "uuid": "c19028e9-06ad-499d-b070-26f5d7cadd14", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771439425, "uuid": "2718ef92-567e-4896-b1f5-1c380eef77c6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6183e94d-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1771442421, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771442421, "uuid": "0f1dc769-8f51-4d99-b1e7-ba704466b592", "comment": "Malware payload", "value": "dbc520ea1518748fec9fcfcf29755c30", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771442421, "uuid": "47259c33-adaf-4059-b852-870f5e2d63d2", "comment": "Malware payload", "value": "c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771442421, "uuid": "460db525-400c-4690-8d2b-1b55d203090f", "value": "D2D3128AA536ED54F11B9AF11B3B99907DF5659E82F4D4A4A2CF634312CC343FA4070B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771442421, "uuid": "1534061d-6a11-4aac-8c43-009c83098f4a", "value": "3072:Nc4i0agsmw3Py5CP5HM8EVLUuYtgB5H6oz:Nc/0aNPy54EVAhOae", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771442421, "uuid": "27f5289b-9e28-46e9-a9f7-18a9806735f0", "value": 132860, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72887789-e514-11ee-b38b-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1771444690, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444690, "uuid": "1529e23c-deb5-49ac-94e0-1ba85519c11e", "comment": "Malware payload (CoinMiner)", "value": "cbcb58ffe45c202c11bcf2070496aed6", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "info.zip", "colour": "#160766", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444690, "uuid": "9eec8152-d3f6-4b44-b08e-fccde7d474c9", "comment": "Malware payload (CoinMiner)", "value": "7126b9932dc0cdfe751340edfa7c4a14b69262eb1afd0530e6d1fdb2e25986dd", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "info.zip", "colour": "#160766", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771444690, "uuid": "ee2468cf-7406-4e0e-af4c-7a1d700badd1", "value": "T19DF53329C35BA51C444ED111B88E299A937D8D177E1E17314E43336CFE378AE3E8E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771444690, "uuid": "549aa0f5-981f-44f0-b0af-f31176cbc98c", "value": "98304:SyrPvG3UNpYqQLpXhHHeanDebmPL+okjWa1lu/:SyrPO3UDsdXp+z8+FWyE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771444690, "uuid": "6c3157c8-a7d5-49a1-85f4-bde3752c79db", "value": 3528005, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771444690, "uuid": "4cde1c43-227b-43fc-8d51-c40181f532a1", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f814924-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (CoinMiner)", "timestamp": 1771444696, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444696, "uuid": "60f2bde0-a752-4c2d-ae4b-abba561016e9", "comment": "Malware payload (CoinMiner)", "value": "aba2d86ed17f587eb6d57e6c75f64f05", "object_relation": "md5", "Tag": [ { "name": "alfa_team_webshell", "colour": "#701e95", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "expiro", "colour": "#f40246", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444696, "uuid": "42357412-ac94-4b5c-92dd-b1bb45c0c094", "comment": "Malware payload (CoinMiner)", "value": "807126cbae47c03c99590d081b82d5761e0b9c57a92736fc8516cf41bc564a7d", "object_relation": "sha256", "Tag": [ { "name": "alfa_team_webshell", "colour": "#701e95", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "expiro", "colour": "#f40246", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771444696, "uuid": "82cd0b6e-921f-44b7-97c1-725386b77efb", "value": "F5752296FF4350B4D8670278216AF3BE113EA40089374EF6E7C15BCBECA7882255935B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771444696, "uuid": "2358aa8c-0856-485b-a45b-7bd1239fe8be", "value": "87e83bda436138fd7844ecd76decc70d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771444696, "uuid": "be469789-ada6-458b-b067-a4913e115594", "value": "24576:pWKqa4hnzP3w7L3rmZmpk7FSQFW2iJ+N07/TwYV1CdZdQ+4lT+iFgiGTtswAtdz:pSrwf3aZmpOFU2iQNIUc1LxGTtswgd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771444696, "uuid": "89d943f2-7fcb-4c88-b558-1900c807c24f", "value": 1578496, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5498fef-0f08-11ef-ab08-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1771444704, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444704, "uuid": "c0caa9a0-7d5e-4315-85bb-71d702eadfe2", "comment": "Malware payload (CoinMiner)", "value": "5616a3471565d34d779b5b3d0520bb70", "object_relation": "md5", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444704, "uuid": "b7961a30-6794-4ff4-96fa-3a6b7a1673bf", "comment": "Malware payload (CoinMiner)", "value": "9194b57673209c8534888f61b0cdefa34f463ae50cd78f72ab2b3348220baaf9", "object_relation": "sha256", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771444704, "uuid": "54f0a67c-90b8-49f8-b49f-d1b8b60ae010", "value": "T151563345F4809837F139153629F980F2B07DBC7297244BDBA35E2AA56E317D83239A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771444704, "uuid": "68dd2da3-3931-4b87-9305-1adbb2d58fb2", "value": "91ae93ed3ff0d6f8a4f22d2edd30a58e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771444704, "uuid": "bec51513-396f-4b77-a613-d99ad3bde31d", "value": "98304:RLbSThOfTCiFBXmfFs+JhEpCVoR8oMEOJ6Ty3RvX+UGD823FUuzmH:tBfTCiUs0VSLOJgyBGUA8Ch8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771444704, "uuid": "0fcd0fd3-aa1d-46fa-9ba4-bee622665522", "value": 6227159, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771444704, "uuid": "010de883-0ee5-4087-81bc-212f217b2e86", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ebbe57bd-0f08-11ef-ab08-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1771444712, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444712, "uuid": "c67410f9-88f8-4ac0-a9f2-9907c64974ca", "comment": "Malware payload (CoinMiner)", "value": "a9d4007c9419a6e8d55805b8f8f52de0", "object_relation": "md5", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444712, "uuid": "0d3c89f0-c196-4841-84b7-a0b6d3de10ec", "comment": "Malware payload (CoinMiner)", "value": "5d9fe2735d4399d98e6e6a792b1feb26d6f2d9a5d77944ecacb4b4837e5e5fca", "object_relation": "sha256", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771444712, "uuid": "c781f6a6-9d04-465c-a470-2f4a8afff543", "value": "T13F563355F0405826F039107A34F988A2B07DFC724B7559CBB3A83E761E353E8267DA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771444712, "uuid": "bca4b16c-6f98-42bd-bb88-112b2a60eba8", "value": "91ae93ed3ff0d6f8a4f22d2edd30a58e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771444712, "uuid": "db2b8f45-e098-4396-aafd-d6b005df1ce3", "value": "98304:RLVSThOfTCiFBXmfFs+JMHpCVoR8oMEOJ6Ty3RvX+jb5jC3ajz4F4VRc:HBfTCiUswVSLOJgyBGv5jGQW4VR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771444712, "uuid": "8c10dbd9-38ad-47d0-9b7b-3d832a16b1f5", "value": 6271268, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771444712, "uuid": "6587d74f-2999-4676-889a-d0cf2f18fc47", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771372986, "uuid": "33a0e3d3-0c5d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://solidrock.stonecraft.coupons/build_ref", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771373483, "uuid": "5bbc549a-0c5e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.45.22:41356/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771374018, "uuid": "9ae33b6b-0c5f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.1.162:53031/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771374077, "uuid": "be0b4fb7-0c5f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.168.37.165:13069/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771374078, "uuid": "bedfa747-0c5f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.183.233:40607/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771374187, "uuid": "ff9b2a44-0c5f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://layerstone.stonecraft.coupons/layer_data", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771374316, "uuid": "4cb0f224-0c60-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.90.231.139:49394/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771374317, "uuid": "4cdce3c5-0c60-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.125.84:51352/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771374487, "uuid": "b297d995-0c60-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.146.60:52882/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771374737, "uuid": "47aed4f3-0c61-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.35.175:60239/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771375337, "uuid": "ad48d056-0c62-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.183.158:44539/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771376064, "uuid": "5e633ce0-0c64-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.125.84:51352/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771376119, "uuid": "7ef54749-0c64-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.186.206.45:44513/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771376347, "uuid": "06f10ed4-0c65-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://craftbase.stonecraft.coupons/shape_map", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771376422, "uuid": "33d33431-0c65-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.170.238:37915/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771376826, "uuid": "247a88d5-0c66-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://leafwalk.timberwalk.coupons/root_path", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771376956, "uuid": "721f4110-0c66-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.6.41:36745/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771377007, "uuid": "90bf5e3c-0c66-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://woodpath.timberwalk.coupons/tree_index", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771377246, "uuid": "1ec49be2-0c67-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://parkzone.timberwalk.coupons/area_scan", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771377486, "uuid": "ae10acc1-0c67-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://wildtimber.timberwalk.coupons/zone_info", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771377725, "uuid": "3cb13920-0c68-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://darkview.nightvision.coupons/lens_mod", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771378161, "uuid": "40706a1a-0c69-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.34.18:43480/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771378567, "uuid": "322c4fc7-0c6a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://opticscan.nightvision.coupons/opt_zoom", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771378763, "uuid": "a6e57d97-0c6a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.146.227:52454/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771378985, "uuid": "2b87305b-0c6b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://sightzoom.nightvision.coupons/heat_map", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771379169, "uuid": "992d4895-0c6b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://lookheat.nightvision.coupons/sight_ref", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771379185, "uuid": "a29d0af5-0c6b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.193.28:45881/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771379286, "uuid": "deaed87e-0c6b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://datastream.cloudtrace.coupons/bit_stream", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771379467, "uuid": "4a7b0f30-0c6c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://linkedge.cloudtrace.coupons/edge_node", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771379541, "uuid": "769b6be8-0c6c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.35.175:60239/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771379708, "uuid": "da4f9343-0c6c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.78/manji.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771379708, "uuid": "da526aa0-0c6c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.78/manji.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771380190, "uuid": "f9e8b101-0c6d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.232.190.137:40637/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771380247, "uuid": "1b87f60b-0c6e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.183.158:44539/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771380310, "uuid": "4153a4fb-0c6e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.187.108:44497/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771380382, "uuid": "6c09f87d-0c6e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.82.252:58458/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771380896, "uuid": "9eb46d11-0c6f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.173.109.25:59807/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771380912, "uuid": "a8308521-0c6f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.71.236:60855/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771380917, "uuid": "ab419cd2-0c6f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.193.28:45881/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771381037, "uuid": "f28b2263-0c6f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.34.18:43480/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771381150, "uuid": "361fb53c-0c70-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.156.151:60196/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771381211, "uuid": "5a6e7213-0c70-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.54.202:45505/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771381641, "uuid": "5a6ff5ad-0c71-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.15.241:47665/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771381936, "uuid": "0a213249-0c72-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.187.108:44497/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771381998, "uuid": "2f398518-0c72-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.25.162:37461/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771382180, "uuid": "9b8ebd09-0c72-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.173.109.25:59807/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771382527, "uuid": "6a7ebe7e-0c73-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://flowcloud.cloudtrace.coupons/cloud_part", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771382651, "uuid": "b4afa73c-0c73-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.30.2:55285/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771382888, "uuid": "41c31ccb-0c74-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.166.54:49208/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771383249, "uuid": "19183a96-0c75-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.15.241:47665/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771383318, "uuid": "424c11f5-0c75-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.202.115:34519/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771383555, "uuid": "cf4bf5a6-0c75-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.226.161.90:39669/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771383676, "uuid": "17358e28-0c76-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.226.161.90:39669/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771383676, "uuid": "1799332d-0c76-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.202.115:34519/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771384097, "uuid": "12291493-0c77-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.194.34.175:38507/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771384218, "uuid": "5ac79ec4-0c77-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.30.141:42302/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771384458, "uuid": "e95f25c9-0c77-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.91.252:42664/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771384518, "uuid": "0d72e882-0c78-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.30.127:40551/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771384997, "uuid": "2ab6ef15-0c79-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.54.202:45505/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771385241, "uuid": "bc022027-0c79-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.194.34.175:38507/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771385290, "uuid": "d93fd48e-0c79-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.244.125:57505/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771385774, "uuid": "f9eece3f-0c7a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.91.252:42664/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771385826, "uuid": "18f4be2d-0c7b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.156.151:60196/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771386136, "uuid": "d1ba668b-0c7b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.30.127:40551/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771386155, "uuid": "dd4cede5-0c7b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.217.59:36064/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771386555, "uuid": "cbc4664f-0c7c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.245.211:48528/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771386609, "uuid": "ebdac1fb-0c7c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.126.174:56633/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771387157, "uuid": "327e3245-0c7e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.229.233:50685/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771387216, "uuid": "5590bc87-0c7e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.126.174:56633/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771387328, "uuid": "9810e140-0c7e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://hostserver.cloudtrace.coupons/srv_link", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771387337, "uuid": "9d9dc705-0c7e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.244.125:57505/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771387576, "uuid": "2c45bfbd-0c7f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.217.59:36064/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771387698, "uuid": "74b391b6-0c7f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.245.211:48528/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771388955, "uuid": "61c069c4-0c82-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.86.83:45243/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771390147, "uuid": "2854aa0d-0c85-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://corepulse.metalheart.coupons/iron_pulse", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771390386, "uuid": "b6ebf756-0c85-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.222/hjedr7.sh", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771390455, "uuid": "e03aaf20-0c85-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.86.83:45243/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771391107, "uuid": "64e1db99-0c87-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://beatlead.metalheart.coupons/sync_lead", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771391177, "uuid": "8e8a9181-0c87-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.231.172:33058/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771391240, "uuid": "b3c731ea-0c87-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://187.111.182.138:52393/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771391657, "uuid": "accff091-0c88-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.191.219:46577/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771391767, "uuid": "edcecf1b-0c88-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://gearsync.metalheart.coupons/engine_val", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771392549, "uuid": "c02ea73e-0c8a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.249.211:51247/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771392792, "uuid": "50c27891-0c8b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.0.37:44876/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771392792, "uuid": "50e75fde-0c8b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.231.172:33058/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771392915, "uuid": "9a786d22-0c8b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.27.135:42097/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771393094, "uuid": "051b3bce-0c8c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.123.239:34297/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771393155, "uuid": "297c1c25-0c8c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.59.231.249:43815/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771393334, "uuid": "940848b4-0c8c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.229.127:38342/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771393817, "uuid": "b3cda30b-0c8d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.113.146.85:48453/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771393994, "uuid": "1d8d7982-0c8e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.112.163:45225/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771394466, "uuid": "36bfe4e4-0c8f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.0.37:44876/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771394466, "uuid": "36d2d04d-0c8f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.6.41:36745/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771394534, "uuid": "5f28adb5-0c8f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.87.13:55865/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771394588, "uuid": "7f8979ca-0c8f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://boltfix.metalheart.coupons/fix_point", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771394714, "uuid": "caf03c93-0c8f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.203.132.175:40489/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771394774, "uuid": "ee9a58d6-0c8f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.113.146.85:48453/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771394779, "uuid": "f15f5d37-0c8f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.229.127:38342/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771395135, "uuid": "c560391c-0c90-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.222/lc1iemw2cauv/assets/js/tggwswwlsn?token=xYKYDhUooF2pnmmgXU8KHJ9v1R2rWm60", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771395135, "uuid": "c5603ba6-0c90-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.222/lc1iemw2cauv/assets/js/hqg0yzh75j?token=xYKYDhUooF2pnmmgXU8KHJ9v1R2rWm60", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771395135, "uuid": "c560cf44-0c90-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.222/lc1iemw2cauv/assets/js/16oajvj3he?token=xYKYDhUooF2pnmmgXU8KHJ9v1R2rWm60", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771395135, "uuid": "c5629cab-0c90-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.222/lc1iemw2cauv/assets/js/u0oat5c6fv?token=xYKYDhUooF2pnmmgXU8KHJ9v1R2rWm60", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771395135, "uuid": "c5deb335-0c90-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.107.13:56936/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771395188, "uuid": "e51f3540-0c90-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/5926060486/Fd2QS8o.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771395191, "uuid": "e6cc6744-0c90-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.222/lc1iemw2cauv/assets/js/ukhjwy5c1m?token=xYKYDhUooF2pnmmgXU8KHJ9v1R2rWm60", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771395191, "uuid": "e6d88088-0c90-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.222/lc1iemw2cauv/assets/js/ppxk7evqps?token=xYKYDhUooF2pnmmgXU8KHJ9v1R2rWm60", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771395195, "uuid": "e984ca8d-0c90-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.222/lc1iemw2cauv/assets/js/ynpp34ar76?token=xYKYDhUooF2pnmmgXU8KHJ9v1R2rWm60", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771395195, "uuid": "e985122d-0c90-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.222/lc1iemw2cauv/assets/js/f4ffazq08p?token=xYKYDhUooF2pnmmgXU8KHJ9v1R2rWm60", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771395195, "uuid": "e98519b4-0c90-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.222/lc1iemw2cauv/assets/js/kohjg944dg?token=xYKYDhUooF2pnmmgXU8KHJ9v1R2rWm60", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771395195, "uuid": "e9852015-0c90-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.222/lc1iemw2cauv/assets/js/in3u34vnad?token=xYKYDhUooF2pnmmgXU8KHJ9v1R2rWm60", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771395373, "uuid": "53608e0e-0c91-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.59.231.249:43815/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771396094, "uuid": "00f24557-0c93-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.87.13:55865/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771396094, "uuid": "013e37b7-0c93-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.112.163:45225/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771396095, "uuid": "01c4dc60-0c93-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.91.138.209:36980/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771396095, "uuid": "01d3549b-0c93-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.185.91.149:51578/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771396335, "uuid": "90a8dfb6-0c93-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.237.134:36780/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771396509, "uuid": "f8da8a0e-0c93-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.236/bins/kworkerd0", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771396510, "uuid": "f90a8718-0c93-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.5.60:42891/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771396630, "uuid": "40bff2d4-0c94-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.12.51:42939/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771396806, "uuid": "a9a75770-0c94-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://wavetide.oceansync.coupons/tide_level", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771397046, "uuid": "389a402f-0c95-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://deepblue.oceansync.coupons/bottom_ref", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771397235, "uuid": "a95cace1-0c95-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.139.81:44264/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771397473, "uuid": "37470e58-0c96-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.237.134:36780/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771398374, "uuid": "503e2316-0c98-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.12.51:42939/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771399000, "uuid": "c5111dcf-0c99-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.140.164:36567/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771399027, "uuid": "d529df5d-0c99-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://watersalt.oceansync.coupons/water_stat", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771399212, "uuid": "43e271bc-0c9a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.28.239:56953/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771399387, "uuid": "abba7d76-0c9a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://saltcalc.oceansync.coupons/salt_calc", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771399816, "uuid": "abe68286-0c9b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.171.8:34960/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771399867, "uuid": "ca4a605d-0c9b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.245.95.24/UBdPEyvBqIUg120.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771399867, "uuid": "ca4ba305-0c9b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.245.95.24/KxtdPJAAmsILU239.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771399867, "uuid": "ca4f8646-0c9b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.245.95.24/YjzlRxuFDRJHXsu241.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771399867, "uuid": "ca5d8753-0c9b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.245.95.24/ZERwpMzwJGXc189.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771399882, "uuid": "d2de7fd8-0c9b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.171.8:34960/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400059, "uuid": "3c69195d-0c9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.4.44:42657/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400120, "uuid": "61108c11-0c9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.173.172:51987/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400120, "uuid": "61180e23-0c9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.147.194:55484/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400166, "uuid": "7c504088-0c9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.92.51.20/package.rar", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400166, "uuid": "7c7e81e5-0c9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.92.51.20/2222.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400166, "uuid": "7c95c043-0c9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.182.81.38/", "Tag": [ { "name": "kairos", "colour": "#48b80b", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#9e80d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400167, "uuid": "7cbc41b5-0c9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.92.51.20/D3D11InstallHelper.dll", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400167, "uuid": "7cbdae5d-0c9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.92.51.20/ceshi.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400168, "uuid": "7d363fb9-0c9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://168.222.251.98:1283/bins/$(uname", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400168, "uuid": "7d507380-0c9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.92.51.20/2.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400168, "uuid": "7d52f0ce-0c9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.92.51.20/dddd.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400168, "uuid": "7d838242-0c9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-8dc73645e8a9477fa0fad237f3a9c54f.r2.dev/LogMeInResolve_Unattended.msi", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400168, "uuid": "7d85d6dd-0c9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.92.51.20/installer.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400168, "uuid": "7d91f157-0c9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://allcheat.netlify.app/grExecute.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400168, "uuid": "7d920989-0c9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://xenodeus.ws/%D0%92%D0%BE%D0%BEtst%D0%B0%D1%80%D1%80%D0%B5%D0%B3Ul.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: ryos", "colour": "#51c7ee", "exportable": true, "hide_tag": false }, { "name": "pw-ryos", "colour": "#201b00", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400168, "uuid": "7d9e74cb-0c9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://148.113.3.160/bins.sh", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400170, "uuid": "7ea97927-0c9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.181/cat.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400170, "uuid": "7ed713d4-0c9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-21135cb8269d409caad098c2e96eaa7f.r2.dev/trqd_81.vbs", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400170, "uuid": "7ee5036c-0c9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://vereasw.ydns.eu/CH3.exe", "Tag": [ { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400171, "uuid": "7f61e461-0c9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://friendly.ydns.eu/CH3.exe", "Tag": [ { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400171, "uuid": "7f760bb0-0c9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.158.76/XClient.exe", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400171, "uuid": "7f795afe-0c9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://friendly.ydns.eu/CH2.exe", "Tag": [ { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400172, "uuid": "7fa2f075-0c9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://shadowbot-dih.pages.dev/Shadow-Bot-v11.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400173, "uuid": "802c705b-0c9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://vereasw.ydns.eu/CH2.exe", "Tag": [ { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400174, "uuid": "812622c4-0c9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://friendly.ydns.eu/CH1.exe", "Tag": [ { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400175, "uuid": "81720055-0c9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://vereasw.ydns.eu/CH1.exe", "Tag": [ { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400175, "uuid": "81c4d4a3-0c9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://kolidbox.lol/downloads", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: bluys", "colour": "#d0fede", "exportable": true, "hide_tag": false }, { "name": "pw-bluys", "colour": "#5a7771", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400175, "uuid": "81dc404c-0c9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://meploits.com/Velost%D0%B0%D1%80%D1%80%D0%B5%D0%B3%20v1.0.3.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "password: 2026", "colour": "#a65f14", "exportable": true, "hide_tag": false }, { "name": "pw-2026", "colour": "#4d3d79", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400176, "uuid": "820a62f7-0c9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://shadowbot-dih.pages.dev/ghost.bot.apk.v13.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400184, "uuid": "86c5da23-0c9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.85.24.46:84/cat.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400189, "uuid": "8a14efa3-0c9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.64.211:38016/Mozi.m", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400193, "uuid": "8c5e81df-0c9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.176.37.51:8089/logo.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400195, "uuid": "8dc1ddba-0c9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://lunde.technok.sbs/LunX.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: lunex", "colour": "#cb4cba", "exportable": true, "hide_tag": false }, { "name": "pw-lunex", "colour": "#A9A8CD", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400195, "uuid": "8dd24527-0c9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://lux.technick.sbs/LunX.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: lunex", "colour": "#cb4cba", "exportable": true, "hide_tag": false }, { "name": "pw-lunex", "colour": "#A9A8CD", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400196, "uuid": "8e3b74cb-0c9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.176.37.51:8089/shellcode.bin", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400197, "uuid": "8e7ef4a0-0c9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.176.37.51:8089/online.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400212, "uuid": "97976ca2-0c9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://lunar.technok.sbs/LunX.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: lunex", "colour": "#cb4cba", "exportable": true, "hide_tag": false }, { "name": "pw-lunex", "colour": "#A9A8CD", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400220, "uuid": "9ca7789a-0c9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://cyxre.technok.sbs/Cyrex.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: cyrex", "colour": "#c7fa8e", "exportable": true, "hide_tag": false }, { "name": "pw-cyrex", "colour": "#d542d1", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400230, "uuid": "a287376e-0c9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.176.37.51:8089/beacon.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400280, "uuid": "c01aedd5-0c9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://cyxer.technok.sbs/Cyrex.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: cyrex", "colour": "#c7fa8e", "exportable": true, "hide_tag": false }, { "name": "pw-cyrex", "colour": "#d542d1", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400280, "uuid": "c05c0d73-0c9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://cyx.technick.sbs/Cyrex.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: cyrex", "colour": "#c7fa8e", "exportable": true, "hide_tag": false }, { "name": "pw-cyrex", "colour": "#d542d1", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400286, "uuid": "c39bd205-0c9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://148.113.3.160/1.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400297, "uuid": "ca6a9f79-0c9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.104.99:53495/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400527, "uuid": "535ae0ab-0c9d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.152/dealer/yunewfile.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400586, "uuid": "76d184d8-0c9d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.152/dealer/gftrlls.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400586, "uuid": "76d1d51f-0c9d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.152/dealer/ebukaxworm.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400586, "uuid": "76d25aec-0c9d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.152/dealer/oilandgasxwormugo.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400587, "uuid": "76f54da2-0c9d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.152/dealer/ugooilnewsnake.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400598, "uuid": "7de99d0d-0c9d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.4.44:42657/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400646, "uuid": "9aa9525e-0c9d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://citypulse.urbanpulse.coupons/street_id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400710, "uuid": "c047db64-0c9d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.210.186.236/img/234878e8ew7r87qe8r7q8ewr8w7r8wer8we7r8w.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400827, "uuid": "063c0d9e-0c9e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.197:5124/3/jAbFora.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400829, "uuid": "074e9ea7-0c9e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.197:5124/3/ENCRYPTED%20(4).ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400890, "uuid": "2ba42401-0c9e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://au72nuxzv2.ufs.sh/f/4LhV5B1sDCwIjNcNG07VdvsCnBHP7OxqIceR2zSU4AgaG8VY", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771400895, "uuid": "2e9d47ae-0c9e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.171.129:59968/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401010, "uuid": "733d9737-0c9e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1xVicheWoGl_UUTS5LueqbgAJWY9b1UPV", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401068, "uuid": "95ea7cf1-0c9e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1cpMIZh-qx2sy8VpULc7j80KujdDVkjvz", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401128, "uuid": "b9839bc3-0c9e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.83.39.185/file/fros/ENCRYPTED.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401141, "uuid": "c18edf50-0c9e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.53.65:55557/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401187, "uuid": "dc9173e7-0c9e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://96.44.159.143/201/88sf78f78f38287s7f7d887fg8d8g87g87d8fg8dfg78dfdg7878.hta", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401187, "uuid": "dcb6cb7c-0c9e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.83.39.185/file/samy/ENCRYPTED.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401187, "uuid": "dcb6cc60-0c9e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.83.39.185/file/omo/ENCRYPTED.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401188, "uuid": "dd54555d-0c9e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.83.39.185/file/suces/ENCRYPTED.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401610, "uuid": "d8f9eead-0c9f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/5926060486/28tzRfP.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401625, "uuid": "e20e5d82-0c9f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.90.190:50179/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401737, "uuid": "24ae3bae-0ca0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.27.135:42097/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401846, "uuid": "6573677f-0ca0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://148.113.3.160/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401846, "uuid": "65ec465c-0ca0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.181/iran.aarch64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401847, "uuid": "664750e8-0ca0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://148.113.3.160/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401852, "uuid": "697b61aa-0ca0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://148.113.3.160/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401852, "uuid": "697bcb80-0ca0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://148.113.3.160/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401853, "uuid": "69c4b9a8-0ca0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://148.113.3.160/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401853, "uuid": "69e82a71-0ca0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://148.113.3.160/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401853, "uuid": "69e8d63d-0ca0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.181/iran.armv6l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401853, "uuid": "69e8e5ed-0ca0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.181/iran.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401853, "uuid": "69ea1b60-0ca0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.181/iran.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401853, "uuid": "6a0f51ce-0ca0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://148.113.3.160/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401853, "uuid": "6a1124e0-0ca0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://148.113.3.160/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401854, "uuid": "6a7d1930-0ca0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://148.113.3.160/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401854, "uuid": "6a931431-0ca0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.181/iran.sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401854, "uuid": "6a9316f5-0ca0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.181/iran.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401854, "uuid": "6a9496ba-0ca0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://148.113.3.160/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401855, "uuid": "6b35f6fd-0ca0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://148.113.3.160/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401855, "uuid": "6b36b520-0ca0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://148.113.3.160/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401855, "uuid": "6b3af9fc-0ca0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://148.113.3.160/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.i468", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401855, "uuid": "6b438647-0ca0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.116.52.126/arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401857, "uuid": "6c257a0d-0ca0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.181/iran.armv4l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401857, "uuid": "6c3322a1-0ca0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.181/iran.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401857, "uuid": "6c38e053-0ca0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.181/iran.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401857, "uuid": "6c3a96ac-0ca0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.181/iran.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401857, "uuid": "6c3d443b-0ca0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.181/iran.armv5l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401857, "uuid": "6c422114-0ca0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.181/iran.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401857, "uuid": "6c422dfa-0ca0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.181/iran.powerpc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401857, "uuid": "6c4afd6f-0ca0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.181/iran.armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401857, "uuid": "6c4fd586-0ca0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://148.113.3.160/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401857, "uuid": "6c505621-0ca0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://148.113.3.160/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401864, "uuid": "70705d2d-0ca0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.188.66.82/i486.armageddon", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401909, "uuid": "8b63b645-0ca0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://files.catbox.moe/c7xnkt.ps1", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401915, "uuid": "8ed35ecf-0ca0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.104.99:53495/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771401978, "uuid": "b489ad02-0ca0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.190.83:60303/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771402152, "uuid": "1c1853ad-0ca1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.146.60:52882/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771402822, "uuid": "aba8ace9-0ca2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.171.129:59968/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771403177, "uuid": "7ebf4f83-0ca3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.90.190:50179/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771403234, "uuid": "a11d4969-0ca3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.44.15:48823/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771403235, "uuid": "a1588e64-0ca3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.30.247:60113/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771403589, "uuid": "74705ac4-0ca4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.13.12:50879/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771403837, "uuid": "082cfdcb-0ca5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.248.106:36245/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771403889, "uuid": "274f30ec-0ca5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.13.12:50879/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771404374, "uuid": "48b5be83-0ca6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.203.196:37104/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771404912, "uuid": "8902bcc2-0ca7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/5411854720/jJ7xJzX.exe", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771404977, "uuid": "afe8cb10-0ca7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.172.65:33619/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771405027, "uuid": "cd710d03-0ca7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://liveroad.urbanpulse.coupons/event_log", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771405097, "uuid": "f79fc1c6-0ca7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.30.247:60113/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771405152, "uuid": "184e1f8d-0ca8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.163.134.250:39756/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771405507, "uuid": "ec11accd-0ca8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://traffichub.urbanpulse.coupons/traffic_v", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771406227, "uuid": "98be9e9d-0caa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://se9bavje.lament42leave.digital/?=check&&actmn=SCKWYRZAsEDkcajZ", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771406587, "uuid": "6f5661bb-0cab-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://mainstreet.urbanpulse.coupons/hub_core", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771406709, "uuid": "b85ae994-0cab-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.3.101.19/31/sd878f23823878428348fd8g8g8384838f3453dfg.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771406720, "uuid": "bebda27a-0cab-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.26.62:38730/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771406835, "uuid": "0378b230-0cac-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.163.134.250:39756/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771406892, "uuid": "251a8669-0cac-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.7.217:52268/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771407079, "uuid": "94ae3c90-0cac-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.26.62:38730/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771407158, "uuid": "c3943cd4-0cac-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.55.221:44839/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771407372, "uuid": "43b49587-0cad-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.140.128.14:54682/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771407549, "uuid": "ad2bc019-0cad-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://beamglow.lightstream.coupons/ray_trace", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771407608, "uuid": "d00f19f0-0cad-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://minel-lights.rs/arquivo_20260217223017.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771407610, "uuid": "d1651e2a-0cad-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://minel-lights.rs/arquivo_20260217222345.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771407667, "uuid": "f2faff53-0cad-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://minel-lights.rs/arquivo_20260217224158.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771407667, "uuid": "f32f83ea-0cad-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://minel-lights.rs/arquivo_20260217222806.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771407667, "uuid": "f364ff5b-0cad-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.197:5124/3/ENCRYPTED%20(5).ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771407669, "uuid": "f48e2e1b-0cad-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://minel-lights.rs/arquivo_20260217224211.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771407967, "uuid": "a62164cd-0cae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://minel-lights.rs/arquivo_20260218132454.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771407969, "uuid": "a736758a-0cae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://minel-lights.rs/arquivo_20260218132428.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771408030, "uuid": "cbe69102-0cae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.techlearnskill.com/hhhh/ENCRYPTED.ps1", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771408273, "uuid": "5c7d4f9d-0caf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://x7p9a.plum7ship.coupons/kmgzmvkk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771408341, "uuid": "84b50e18-0caf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.135.134.101:57725/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771408400, "uuid": "a7e7823d-0caf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://kavacanada.ca/5a9e6e0a.msi", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771408625, "uuid": "2e3b2cb2-0cb0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://mistralkorea.ru/wp-includes/pomo/entry.html", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771408625, "uuid": "2e60bc0a-0cb0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://mistralkorea.ru/wp-includes/post-template.html", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771408627, "uuid": "2f41eae4-0cb0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://mistralkorea.ru/wp-includes/widgets/class-wp-widget-index.html", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771408637, "uuid": "3553d187-0cb0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.7.217:52268/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771408746, "uuid": "7676ebe8-0cb0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://harbor.plum7ship.coupons/3lj38", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771408755, "uuid": "7b7e917b-0cb0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.190.210:40184/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771408755, "uuid": "7b9f24da-0cb0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.55.221:44839/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771408995, "uuid": "0a81c434-0cb1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.190.210:40184/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771409125, "uuid": "583819e4-0cb1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.116.248.47:36359/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771409167, "uuid": "7173e843-0cb1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.83.39.134/IK/ENCRYPTED.ps1", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771409168, "uuid": "71db8de1-0cb1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://edive.ao/ConvertedFile.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771409227, "uuid": "94f440f6-0cb1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.mediafire.com/file/ok5lcd9ryokv3xf/Calamities.hhp/file", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771409227, "uuid": "95144c2f-0cb1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.mediafire.com/file/q8lzmfr874n84uf/BfRubSibubVjdYw189.bin/file", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771409345, "uuid": "db9c376b-0cb1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://p1urn-vvake.plum7ship.coupons/636srl", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771409347, "uuid": "dca98bfa-0cb1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.mediafire.com/file/h5m6m915zym7g06/OuQUcgnTv13.bin/file", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771409347, "uuid": "dcb94d45-0cb1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.mediafire.com/file/5c5s08otpd5clvf/Berettigelsen.mix/file", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771409588, "uuid": "6bf9ac86-0cb2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://xingyleather.com/2026/ENCRYPT.Ps1", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771409767, "uuid": "d71eddbf-0cb2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://ugurhuseyn.az/arquivo_20260217083700.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771409828, "uuid": "fb39c570-0cb2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.98.156/web/dededeww.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771409888, "uuid": "1f120250-0cb3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.98.156/web/rIogmmm.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771409888, "uuid": "1f2c8c8a-0cb3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.98.156/web/covertilojjdufhhf.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771409888, "uuid": "1f3a8c05-0cb3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.98.156/web/urutu884884urr.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771409889, "uuid": "1f80e1a3-0cb3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.98.156/web/deecddcdcddf.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771409947, "uuid": "4263a97b-0cb3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.98.156/web/dededdedrrr.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771409947, "uuid": "4263d4b2-0cb3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.98.156/web/condehdgshgdhfg.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771409957, "uuid": "484a8397-0cb3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.135.134.101:57725/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771410129, "uuid": "aeb3a4be-0cb3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://q4m8v.ship5plum.coupons/75bq1", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771410137, "uuid": "b39089b3-0cb3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.53.202:42690/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771410306, "uuid": "184d2237-0cb4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://capdoom.blogspot.com/chutiyap.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771410307, "uuid": "18835bd7-0cb4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://capdoom.blogspot.com/atom.xml", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771410364, "uuid": "3b03f8d1-0cb4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://09c1d5c3-1a6e-4c05-8e4e-eff75c6b5dd6.usrfiles.com/ugd/09c1d5_0e8bd5763daa42aeb6dd1bc4d0710c3d.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771410366, "uuid": "3bbd8723-0cb4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://09c1d5c3-1a6e-4c05-8e4e-eff75c6b5dd6.usrfiles.com/ugd/09c1d5_3c66c99bfa874862a426b1f5c775632c.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771410498, "uuid": "8a9c79a1-0cb4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.243.62:40479/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771410559, "uuid": "aec923aa-0cb4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.116.248.47:36359/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771410607, "uuid": "cbe57561-0cb4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://manifest.ship5plum.coupons/9blovvqz6", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771410617, "uuid": "d17597b8-0cb4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.209.182.219:44109/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771410678, "uuid": "f5b30bb8-0cb4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.209.182.219:44109/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771410982, "uuid": "ab479fe4-0cb5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.8.188:38853/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771411147, "uuid": "0d41d546-0cb6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://sh1p-rnix.ship5plum.coupons/fmuthxwya", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771411326, "uuid": "786291eb-0cb6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.245.95.24/XImall109.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771411339, "uuid": "7fc3d998-0cb6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.54.221.234:55031/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771411339, "uuid": "7fef198e-0cb6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.85.69.255:56777/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771411340, "uuid": "8044869c-0cb6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://43.249.54.246:17771/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771411340, "uuid": "80a266ec-0cb6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.193.243.84:54448/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771411340, "uuid": "80bceafd-0cb6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.173.157.244:57204/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771411340, "uuid": "80bf58dc-0cb6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.120.203.230:49452/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771411340, "uuid": "80c40db9-0cb6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.6.81.239:26635/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771411341, "uuid": "80d386f4-0cb6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.28.107.131:47342/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771411341, "uuid": "811c8927-0cb6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://186.121.214.218:64941/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771411342, "uuid": "81b8947c-0cb6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.112.40.154:9428/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771411346, "uuid": "83d827ee-0cb6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.33.136.49:22538/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771411346, "uuid": "83f28f11-0cb6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://186.26.65.120:53239/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771411348, "uuid": "853a1e6a-0cb6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.118.103.42:26816/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771411350, "uuid": "868cc6c5-0cb6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.64.227.134:63289/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771411398, "uuid": "a3323594-0cb6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.124.61.98:50357/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771411401, "uuid": "a4cf0170-0cb6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.81.76.214:52638/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771411447, "uuid": "c018e767-0cb6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.26.104:39106/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771412048, "uuid": "264a128e-0cb8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.53.202:42690/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771412356, "uuid": "dde63ba0-0cb8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.28.148:37281/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771412472, "uuid": "2362b3b1-0cb9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.142.179:54382/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771412598, "uuid": "6e89f828-0cb9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.192.243:39005/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771412715, "uuid": "b3cffcf7-0cb9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.163:51174/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771412776, "uuid": "d8256bca-0cb9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.200.13.91:38927/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771412885, "uuid": "19b18b8c-0cba-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://t6k2n.disapp43squithes.coupons/n1tq8w", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771413621, "uuid": "cfff0797-0cbb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.28.148:37281/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771413621, "uuid": "d03b6207-0cbb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.34.109.121:53294/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771413909, "uuid": "7b90e473-0cbc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://archive.disapp43squithes.coupons/z5lcz30", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771413967, "uuid": "9e72682d-0cbc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.243.62:40479/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771414398, "uuid": "9f10955a-0cbd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.192.243:39005/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771414510, "uuid": "e234ec61-0cbd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.163:51174/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771414697, "uuid": "51bc57e9-0cbe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.26.104:39106/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771414870, "uuid": "b87a0842-0cbe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://d1sapp-vvire.disapp43squithes.coupons/yskkou", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771414987, "uuid": "fe3ae763-0cbe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-2b8eae5fab34490c95c0102d66e16b5d.r2.dev/INVITATIONCARD.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771414987, "uuid": "fe55a680-0cbe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.18.137:46066/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771414987, "uuid": "fe6eca34-0cbe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.75.86:52139/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771415648, "uuid": "88640ec3-0cc0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.18.137:46066/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771415776, "uuid": "d44ea4c0-0cc0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.75.86:52139/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771415776, "uuid": "d454d59d-0cc0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.228.29:49156/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771415958, "uuid": "411ebd39-0cc1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.131.107:59763/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771416127, "uuid": "a5dfbd31-0cc1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.83.228:52613/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771416196, "uuid": "ceb6da66-0cc1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.44.250:44845/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771416312, "uuid": "13f6a567-0cc2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.44.250:44845/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771416378, "uuid": "3bb0c10b-0cc2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.222.77.251:32872/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771416499, "uuid": "8342555b-0cc2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.111.110:44874/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771416848, "uuid": "5348c7b6-0cc3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://m9r3p.mint4pack.coupons/hwgbd", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771416857, "uuid": "58bf4fc3-0cc3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.191.219:46577/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771416974, "uuid": "9ebc8b9b-0cc3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.228.29:49156/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771417026, "uuid": "bd919806-0cc3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://crate.mint4pack.coupons/onpgh", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771417096, "uuid": "e7794a1a-0cc3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.111.110:44874/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771417269, "uuid": "4e743ae1-0cc4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://rn1nt-llow.mint4pack.coupons/4024bg6", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771417447, "uuid": "b87d8053-0cc4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://z3n7a.blueg78rework.coupons/qdimmge", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771417626, "uuid": "235e235d-0cc5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://atelier.blueg78rework.coupons/pgy76l5e", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771417821, "uuid": "97b58d82-0cc5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.90.36:57316/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771417926, "uuid": "d6303299-0cc5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://b1ueg-vveld.blueg78rework.coupons/xxlgr", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771417936, "uuid": "dbeed7d2-0cc5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.222.77.251:32872/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771418119, "uuid": "492701f7-0cc6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.173.145:35312/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771418308, "uuid": "b9ca9f54-0cc6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.71.224:41408/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771418785, "uuid": "d5ca3954-0cc7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.157.130:59377/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771419008, "uuid": "5ad9b72f-0cc8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://c9t5q.pack8mint.coupons/fyjkil3", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771419067, "uuid": "7e7505c6-0cc8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://en2k1164.dictationlow.digital/?=check&&actmn=uOKRETpvjoERCzWl", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771419431, "uuid": "57632754-0cc9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.90.36:57316/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771419559, "uuid": "a3ab911c-0cc9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.157.130:59377/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771419685, "uuid": "eebf525e-0cc9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.149.35/x86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771419687, "uuid": "ef8402d7-0cc9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.208.145:45313/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771419740, "uuid": "0f9b23fd-0cca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.83.228:52613/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771419863, "uuid": "58d431ae-0cca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.85.30:45913/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771420026, "uuid": "b98c974b-0cca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://warehouse.pack8mint.coupons/3z1k2428w", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771420507, "uuid": "d85675c7-0ccb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://p4ck-rnate.pack8mint.coupons/eont8", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771420524, "uuid": "e2889d76-0ccb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.71.224:41408/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771420524, "uuid": "e2a00016-0ccb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.109.118:43705/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771420581, "uuid": "04c07602-0ccc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.78/manji.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771420640, "uuid": "27910f00-0ccc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.201.156.175:54709/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771420926, "uuid": "d228a206-0ccc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://p8x1m.pear6box.coupons/ts7rtlrrk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771421049, "uuid": "1bd0cfb0-0ccd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.186.110:53673/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771421166, "uuid": "616955ae-0ccd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://container.pear6box.coupons/cqpfysil", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771421358, "uuid": "d3a840b8-0ccd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.186.110:53673/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771421526, "uuid": "37e1f579-0cce-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://p3ar-llnk.pear6box.coupons/0v51l", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771421541, "uuid": "40eb9f62-0cce-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.208.145:45313/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771421887, "uuid": "0ebffea2-0ccf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://r2k6d.military423pudd.coupons/mj0oj9ac0", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771422018, "uuid": "5cf13e68-0ccf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.109.118:43705/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771422076, "uuid": "7f81cd21-0ccf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.201.156.175:54709/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771422131, "uuid": "a07a38f8-0ccf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.132.23:47691/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771422372, "uuid": "2fd3a48f-0cd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.161.127:36473/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771423031, "uuid": "b8e697fa-0cd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://outpost.military423pudd.coupons/5d0t6", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771423148, "uuid": "fe5bca9e-0cd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://197.203.226.116:50738/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771423156, "uuid": "0367f358-0cd2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.161.127:36473/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771423282, "uuid": "4e6dfab2-0cd2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.45.247:56222/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771423510, "uuid": "d63be415-0cd2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.12.68:41586/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771423510, "uuid": "d6b10b75-0cd2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.167.4.51:58849/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771424122, "uuid": "42e592ca-0cd4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.17.254:36468/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771424665, "uuid": "86f4b8bb-0cd5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.45.247:56222/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771424771, "uuid": "c6212579-0cd5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.111.215:33500/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771424959, "uuid": "362ea2a0-0cd6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.111.215:33500/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771425076, "uuid": "7c01ddb5-0cd6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.239.111:39892/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771425186, "uuid": "bd3a4629-0cd6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://rn1l1t-vvex.military423pudd.coupons/higzjz", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771425190, "uuid": "bfd6dc6e-0cd6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.12.68:41586/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771425430, "uuid": "4ee3a7c2-0cd7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://a5v9n.box3pear.coupons/tn27w4lmo", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771426155, "uuid": "fed100fd-0cd8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.33.232:40160/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771426386, "uuid": "88e6a779-0cd9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://consign.box3pear.coupons/ic4xue8oi", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771426576, "uuid": "f9b9f21f-0cd9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.65.9:49550/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771426629, "uuid": "19b2a62c-0cda-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.53.163:36300/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771426821, "uuid": "8bbbfdaa-0cda-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.33.232:40160/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771426990, "uuid": "f0b2bd72-0cda-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.54.26:48180/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771427047, "uuid": "126f5ed5-0cdb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://b0x-rnark.box3pear.coupons/7i31w93b7", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771427417, "uuid": "ef11d888-0cdb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.239.111:39892/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771427897, "uuid": "0d59f196-0cdd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.109.127:42347/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771427897, "uuid": "0d698996-0cdd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.252.27:33775/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771428310, "uuid": "034635c8-0cde-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://cargoflow.fig2ship.coupons/shipment_id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771428501, "uuid": "752d7329-0cde-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.99.55:55596/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771428557, "uuid": "9668caf8-0cde-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.113.65:50013/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771428620, "uuid": "bc3295bf-0cde-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.254.10.212:44467/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771428673, "uuid": "dbf6ee14-0cde-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.183.213:45449/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771428727, "uuid": "fbf7daf4-0cde-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://oceanroute.fig2ship.coupons/vessel_log", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771428919, "uuid": "6e6fccfa-0cdf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.83.213:56683/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771428919, "uuid": "6e70238d-0cdf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.83.213:56683/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771428966, "uuid": "8a410e88-0cdf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://portentry.fig2ship.coupons/dock_data", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771429091, "uuid": "d522fb8a-0cdf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.252.27:33775/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771429092, "uuid": "d5b54bd4-0cdf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.87.210:60087/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771429146, "uuid": "f5de08e6-0cdf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://marinenode.fig2ship.coupons/nav_report", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771429219, "uuid": "2156d967-0ce0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.15.87:35648/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771429627, "uuid": "1431a8f3-0ce1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://speedtrack.ship9fig.coupons/7i31w93b7", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771429758, "uuid": "6278a8bd-0ce1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.67.143:49100/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771429986, "uuid": "ea908b20-0ce1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://globalpath.ship9fig.coupons/route_map", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771430054, "uuid": "12f5adc1-0ce2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.109.127:42347/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771430286, "uuid": "9d16cf2e-0ce2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://sendpoint.ship9fig.coupons/item_stat", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771430417, "uuid": "eb829474-0ce2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.113.65:50013/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771430475, "uuid": "0e1898cf-0ce3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.67.143:49100/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771430535, "uuid": "3158ea4a-0ce3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.170:32963/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771430535, "uuid": "315af9f7-0ce3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.54.26:48180/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771430648, "uuid": "74f26611-0ce3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://hubtransit.ship9fig.coupons/cargo_list", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771430718, "uuid": "9eb4fa82-0ce3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.27.235:53783/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771430770, "uuid": "bdb3a3b9-0ce3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.153.148:39843/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771430771, "uuid": "be7c8089-0ce3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.192.69:49760/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771430946, "uuid": "26a177c6-0ce4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://greenstore.kiwi5pack.coupons/stock_list", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431076, "uuid": "745d7b30-0ce4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.76.152:39588/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431197, "uuid": "bc1303dd-0ce4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.92.76.184:36571/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431368, "uuid": "2221f37c-0ce5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.47/v3441.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431435, "uuid": "4a3bc75b-0ce5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.55.40:49048/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431726, "uuid": "f743374c-0ce5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://freshpack.kiwi5pack.coupons/temp_log", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431858, "uuid": "45ef1e8b-0ce6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.89.170.85/bins/kwari.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431858, "uuid": "45f8327d-0ce6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.89.170.85/bins/kwari.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431858, "uuid": "45f84314-0ce6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.89.170.85/bins/kwari.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431858, "uuid": "45f84c99-0ce6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.89.170.85/bins/kwari.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431858, "uuid": "45f85680-0ce6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.89.170.85/bins/kwari.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431858, "uuid": "45f86043-0ce6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.89.170.85/bins/kwari.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431858, "uuid": "45f860bf-0ce6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.89.170.85/bins/kwari.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431858, "uuid": "45f88443-0ce6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.89.170.85/bins/kwari.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431858, "uuid": "45f884b9-0ce6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.89.170.85/bins/kwari.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431858, "uuid": "45f88a7e-0ce6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.89.170.85/bins/kwari.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431858, "uuid": "45f88b09-0ce6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.89.170.85/bins/kwari.mips64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431858, "uuid": "45f88bd0-0ce6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.89.170.85/bins/kwari.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431858, "uuid": "45f88be0-0ce6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.89.170.85/bins/kwari.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431858, "uuid": "45f88ed3-0ce6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.89.170.85/bins/kwari.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431858, "uuid": "45f8aab2-0ce6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.89.170.85/bins/kwari.sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431862, "uuid": "4853ff63-0ce6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.85.24.46:84/iran.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431862, "uuid": "48546e77-0ce6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.85.24.46:84/iran.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431862, "uuid": "48628d6e-0ce6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.85.24.46:84/iran.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431862, "uuid": "4862d5a2-0ce6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.85.24.46:84/iran.armv4l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431862, "uuid": "4863d2cf-0ce6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.85.24.46:84/iran.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431862, "uuid": "48640ddd-0ce6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.85.24.46:84/iran.armv6l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431862, "uuid": "48641166-0ce6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.85.24.46:84/iran.powerpc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431862, "uuid": "486416e9-0ce6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.85.24.46:84/iran.armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431862, "uuid": "48641850-0ce6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.85.24.46:84/iran.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431862, "uuid": "48641894-0ce6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.85.24.46:84/iran.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431862, "uuid": "486419cc-0ce6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.85.24.46:84/iran.armv5l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431862, "uuid": "48641ae7-0ce6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.85.24.46:84/iran.aarch64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431862, "uuid": "48641ba7-0ce6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.85.24.46:84/iran.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771431913, "uuid": "673b4af9-0ce6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.85.24.46:84/iran.sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771432096, "uuid": "d4243321-0ce6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.27.235:53783/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771432156, "uuid": "f7bfe9e0-0ce6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.76.152:39588/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771432218, "uuid": "1cba38a2-0ce7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.192.69:49760/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771432237, "uuid": "27d763d1-0ce7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.22.179:51871/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771432342, "uuid": "66d8fdbd-0ce7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.75.205.46:55993/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771432396, "uuid": "8693d199-0ce7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.92.76.184:36571/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771432397, "uuid": "8777161d-0ce7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.153.148:39843/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771432458, "uuid": "ab889cf2-0ce7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.75.205.46:55993/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771432571, "uuid": "ef4a67b8-0ce7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://babymafessoni.merseine.com/014br/9578069-26.2025.6.24.590358681114-48.2025.1.00.8975/installer2.zip", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771432626, "uuid": "0ff86d2c-0ce8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://kiwinode.kiwi5pack.coupons/batch_id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771432686, "uuid": "33d87f03-0ce8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://allcheat.netlify.app/bExecute.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771432687, "uuid": "344c5369-0ce8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://viewmyparty.com/Windows/PartyCardViewer.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771432687, "uuid": "34524087-0ce8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.usercontent.google.com/download?id=1OK4Y8-r0cVg-FUEABfTmEVCx840QysdU&export=download", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771432689, "uuid": "354a5113-0ce8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-89f330ac508f4d138c9dff7c99d7fbe7.r2.dev/Docx_rqs_02.vbs", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771432689, "uuid": "355a947f-0ce8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-a3013919434641e5a5268667ed5667e0.r2.dev/Docx_rws_02.vbs", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771432689, "uuid": "3574ea99-0ce8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://tkistok-palaymarkes.sbs/TikTok18.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771432693, "uuid": "37afbf0f-0ce8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://ia802801.us.archive.org/view_archive.php?archive=/35/items/201004011329/201004011329.iso&file=Activation%20%26%20Serial%20For%20Windows%20Xp%2FRockXP4.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771432693, "uuid": "37cab0a7-0ce8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://tcp.newyworlds.com/app_all/Tcpatel-tcpatee-release-1.7.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771432696, "uuid": "39b3df60-0ce8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://lunet.technick.sbs/LunX.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: lunex", "colour": "#cb4cba", "exportable": true, "hide_tag": false }, { "name": "pw-lunex", "colour": "#A9A8CD", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771432696, "uuid": "39d7681b-0ce8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://lankystocks.com/Zoom/Windows/download.php", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771432700, "uuid": "3c38a126-0ce8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://geyllysson.org/seuapkaqui/Ibo-Pro-Player_3.9.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771432713, "uuid": "4389b571-0ce8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://cynet.technick.sbs/Cyrex.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: cyrex", "colour": "#c7fa8e", "exportable": true, "hide_tag": false }, { "name": "pw-cyrex", "colour": "#d542d1", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771432748, "uuid": "5889083e-0ce8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://vogd.digital/zoomms/ZoomWorkspace.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771432750, "uuid": "5a25b7af-0ce8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.208/OBOXW2026.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771432930, "uuid": "c559af42-0ce8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.159/kunabpfhu.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771433468, "uuid": "05c4fad4-0cea-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://fruitline.kiwi5pack.coupons/box_ref", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771433827, "uuid": "dba1fa36-0cea-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://supplyline.pack1kiwi.coupons/weight_ref", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771434021, "uuid": "4f3df857-0ceb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.246.225.30:41988/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771434247, "uuid": "d5e1cb92-0ceb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://boxstream.pack1kiwi.coupons/sort_data", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771434548, "uuid": "89adcaca-0cec-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://localhub.pack1kiwi.coupons/area_scan", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771434743, "uuid": "fd8be5a9-0cec-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.140.226:35897/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771434864, "uuid": "45f91926-0ced-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.2.230:35518/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771434919, "uuid": "66bab575-0ced-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.65.9:49550/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771435037, "uuid": "acc349b3-0ced-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.107.203:41998/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771435147, "uuid": "eeb06602-0ced-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://packpoint.pack1kiwi.coupons/unit_set", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771435870, "uuid": "9d52749d-0cef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://growthstep.probos7raise.coupons/level_up", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771435940, "uuid": "c6fff5bf-0cef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.140.226:35897/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771436001, "uuid": "ebe7190d-0cef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.99.55:55596/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771436109, "uuid": "2bd21ec7-0cf0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://smartraise.probos7raise.coupons/point_ref", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771436290, "uuid": "980e33cc-0cf0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://workdeck.murta46unprin.coupons/task_file", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771436466, "uuid": "00c7ca11-0cf1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://printflow.murta46unprin.coupons/job_ref", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771436606, "uuid": "54393a80-0cf1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.253.71:40399/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771436895, "uuid": "007f4e7a-0cf2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.227.97:58683/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771437066, "uuid": "665e1608-0cf2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://systemcore.murta46unprin.coupons/log_data", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771437380, "uuid": "217f3443-0cf3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.227.97:58683/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771437381, "uuid": "225d5115-0cf3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.33.106:60411/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771437486, "uuid": "60ba5c7b-0cf3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://outputsync.murta46unprin.coupons/stream_id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771437787, "uuid": "146db441-0cf4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/6075866260/44NoKFh.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771437790, "uuid": "15f354db-0cf4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.51.128.179:8080/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771437791, "uuid": "165c0947-0cf4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.80.163.247/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771437791, "uuid": "169be082-0cf4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.7.56:2000/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771437792, "uuid": "17201627-0cf4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.173.154.50:8080/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771437793, "uuid": "17b8ef9a-0cf4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.73.162.104:8082/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771437793, "uuid": "17cad6f6-0cf4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.157.57.199:85/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771437794, "uuid": "182b5c06-0cf4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.157.211.1:85/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771437794, "uuid": "187ace14-0cf4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.50.5.96:9301/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771437847, "uuid": "37e312b9-0cf4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.236.180.235:53923/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771437849, "uuid": "392e63ed-0cf4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.8.16.9:1058/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771437849, "uuid": "39655105-0cf4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.15.155.121:13201/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771437850, "uuid": "39990173-0cf4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.124.245.98:40186/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771437850, "uuid": "39f1d8a0-0cf4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.8.16.9:1044/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771437851, "uuid": "3a6e60c5-0cf4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.103.170.51/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771437852, "uuid": "3ac7d8a3-0cf4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.118.103.42:26816/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771437854, "uuid": "3c038ed9-0cf4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.157.74.65:85/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771437920, "uuid": "635c8c6e-0cf4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.253.71:40399/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438103, "uuid": "d0cc970f-0cf4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.8.242:33125/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438208, "uuid": "0f178df5-0cf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://shadowpath.elusive16soot.coupons/trace_id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438209, "uuid": "0f7e722e-0cf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://19z4t19x.matrimon63shadowy.digital/?=check&&actmn=RBMarWpFbejvREXo", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438221, "uuid": "169aa841-0cf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.14.67:35217/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438338, "uuid": "5cc87e69-0cf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.121.186:47622/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438384, "uuid": "782d052b-0cf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.9.60/fuckjewishpeople.arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438384, "uuid": "782d3bdf-0cf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.9.60/fuckjewishpeople.ppc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438385, "uuid": "785b66d4-0cf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.9.60/fuckjewishpeople.arm4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438385, "uuid": "785ba1d2-0cf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.9.60/fuckjewishpeople.mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438385, "uuid": "78e50da9-0cf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.9.60/fuckjewishpeople.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438387, "uuid": "79a8c517-0cf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.9.60/fuckjewishpeople.sparc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438387, "uuid": "79a8d2ee-0cf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.9.60/fuckjewishpeople.arm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438387, "uuid": "79aa5826-0cf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.9.60/fuckjewishpeople.mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438387, "uuid": "79aa7a61-0cf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.9.60/fuckjewishpeople.arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438447, "uuid": "9d73ac20-0cf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.9.60/fuckjewishpeople.x86", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438513, "uuid": "c4ff2543-0cf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.230.43.57/ambatukam/rizzx.arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438513, "uuid": "c515465d-0cf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.230.43.57/ambatukam/rizzx.arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438513, "uuid": "c51964d0-0cf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.230.43.57/ambatukam/rizzx.arc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438514, "uuid": "c530f5c4-0cf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.230.43.57/ambatukam/rizzx.mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438514, "uuid": "c530f75c-0cf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.230.43.57/ambatukam/rizzx.m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438514, "uuid": "c53a1ffe-0cf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.230.43.57/ambatukam/rizzx.mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438514, "uuid": "c557ffd0-0cf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.230.43.57/ambatukam/rizzx.sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438514, "uuid": "c563bc02-0cf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.230.43.57/ambatukam/rizzx.arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438514, "uuid": "c58f06a8-0cf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.230.43.57/ambatukam/debug", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438515, "uuid": "c5f40445-0cf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ravku.com/ambatukam/rizzx.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438515, "uuid": "c645a1c3-0cf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ravku.com/ambatukam/rizzx.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438516, "uuid": "c66f97e0-0cf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.230.43.57/ambatukam/rizzx.spc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438516, "uuid": "c6751232-0cf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ravku.com/ambatukam/rizzx.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438516, "uuid": "c68bd7e9-0cf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ravku.com/ambatukam/rizzx.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438516, "uuid": "c68d01b8-0cf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ravku.com/ambatukam/debug", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438516, "uuid": "c68d2109-0cf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ravku.com/ambatukam/rizzx.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438516, "uuid": "c68d2257-0cf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://hiddenscan.elusive16soot.coupons/mask_ref", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438516, "uuid": "c6a278ff-0cf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.230.43.57/ambatukam/rizzx.arm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438516, "uuid": "c6a440b1-0cf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ravku.com/ambatukam/rizzx.arc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438516, "uuid": "c6a44d13-0cf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ravku.com/ambatukam/rizzx.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438516, "uuid": "c6a56102-0cf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.230.43.57/ambatukam/rizzx.x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438516, "uuid": "c6ac2baf-0cf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ravku.com/ambatukam/rizzx.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438516, "uuid": "c6b8c24d-0cf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.230.43.57/ambatukam/rizzx.i686", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438516, "uuid": "c6c97205-0cf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ravku.com/ambatukam/rizzx.spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438516, "uuid": "c6d0b819-0cf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ravku.com/ambatukam/rizzx.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438516, "uuid": "c6d98ab6-0cf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ravku.com/ambatukam/rizzx.x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438516, "uuid": "c6e4a297-0cf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.230.43.57/ambatukam/rizzx.x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438516, "uuid": "c6e552ac-0cf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ravku.com/ambatukam/rizzx.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438516, "uuid": "c6e57206-0cf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ravku.com/ambatukam/rizzx.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771438517, "uuid": "c70c8c5a-0cf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ravku.com/1.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439411, "uuid": "dc61f214-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.230.43.57/ambatukam/rizzx.ppc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439411, "uuid": "dc67636d-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.230.43.57/1.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439412, "uuid": "dc801a36-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.245.203.34/ambatukam/rizzx.spc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439412, "uuid": "dc80aa42-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.245.203.34/ambatukam/rizzx.x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439412, "uuid": "dc942101-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.245.203.34/ambatukam/rizzx.m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439412, "uuid": "dc9ec445-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.245.203.34/ambatukam/rizzx.mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439412, "uuid": "dc9ff9d9-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.245.203.34/ambatukam/rizzx.arm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439412, "uuid": "dca20099-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.245.203.34/ambatukam/rizzx.i686", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439412, "uuid": "dca36aaa-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.245.203.34/ambatukam/rizzx.sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439412, "uuid": "dca37eef-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.245.203.34/ambatukam/rizzx.x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439412, "uuid": "dca447a2-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.245.203.34/ambatukam/rizzx.arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439412, "uuid": "dcaa4dde-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.245.203.34/ambatukam/rizzx.mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439412, "uuid": "dcb9db76-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.245.203.34/ambatukam/rizzx.arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439412, "uuid": "dcca2bf8-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.245.203.34/ambatukam/rizzx.arc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439412, "uuid": "dcd95606-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.245.203.34/ambatukam/rizzx.arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439412, "uuid": "dcdbd3c1-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.245.203.34/ambatukam/debug", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439413, "uuid": "dd5913a7-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.245.203.34/1.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439413, "uuid": "dd7abc7f-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.209.248.14:45592/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439414, "uuid": "ddd746ca-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.92/main_mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439414, "uuid": "ddf9286a-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.92/main_arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439414, "uuid": "ddf92886-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.92/main_m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439414, "uuid": "de3999ae-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://a54mfa.easypanel.host/ambatukam/rizzx.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439414, "uuid": "de3a0830-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://a54mfa.easypanel.host/ambatukam/rizzx.spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439415, "uuid": "de47d37d-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://a54mfa.easypanel.host/1.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439415, "uuid": "de485d7c-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://a54mfa.easypanel.host/ambatukam/rizzx.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439415, "uuid": "de69cba7-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://secretlink.elusive16soot.coupons/auth_code", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439415, "uuid": "de87cf1a-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://a54mfa.easypanel.host/ambatukam/rizzx.arc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439416, "uuid": "def8a527-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://a54mfa.easypanel.host/ambatukam/rizzx.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439416, "uuid": "df3db97f-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.245.203.34/ambatukam/rizzx.ppc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439416, "uuid": "df3e244d-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://a54mfa.easypanel.host/ambatukam/rizzx.x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439417, "uuid": "df6e9997-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://a54mfa.easypanel.host/ambatukam/rizzx.i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439417, "uuid": "df9efa7f-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://a54mfa.easypanel.host/ambatukam/rizzx.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439417, "uuid": "dfa3c544-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ravku.com/ambatukam/rizzx.i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439417, "uuid": "dfb42768-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://a54mfa.easypanel.host/ambatukam/rizzx.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439417, "uuid": "dfe17fcd-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://a54mfa.easypanel.host/ambatukam/rizzx.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439417, "uuid": "dfe18bea-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://a54mfa.easypanel.host/ambatukam/rizzx.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439417, "uuid": "dfe1cd9c-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://a54mfa.easypanel.host/ambatukam/debug", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439417, "uuid": "dfeccf3e-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://a54mfa.easypanel.host/ambatukam/rizzx.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439418, "uuid": "e01d8d4d-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://a54mfa.easypanel.host/ambatukam/rizzx.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439418, "uuid": "e073f74e-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://darkhost.elusive16soot.coupons/key_gen", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439419, "uuid": "e11ee77d-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://a54mfa.easypanel.host/ambatukam/rizzx.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439422, "uuid": "e2f92205-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.239.68:49998/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439423, "uuid": "e3416c27-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.92/main_ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439423, "uuid": "e341817d-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.92/main_arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439423, "uuid": "e343e8e2-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.92/main_x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439425, "uuid": "e4651902-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.88.157:54293/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439425, "uuid": "e4850036-0cf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.88.157:54293/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439532, "uuid": "2479f6e0-0cf8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.74.230:56422/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439596, "uuid": "4a2611fa-0cf8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.74.230:56422/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439599, "uuid": "4bfec065-0cf8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.56.230:33369/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439889, "uuid": "f8e85f61-0cf8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.15.87:35648/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771439889, "uuid": "f906bf9b-0cf8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.14.67:35217/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440007, "uuid": "3f934f06-0cf9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://dataledger.comparis4sosun.coupons/set_val", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440368, "uuid": "16ade45f-0cfa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://matchview.comparis4sosun.coupons/diff_log", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440504, "uuid": "678beb64-0cfa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.209.248.14:45592/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440552, "uuid": "84510223-0cfa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.61.130.146:333/1.msi", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440847, "uuid": "34479307-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.236/bins/ttmswapd", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440854, "uuid": "37f0cb17-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.236/bins/ethd0", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440854, "uuid": "38593f62-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.236/bins/deferwqd", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440854, "uuid": "386750e6-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://proxyzabc.zabc.net/bins/ttmswapd", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440854, "uuid": "3870dde3-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://proxyzabc.zabc.net/bins/devfreqd0", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440854, "uuid": "38794ccb-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.236/bins/devfreqd0", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440854, "uuid": "3886fa80-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.236/bins/ksnapd0", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440855, "uuid": "389b9dac-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.236/bins/kpsmoused0", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440855, "uuid": "38a1bda5-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.236/bins/kswapd1", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440855, "uuid": "38a5c8b6-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://proxyzabc.zabc.net/bins/kworkerd0", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440855, "uuid": "390a4539-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://proxyzabc.zabc.net/bins/ip6addrd", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440855, "uuid": "39135c3b-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.236/bins/ip6addrd", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440855, "uuid": "39184aec-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://proxyzabc.zabc.net/bins/ethd0", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440855, "uuid": "39190d75-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://proxyzabc.zabc.net/bins/kpsmoused0", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440855, "uuid": "391a5115-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://proxyzabc.zabc.net/bins/mdsync1", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440856, "uuid": "393c102f-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://proxyzabc.zabc.net/bins/ksnapd0", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440856, "uuid": "39485ca4-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://proxyzabc.zabc.net/bins/kswapd1", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440856, "uuid": "394f246c-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://proxyzabc.zabc.net/bins/deferwqd", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440856, "uuid": "394f3f7b-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.236/bins/mdsync1", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440861, "uuid": "3c5b9e4b-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.236/bins/kvmirqd", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440861, "uuid": "3cb41f4b-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://proxyzabc.zabc.net/bins/kvmirqd", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440862, "uuid": "3cb8e44a-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.236/bins/biosd0", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440862, "uuid": "3cbc91fe-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://proxyzabc.zabc.net/bins/kintegrity0", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440862, "uuid": "3cbf8660-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.236/bins/kintegrity0", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440862, "uuid": "3cbff558-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.236/bins/vredisd0", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440862, "uuid": "3cd84807-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://proxyzabc.zabc.net/bins/biosd0", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440862, "uuid": "3cdbaf14-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://proxyzabc.zabc.net/bins/vredisd0", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440965, "uuid": "7a8bc26a-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.108.230/bins/mynode.arc-snps", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440968, "uuid": "7c79a55f-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.108.230/penis.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440969, "uuid": "7c8c2db8-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.108.230/bins/mynode.sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440969, "uuid": "7ca4ad22-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.108.230/bins/mynode.powerpc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440969, "uuid": "7cb09766-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.108.230/bins/mynode.mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440969, "uuid": "7cb16b59-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.108.230/bins/mynode.x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440969, "uuid": "7cb43e7e-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.108.230/bins/mynode.m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440969, "uuid": "7cb4dc13-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.108.230/bins/mynode.i586", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440969, "uuid": "7cbf5468-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.108.230/bins/mynode.powerpc-440fp", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440969, "uuid": "7cc9724c-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.108.230/bins/peniss.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440969, "uuid": "7cc97857-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.108.230/bins/mynode.i686", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440969, "uuid": "7cf9ce75-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.108.230/bins/mynode.armv4l", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440970, "uuid": "7d65273d-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.108.230/bins/mynode.mipsel", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440970, "uuid": "7d6facc2-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.108.230/bins/mynode.armv5l", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771440970, "uuid": "7d740b6e-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.108.230/bins/penis.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771441088, "uuid": "c3ad1a9c-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://de-25x800.com/l", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771441088, "uuid": "c3b77a7a-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://de-25x800.com/u", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771441088, "uuid": "c3b78821-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://de-25x800.com/multi/wget.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771441088, "uuid": "c3c7c977-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://de-25x800.com/multi/bins/x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771441088, "uuid": "c3c7cadb-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://de-25x800.com/multi/bins/arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771441089, "uuid": "c42860dd-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.251.236.118/multi/wget.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771441089, "uuid": "c429764c-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.251.236.118/u", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771441089, "uuid": "c42a334e-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.251.236.118/multi/bins/x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771441089, "uuid": "c4362d65-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.251.236.118/multi/bins/arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771441089, "uuid": "c43d656b-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.251.236.118/b", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771441089, "uuid": "c45e9058-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://de-25x800.com/b", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771441091, "uuid": "c598340c-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://de-25x800.com/multi/bins/arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771441091, "uuid": "c5b98e02-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://de-25x800.com/bins/x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771441097, "uuid": "c8ced39b-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://de-25x800.com/multi/bins/mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771441097, "uuid": "c8e08adf-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.251.236.118/bins/mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771441100, "uuid": "cab6ff4d-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.167.95.195:33887/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771441100, "uuid": "cab70453-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://de-25x800.com/multi/bins/mipsel", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771441100, "uuid": "cac96979-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://de-25x800.com/bins/mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771441101, "uuid": "cb7059f6-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.251.236.118/multi/bins/arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771441104, "uuid": "cd03235c-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.251.236.118/bins/x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771441105, "uuid": "cd9f93d6-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.251.236.118/multi/bins/mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771441105, "uuid": "cda57611-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.251.236.118/multi/bins/mipsel", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771441106, "uuid": "ce9c3bf7-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.145.16:34440/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771441146, "uuid": "e682c56d-0cfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.251.236.118/l", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771441279, "uuid": "354dd00c-0cfc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.145.16:34440/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771441326, "uuid": "51b48c79-0cfc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://linkcheck.comparis4sosun.coupons/ref_data", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771441760, "uuid": "5468a554-0cfd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.151.75.208:38317/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771442061, "uuid": "07c7b903-0cfe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.151.75.208:38317/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771442409, "uuid": "d6e36368-0cfe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://safeguard.censure47contr.coupons/access_ref", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771442421, "uuid": "de12deb8-0cfe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.186.208.156:58316/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771442605, "uuid": "4c2c8d21-0cff-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.172.65:33619/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771442768, "uuid": "ace899a8-0cff-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://rulebase.censure47contr.coupons/policy_id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771443620, "uuid": "a8aacc67-0d01-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.186.208.156:58316/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771443860, "uuid": "38016150-0d02-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.102.237:38119/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771443907, "uuid": "53de7b2d-0d02-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://checknode.censure47contr.coupons/state_val", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444220, "uuid": "0e6e4638-0d03-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.222.62.140:50503/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444520, "uuid": "c15cb558-0d03-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.222.62.140:50503/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444687, "uuid": "2526b322-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.229.199.64/AV.lnk", "Tag": [ { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444688, "uuid": "257af6b9-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.72.200.213:81/AV.lnk", "Tag": [ { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444688, "uuid": "258b5fb3-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.52.142.77:8080/AV.lnk", "Tag": [ { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444688, "uuid": "25a21b47-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.43.89.73:100/AV.lnk", "Tag": [ { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444688, "uuid": "25be3e46-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.159.129.129/AV.lnk", "Tag": [ { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444689, "uuid": "25d14476-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.135.101.5/AV.lnk", "Tag": [ { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444689, "uuid": "25e735be-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://187.156.206.218/AV.lnk", "Tag": [ { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444689, "uuid": "25f4ebeb-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.152.147.249:3389/AV.lnk", "Tag": [ { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444689, "uuid": "260b5bec-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.30.75.161:3389/AV.lnk", "Tag": [ { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444689, "uuid": "260e4101-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://187.213.58.60:8081/AV.lnk", "Tag": [ { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444689, "uuid": "260fdc05-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.81.114.230:9000/AV.lnk", "Tag": [ { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444691, "uuid": "270188d0-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.229.199.64/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444691, "uuid": "270438d3-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.60.162.163/AV.lnk", "Tag": [ { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444691, "uuid": "27121758-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.43.89.73:100/Video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444692, "uuid": "280667f7-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.166.163.52/AV.lnk", "Tag": [ { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444693, "uuid": "289955dc-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.60.162.163/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444693, "uuid": "28a4294c-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.60.162.163/info.zip", "Tag": [ { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444693, "uuid": "28b0a738-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.218.212.74:81/AV.lnk", "Tag": [ { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444695, "uuid": "29d20933-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.43.89.73:100/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444696, "uuid": "2a25481a-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.43.89.73:100/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444696, "uuid": "2a5a0f29-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://73.155.237.4:81/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444696, "uuid": "2a6e5158-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.60.162.163/Video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444700, "uuid": "2c58b5a5-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://187.156.206.218/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444700, "uuid": "2ca7d03e-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://187.213.58.60:8081/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444700, "uuid": "2cc7d72d-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.229.199.64/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444701, "uuid": "2cfd65e8-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.166.163.52/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444701, "uuid": "2d1c2a8e-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.30.75.161:3389/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444701, "uuid": "2d1c945e-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.159.129.129/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444701, "uuid": "2d1fbcd5-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.218.212.74:81/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444701, "uuid": "2d45252f-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.229.199.64/Video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444703, "uuid": "2e3c51a9-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.81.114.230:9000/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444704, "uuid": "2f18ee7f-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.166.163.52/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444706, "uuid": "304bf954-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://187.156.206.218/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444709, "uuid": "31da3721-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.152.147.249:3389/info.zip", "Tag": [ { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444709, "uuid": "323f7398-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://98.195.187.75/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444711, "uuid": "3350204e-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.52.142.77:8080/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444711, "uuid": "335f2e98-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.159.129.129/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444712, "uuid": "3383c3a5-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://187.213.58.60:8081/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444712, "uuid": "3385c870-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://187.213.58.60:8081/Video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444712, "uuid": "33879534-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.218.212.74:81/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444712, "uuid": "3389a6cb-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.72.200.213:81/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444712, "uuid": "33c2a807-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.166.163.52/Video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444712, "uuid": "33c33686-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.218.212.74:81/Video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444712, "uuid": "33e5ab07-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.152.147.249:3389/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444712, "uuid": "33e6393e-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.152.147.249:3389/Video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444713, "uuid": "343a7bb7-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://187.156.206.218/Video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444713, "uuid": "3475468b-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.72.200.213:81/Video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444715, "uuid": "3557ed56-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.72.200.213:81/info.zip", "Tag": [ { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444718, "uuid": "373639e0-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.30.75.161:3389/Video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444718, "uuid": "378d08cb-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.159.129.129/Video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444720, "uuid": "3867f2a5-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.52.142.77:8080/Video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444720, "uuid": "386900a4-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.81.114.230:9000/Video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444721, "uuid": "38e5fef8-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.52.142.77:8080/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444731, "uuid": "3f0b7114-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.81.114.230:9000/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444731, "uuid": "3f0eae1d-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.30.75.161:3389/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444871, "uuid": "92d8a362-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.135.101.5/info.zip", "Tag": [ { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444964, "uuid": "c9e8d8dc-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.135.101.5/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771444971, "uuid": "ce0b2fa0-0d04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.135.101.5/Video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771445172, "uuid": "46089cc8-0d05-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.17/main_arm6", "Tag": [ { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771445172, "uuid": "460addd0-0d05-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.17/main_sh4", "Tag": [ { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771445172, "uuid": "460cdf9b-0d05-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.17/main_arm5", "Tag": [ { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771445172, "uuid": "4615da2b-0d05-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://thankyourawbuy.p-e.kr/main_sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771445172, "uuid": "4624c6fc-0d05-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.17/main_mips", "Tag": [ { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771445172, "uuid": "46299cfe-0d05-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.17/main_x86", "Tag": [ { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771445172, "uuid": "462e7989-0d05-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.17/main_arm", "Tag": [ { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771445172, "uuid": "463a5f2f-0d05-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://thankyourawbuy.p-e.kr/main_arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771445172, "uuid": "46418ba5-0d05-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.17/main_ppc", "Tag": [ { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771445173, "uuid": "46435779-0d05-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.17/main_x86_64", "Tag": [ { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771445173, "uuid": "464a478e-0d05-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://thankyourawbuy.p-e.kr/main_ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771445173, "uuid": "464fcaaf-0d05-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://thankyourawbuy.p-e.kr/main_arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771445173, "uuid": "46557557-0d05-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://thankyourawbuy.p-e.kr/main_mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771445173, "uuid": "4657285b-0d05-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://thankyourawbuy.p-e.kr/main_x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771445173, "uuid": "467adad6-0d05-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://thankyourawbuy.p-e.kr/main_arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771445173, "uuid": "46822592-0d05-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.17/main_arm7", "Tag": [ { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771445173, "uuid": "46825cf7-0d05-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.17/main_mpsl", "Tag": [ { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771445173, "uuid": "4686db65-0d05-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://thankyourawbuy.p-e.kr/main_mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771445173, "uuid": "468caee2-0d05-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://thankyourawbuy.p-e.kr/main_m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771445173, "uuid": "4695ce60-0d05-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.102.137.81/main_x86", "Tag": [ { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771445173, "uuid": "469727f7-0d05-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.102.137.81/main_arm", "Tag": [ { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771445173, "uuid": "4699e71e-0d05-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.102.137.81/main_mpsl", "Tag": [ { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771445173, "uuid": "469c2e4e-0d05-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.102.137.81/main_arm7", "Tag": [ { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771445173, "uuid": "46b765f4-0d05-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.102.137.81/main_sh4", "Tag": [ { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771445173, "uuid": "46db0e9f-0d05-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.102.137.81/main_m68k", "Tag": [ { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771445175, "uuid": "478667f2-0d05-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.102.137.81/main_arm6", "Tag": [ { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771445175, "uuid": "4797f6a9-0d05-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.102.137.81/main_mips", "Tag": [ { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771445175, "uuid": "479dc61e-0d05-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.102.137.81/main_arm5", "Tag": [ { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771445175, "uuid": "47aa1d22-0d05-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.102.137.81/main_x86_64", "Tag": [ { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771445175, "uuid": "47ab1e63-0d05-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.102.137.81/main_ppc", "Tag": [ { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771446125, "uuid": "7e1a8c46-0d07-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.17/main_m68k", "Tag": [ { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771446126, "uuid": "7ea1525f-0d07-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://thankyourawbuy.p-e.kr/main_arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771446128, "uuid": "7fce15b2-0d07-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://shieldpath.censure47contr.coupons/guard_log", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771446128, "uuid": "7feaa9d7-0d07-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://thankyourawbuy.p-e.kr/main_x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771446130, "uuid": "8131d01e-0d07-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://mindwave.conscious86jag.coupons/pulse_stat", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771446134, "uuid": "8383b5ab-0d07-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.29.223.19:59157/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771446546, "uuid": "792ff97d-0d08-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://activebrain.conscious86jag.coupons/sense_data", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771446968, "uuid": "74b7f261-0d09-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.29.223.19:59157/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771447336, "uuid": "4f8cf11e-0d0a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.196.254:40293/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771447577, "uuid": "df98973b-0d0a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.248.106:36245/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771448167, "uuid": "3f5aa775-0d0c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.227.255:49758/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771448553, "uuid": "2554fea4-0d0d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.117.239:35530/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771448585, "uuid": "38735d21-0d0d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.29/klob", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771448672, "uuid": "6c10d52f-0d0d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.229.29:41414/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771448769, "uuid": "a5fa40b0-0d0d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.127.44:43494/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771449076, "uuid": "5cb93f5f-0d0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.118.66:44479/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771449144, "uuid": "85b902b0-0d0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.51.224:59906/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771449733, "uuid": "e49b0143-0d0f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.244.200:38152/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771449786, "uuid": "0463658f-0d10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://thoughtsync.conscious86jag.coupons/input_ref", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771450100, "uuid": "bf14a7ea-0d10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.118.66:44479/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771450326, "uuid": "45ca635d-0d11-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://mentalpulse.conscious86jag.coupons/brain_set", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771450576, "uuid": "db4bd356-0d11-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.127.44:43494/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771450626, "uuid": "f8cfaf0f-0d11-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://magicbook.overdue13wizard.coupons/spell_id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771450933, "uuid": "b000b64d-0d12-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.117.239:35530/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771450938, "uuid": "b2d6de54-0d12-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.16.34:36810/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771451050, "uuid": "f5770b15-0d12-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.89.183:34960/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771451468, "uuid": "ee7340af-0d13-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://oldscroll.overdue13wizard.coupons/page_ref", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771451477, "uuid": "f4553210-0d13-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.12.88:42171/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771451648, "uuid": "5a11c34b-0d14-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://jxjfs70p.cropin456spire.digital/?=check&&actmn=LRqkrMTWwkwkHRsD", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771451716, "uuid": "82adad90-0d14-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.173.145:35312/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771451951, "uuid": "0e8a5cb0-0d15-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.244.200:38152/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771452186, "uuid": "9a9a0120-0d15-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.29/4", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771452428, "uuid": "2aa57cb7-0d16-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.144.236:35512/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771452667, "uuid": "b91f7152-0d16-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://wisepath.overdue13wizard.coupons/mana_data", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771453097, "uuid": "b9c12766-0d17-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.19.101:59032/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771453265, "uuid": "1e0893c9-0d18-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.12.88:42171/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771453869, "uuid": "85dec6f3-0d19-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://mysticpoint.overdue13wizard.coupons/cast_log", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771454177, "uuid": "3d75f472-0d1a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.195.57:58222/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771454229, "uuid": "5c4b4001-0d1a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.230.94.250:38221/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771454360, "uuid": "aa681193-0d1a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.246.41.125:48422/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771454360, "uuid": "aa6ba449-0d1a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.21.197:58293/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771454587, "uuid": "31fbc9f3-0d1b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.69/armv5l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771454589, "uuid": "3323cb3f-0d1b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.69/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771454589, "uuid": "332b4074-0d1b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.69/armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771454589, "uuid": "3331ee74-0d1b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.69/armv6l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771454589, "uuid": "3333d1d1-0d1b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.69/armv4l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771455137, "uuid": "79bb53fc-0d1c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.230.3:39568/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771456037, "uuid": "91e79dc6-0d1e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.255.5:53400/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771456095, "uuid": "b4a9cd35-0d1e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.201.5:34238/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771456265, "uuid": "1a19a8f8-0d1f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://nightwave.bluewave.coupons/ocean_log", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771456278, "uuid": "21bcba42-0d1f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.77.20.124:41687/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771456337, "uuid": "449f3f30-0d1f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.211.138:42123/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771456396, "uuid": "680e67eb-0d1f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.238.241:42309/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771456397, "uuid": "6874f848-0d1f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.21.197:58293/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771456508, "uuid": "ab09f68f-0d1f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.115.94:55159/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771456565, "uuid": "cc7fa211-0d1f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://deepcoast.bluewave.coupons/tide_data", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771456579, "uuid": "d50ab834-0d1f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.196.254:40293/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771456625, "uuid": "f0831a51-0d1f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.109/us/a", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771456936, "uuid": "a9b422d7-0d20-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://24.54.85.143:47853/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771456988, "uuid": "c903b754-0d20-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://coolsurf.bluewave.coupons/water_ref", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771457235, "uuid": "5c55ab8b-0d21-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.255.5:53400/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771457597, "uuid": "33c25ef6-0d22-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.77.20.124:41687/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771457657, "uuid": "57948e50-0d22-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.144.236:35512/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771457832, "uuid": "c003f867-0d22-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.178.249.112:39752/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771458020, "uuid": "3025e165-0d23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.250.133:55509/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771458072, "uuid": "4ee77f2f-0d23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.201.5:34238/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771458072, "uuid": "4ef2261e-0d23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.178.249.112:39752/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771458197, "uuid": "9991a4b7-0d23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.115.94:55159/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771458546, "uuid": "69ac38ec-0d24-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://blueshell.bluewave.coupons/beach_scan", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771458558, "uuid": "70af5c4c-0d24-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.250.133:55509/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771458608, "uuid": "8e7f7196-0d24-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.238.241:42309/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771458737, "uuid": "db28d32c-0d24-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://24.54.85.143:47853/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771459090, "uuid": "ad81461a-0d25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.14.71:36325/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771411324, "uuid": "772b325f-0cb6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.173.157.244", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771444685, "uuid": "239044ce-0d04-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.52.142.77", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771441084, "uuid": "c15c87fe-0cfb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.251.236.118", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771453085, "uuid": "b2681c00-0d17-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.19.101", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771403224, "uuid": "9b263fa3-0ca3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.30.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771416484, "uuid": "7a98e237-0cc2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.111.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771416185, "uuid": "c816fe6b-0cc1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.44.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771396506, "uuid": "f6f3f0b0-0c93-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.5.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771425065, "uuid": "7508fc8f-0cd6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.39.239.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771444685, "uuid": "239d2ee9-0d04-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.81.114.230", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771444685, "uuid": "239c6f0d-0d04-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.218.212.74", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771428484, "uuid": "6b5145bf-0cde-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.228.99.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771454224, "uuid": "59737d30-0d1a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.230.94.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771418285, "uuid": "ac360c02-0cc6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.231.71.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771381206, "uuid": "5730cd29-0c70-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.237.54.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771452424, "uuid": "2897e6d7-0d16-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.144.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771410484, "uuid": "8280752f-0cb4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.243.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771410965, "uuid": "a0ea9b77-0cb5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.8.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771380306, "uuid": "3e9485f5-0c6e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.187.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401606, "uuid": "d6b773d2-0c9f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.90.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771417806, "uuid": "8ea8eafe-0cc5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.51.90.36", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771378144, "uuid": "36231e2c-0c69-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.34.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771392906, "uuid": "94f1f99d-0c8b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.27.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400044, "uuid": "33d6c0f8-0c9c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.4.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771374484, "uuid": "b096b81f-0c60-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.146.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771391163, "uuid": "86637c28-0c87-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.59.231.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400885, "uuid": "290a31f1-0c9e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.171.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771424106, "uuid": "39f27368-0cd4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.17.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771437845, "uuid": "367f5d8e-0cf4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.103.170.51", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771407365, "uuid": "3f033524-0cad-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.140.128.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771432324, "uuid": "5bb55bb2-0ce7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.75.205.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771398965, "uuid": "b07c748c-0c99-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.193.140.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771383306, "uuid": "3ae3a3cc-0c75-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.202.115", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771448524, "uuid": "14082518-0d0d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.117.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771432205, "uuid": "154027b7-0ce7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.22.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771386124, "uuid": "ca83ad87-0c7b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.217.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771449124, "uuid": "79a181a0-0d0e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.51.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771380185, "uuid": "f6a95e75-0c6d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.232.190.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771407125, "uuid": "b01f93f9-0cac-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.241.55.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771444685, "uuid": "239e7884-0d04-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.30.75.161", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771457824, "uuid": "bb409413-0d22-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.178.249.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771391645, "uuid": "a517665c-0c88-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.185.191.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771437785, "uuid": "12f9ee15-0cf4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.157.211.1", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771437785, "uuid": "12f934cf-0cf4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.157.57.199", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771437845, "uuid": "367f9469-0cf4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.157.74.65", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771437785, "uuid": "12fa3a00-0cf4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.73.162.104", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438206, "uuid": "0df94478-0cf5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.14.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771439585, "uuid": "43bf09be-0cf8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.129.56.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771384504, "uuid": "053a3f63-0c78-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.13.30.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771380784, "uuid": "5c045f8c-0c6f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.173.109.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771396085, "uuid": "fbba737f-0c92-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.185.91.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771450925, "uuid": "aad28b7c-0d12-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.189.16.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771447324, "uuid": "48874f95-0d0a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.196.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771459085, "uuid": "aa8c97bd-0d25-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.14.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771381624, "uuid": "505f236c-0c71-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.15.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771385284, "uuid": "d60a6786-0c79-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.244.125", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771449725, "uuid": "dfc8c40c-0d0f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.244.200", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771408325, "uuid": "7b2ad691-0caf-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.135.134.101", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771446124, "uuid": "7da90db5-0d07-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.29.223.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771444685, "uuid": "238dbafd-0d04-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.72.200.213", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431184, "uuid": "b490fe13-0ce4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.92.76.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771393805, "uuid": "ac8cffd5-0c8d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.113.146.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771456025, "uuid": "8a8f8256-0d1e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.42.255.5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771379165, "uuid": "96c9067f-0c6b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.193.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771456324, "uuid": "3cda6576-0d1f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.211.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771381985, "uuid": "274aa260-0c72-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.25.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771379705, "uuid": "d8b0e276-0c6c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "130.12.180.78", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771374065, "uuid": "b6e34fd1-0c5f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "14.168.37.165", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771409824, "uuid": "f90b85cb-0cb2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "144.172.98.156", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400165, "uuid": "7bf9ef1f-0c9c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "148.113.3.160", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771437785, "uuid": "12fa761e-0cf4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "152.173.154.50", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438507, "uuid": "c110f9b9-0cf5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "157.230.43.57", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771439406, "uuid": "d9131bc4-0cf7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "157.245.203.34", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771411324, "uuid": "772d803e-0cb6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "157.85.69.255", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400165, "uuid": "7bf93f0e-0c9c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "168.222.251.98", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771399864, "uuid": "c88ceec2-0c9b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "172.245.95.24", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771448164, "uuid": "3d41e7fb-0d0c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.147.227.255", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771423506, "uuid": "d3c39db5-0cd2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.167.4.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771441084, "uuid": "c16797d1-0cfb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.167.95.195", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771444685, "uuid": "238f9137-0d04-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.229.199.64", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771390385, "uuid": "b63d15d2-0c85-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.132.222", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771445165, "uuid": "41a50e65-0d05-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.17", "Tag": [ { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771419665, "uuid": "e2a35473-0cc9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.149.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771437785, "uuid": "12fa060c-0cf4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.50.5.96", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771409105, "uuid": "4c9670cf-0cb1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.116.248.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771411324, "uuid": "772dfa60-0cb6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "181.112.40.154", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771443844, "uuid": "2ead84b5-0d02-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.102.237", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771454165, "uuid": "36029b86-0d1a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.195.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771374724, "uuid": "3fdca3e1-0c61-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.35.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438325, "uuid": "54ad928e-0cf5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.121.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771393084, "uuid": "ff4791dc-0c8b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.123.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771416124, "uuid": "a42c5f6f-0cc1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.83.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771384444, "uuid": "e134e99d-0c77-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.91.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771395124, "uuid": "bf297541-0c90-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.107.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771375325, "uuid": "a5bc254d-0c62-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.183.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771403824, "uuid": "00dd972c-0ca5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.248.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771376944, "uuid": "6af8480f-0c66-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.6.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771404964, "uuid": "a830548f-0ca7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.122.172.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771430764, "uuid": "b9d684b4-0ce3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.122.192.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401124, "uuid": "b79b261b-0c9e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.122.53.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771412465, "uuid": "1f12e25a-0cb9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.123.142.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771408745, "uuid": "757fdda4-0cb0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.123.190.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771399806, "uuid": "a57392fd-0c9b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.171.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771414983, "uuid": "fbdc653e-0cbe-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.18.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771419665, "uuid": "e2a360da-0cc9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.208.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771428545, "uuid": "8f56eca6-0cde-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.113.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771386605, "uuid": "e933847e-0c7c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.126.174", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771411324, "uuid": "772b7330-0cb6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "186.121.214.218", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771411324, "uuid": "772c9718-0cb6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "186.26.65.120", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771444685, "uuid": "23901c46-0d04-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "187.156.206.218", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771444685, "uuid": "23a2f150-0d04-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "187.213.58.60", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771444685, "uuid": "238e1f60-0d04-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "189.135.101.5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771444685, "uuid": "238fb108-0d04-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "189.159.129.129", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771444688, "uuid": "25993eaf-0d04-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "190.166.163.52", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771406705, "uuid": "b5ccb2e6-0cab-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.3.101.19", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771423144, "uuid": "fc2d719d-0cd1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "197.203.226.116", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438206, "uuid": "0e0b76d8-0cf5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "19z4t19x.matrimon63shadowy.digital" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771411324, "uuid": "772b64d6-0cb6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "200.118.103.42", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771396085, "uuid": "fbba3905-0c92-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.91.138.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771420625, "uuid": "1ee7313c-0ccc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.201.156.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771396625, "uuid": "3db785ac-0c94-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.12.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771454345, "uuid": "a13ce412-0d1a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.21.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771394705, "uuid": "c54b22a6-0c8f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.203.132.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771451044, "uuid": "f231c5a2-0d12-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.89.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771418765, "uuid": "ca0635ad-0cc7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.157.130", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771422365, "uuid": "2bbad82c-0cd0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.161.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771448765, "uuid": "a37c3594-0d0d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.127.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771439525, "uuid": "203b850e-0cf8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.74.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771458005, "uuid": "27103bee-0d23-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.250.133", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771436585, "uuid": "47a14b35-0cf1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.253.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771454345, "uuid": "a13cf143-0d1a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.246.41.125", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771441746, "uuid": "4bb344a4-0cfd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.151.75.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771445165, "uuid": "41a47db1-0d05-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.102.137.81", "Tag": [ { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771444685, "uuid": "238e45c7-0d04-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.152.147.249", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771384085, "uuid": "0b05a165-0c77-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.194.34.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771421045, "uuid": "18fa74ea-0ccd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.186.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771393324, "uuid": "8e492f61-0c8c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.229.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771444206, "uuid": "05f38c3d-0d03-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.222.62.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771416365, "uuid": "3371fb12-0cc2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.222.77.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771430705, "uuid": "96f42bab-0ce3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.27.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771411324, "uuid": "77313b92-0cb6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "31.28.107.131", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771411324, "uuid": "772ac10b-0cb6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.33.136.49", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771411384, "uuid": "9a9938b0-0cb6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.81.76.214", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771411324, "uuid": "772bd549-0cb6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.193.243.84", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771383544, "uuid": "c8ec7880-0c75-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "38.226.161.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771456264, "uuid": "19486fa4-0d1f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.77.20.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771374306, "uuid": "464e73ab-0c60-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.125.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771430764, "uuid": "b9d675bc-0ce3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.153.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771434844, "uuid": "39d11966-0ced-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.2.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771448644, "uuid": "5baffd09-0d0d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.229.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771414983, "uuid": "fbdc52d4-0cbe-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.75.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431063, "uuid": "6c58b6ec-0ce4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.76.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771456084, "uuid": "ae053205-0d1e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.201.5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771434725, "uuid": "f2dd1a32-0cec-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.233.140.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438084, "uuid": "c5629930-0cf4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.237.8.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771382885, "uuid": "3fdd36e9-0c74-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.56.166.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771393144, "uuid": "22fac187-0c8c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.59.231.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771440545, "uuid": "7fc874b8-0cfa-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.61.130.146", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771396506, "uuid": "f6f3e29f-0c93-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.59.248.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771410605, "uuid": "caab1866-0cb4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.209.182.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771380365, "uuid": "6224f1c9-0c6e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.82.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400166, "uuid": "7c1f8763-0c9c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.64.211", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771428665, "uuid": "d6d0da76-0cde-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.183.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771437365, "uuid": "188da4cd-0cf3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.19.33.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771441084, "uuid": "c15f7d85-0cfb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.145.16", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771422124, "uuid": "9c7a96b8-0ccf-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.137.132.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771412585, "uuid": "6691d2c0-0cb9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.137.192.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771384205, "uuid": "52cb9905-0c77-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.30.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771382644, "uuid": "b0790783-0c73-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.30.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771393984, "uuid": "17ce49e2-0c8e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.112.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400166, "uuid": "7c171506-0c9c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "62.182.81.38", "Tag": [ { "name": "kairos", "colour": "#48b80b", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#9e80d3", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400165, "uuid": "7bfa8086-0c9c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "64.176.37.51", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771409164, "uuid": "6fd012ef-0cb1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.83.39.134", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771437785, "uuid": "12fa8278-0cf4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "78.51.128.179", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771439406, "uuid": "d913bb82-0cf7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.209.248.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771444685, "uuid": "2396a2bf-0d04-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.43.89.73", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771444685, "uuid": "238f9f1c-0d04-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.60.162.163", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771439406, "uuid": "d9121a97-0cf7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "87.121.84.92", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400166, "uuid": "7c3733be-0c9c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "89.190.158.76", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771437785, "uuid": "12fa15a1-0cf4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.80.163.247", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431365, "uuid": "205d70d5-0ce5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.92.243.47", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771401184, "uuid": "db22d7e1-0c9e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "96.44.159.143", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771439407, "uuid": "d9b0ff22-0cf7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "a54mfa.easypanel.host" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771425425, "uuid": "4ba34c76-0cd7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "a5v9n.box3pear.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771446545, "uuid": "784a8c03-0d08-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "activebrain.conscious86jag.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771413907, "uuid": "7a6e7a6e-0cbc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "archive.disapp43squithes.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771417625, "uuid": "22832826-0cc5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "atelier.blueg78rework.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771427045, "uuid": "113b2058-0cdb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "b0x-rnark.box3pear.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771417925, "uuid": "d560c5de-0cc5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "b1ueg-vveld.blueg78rework.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771432565, "uuid": "eb69d993-0ce7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "babymafessoni.merseine.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771407545, "uuid": "aac72789-0cad-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "beamglow.lightstream.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771391106, "uuid": "6408e8c1-0c87-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "beatlead.metalheart.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771458544, "uuid": "687ab163-0d24-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "blueshell.bluewave.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771394587, "uuid": "7ec7b767-0c8f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "boltfix.metalheart.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771434245, "uuid": "d4ff5176-0ceb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "boxstream.pack1kiwi.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771418945, "uuid": "356a5651-0cc8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "c9t5q.pack8mint.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771410306, "uuid": "17f98994-0cb4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "capdoom.blogspot.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771428307, "uuid": "01a05ac2-0cde-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "cargoflow.fig2ship.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771443905, "uuid": "52d0a034-0d02-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "checknode.censure47contr.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400644, "uuid": "9975ef43-0c9d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "citypulse.urbanpulse.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771426385, "uuid": "87c7da05-0cd9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "consign.box3pear.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771421165, "uuid": "60a7eebc-0ccd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "container.pear6box.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771456986, "uuid": "c7eeeabd-0d20-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "coolsurf.bluewave.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771390144, "uuid": "26cdf6d0-0c85-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "corepulse.metalheart.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771376346, "uuid": "0647b118-0c65-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "craftbase.stonecraft.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771417025, "uuid": "bcdd8e1d-0cc3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "crate.mint4pack.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771432686, "uuid": "336fe4ef-0ce8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "cynet.technick.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400166, "uuid": "7c3eb982-0c9c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "cyx.technick.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400166, "uuid": "7c5a5e06-0c9c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "cyxer.technok.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400166, "uuid": "7c6dfb16-0c9c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "cyxre.technok.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771414863, "uuid": "b4860eab-0cbe-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "d1sapp-vvire.disapp43squithes.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771439415, "uuid": "dea0f06d-0cf7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "darkhost.elusive16soot.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771377724, "uuid": "3bec4945-0c68-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "darkview.nightvision.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771439944, "uuid": "19fbac78-0cf9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "dataledger.comparis4sosun.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771379285, "uuid": "de00909e-0c6b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "datastream.cloudtrace.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771441084, "uuid": "c178ba65-0cfb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "de-25x800.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771397044, "uuid": "3798772e-0c95-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "deepblue.oceansync.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771456563, "uuid": "cb99b4fc-0d1f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "deepcoast.bluewave.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771409165, "uuid": "6fe3e4ec-0cb1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "edive.ao" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771419065, "uuid": "7d2cdb57-0cc8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "en2k1164.dictationlow.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771382525, "uuid": "6972a43e-0c73-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "flowcloud.cloudtrace.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771431724, "uuid": "f6369a00-0ce5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "freshpack.kiwi5pack.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400166, "uuid": "7c337aed-0c9c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "friendly.ydns.eu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771433465, "uuid": "03cc8130-0cea-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "fruitline.kiwi5pack.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771391765, "uuid": "ecc0c064-0c88-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "gearsync.metalheart.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771432686, "uuid": "33ade8ce-0ce8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "geyllysson.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771429985, "uuid": "e9c6be52-0ce1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "globalpath.ship9fig.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771430945, "uuid": "25d961b7-0ce4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "greenstore.kiwi5pack.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771435866, "uuid": "9addb35a-0cef-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "growthstep.probos7raise.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771408745, "uuid": "758d2c8e-0cb0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "harbor.plum7ship.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438509, "uuid": "c2a6a8cc-0cf5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "hiddenscan.elusive16soot.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771387324, "uuid": "95dac34c-0c7e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "hostserver.cloudtrace.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771430645, "uuid": "730b7f36-0ce3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "hubtransit.ship9fig.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771432686, "uuid": "3397054d-0ce8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "ia802801.us.archive.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771451646, "uuid": "58ec2bf1-0d14-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "jxjfs70p.cropin456spire.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771432625, "uuid": "0f4600a2-0ce8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "kiwinode.kiwi5pack.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400166, "uuid": "7c952dd5-0c9c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "kolidbox.lol" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771432686, "uuid": "337c702e-0ce8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "lankystocks.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771374185, "uuid": "fe781805-0c5f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "layerstone.stonecraft.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771376824, "uuid": "2396ab40-0c66-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "leafwalk.timberwalk.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771441325, "uuid": "50ca11a1-0cfc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "linkcheck.comparis4sosun.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771379465, "uuid": "4976a108-0c6c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "linkedge.cloudtrace.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771405025, "uuid": "cc7ad3ba-0ca7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "liveroad.urbanpulse.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771434547, "uuid": "88fcba33-0cec-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "localhub.pack1kiwi.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771379167, "uuid": "98295f2b-0c6b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "lookheat.nightvision.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400166, "uuid": "7c392821-0c9c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "lunar.technok.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400166, "uuid": "7c3c1917-0c9c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "lunde.technok.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771432686, "uuid": "337324da-0ce8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "lunet.technick.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400166, "uuid": "7c579b14-0c9c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "lux.technick.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771416844, "uuid": "516cdfb9-0cc3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "m9r3p.mint4pack.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771450625, "uuid": "f7f8df51-0d11-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "magicbook.overdue13wizard.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771406585, "uuid": "6e7726be-0cab-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "mainstreet.urbanpulse.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771410606, "uuid": "cabb23ee-0cb4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "manifest.ship5plum.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771429145, "uuid": "f510938b-0cdf-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "marinenode.fig2ship.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771440367, "uuid": "15f84d84-0cfa-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "matchview.comparis4sosun.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771450324, "uuid": "450878bd-0d11-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "mentalpulse.conscious86jag.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400166, "uuid": "7c9172e9-0c9c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "meploits.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771446125, "uuid": "7dca6d8f-0d07-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "mindwave.conscious86jag.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771408625, "uuid": "2df52754-0cb0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "mistralkorea.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771453864, "uuid": "829f474f-0d19-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "mysticpoint.overdue13wizard.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771456264, "uuid": "1958b39d-0d1f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "nightwave.bluewave.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771428726, "uuid": "fb1ff077-0cde-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "oceanroute.fig2ship.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771451464, "uuid": "ec52803c-0d13-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "oldscroll.overdue13wizard.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771378565, "uuid": "31284317-0c6a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "opticscan.nightvision.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771423025, "uuid": "b51c3831-0cd1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "outpost.military423pudd.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771437485, "uuid": "5ff6144f-0cf3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "outputsync.murta46unprin.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771409344, "uuid": "dadae887-0cb1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "p1urn-vvake.plum7ship.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771421525, "uuid": "37017f65-0cce-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "p3ar-llnk.pear6box.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771420505, "uuid": "d78d7bc9-0ccb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "p4ck-rnate.pack8mint.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771420924, "uuid": "d13a9405-0ccc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "p8x1m.pear6box.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771435145, "uuid": "ed6c32fa-0ced-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "packpoint.pack1kiwi.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771377245, "uuid": "1e18be62-0c67-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "parkzone.timberwalk.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771428964, "uuid": "8975f93b-0cdf-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "portentry.fig2ship.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771436465, "uuid": "000893a5-0cf1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "printflow.murta46unprin.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771440845, "uuid": "32d4578b-0cfb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "proxyzabc.zabc.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400166, "uuid": "7c376fb6-0c9c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-21135cb8269d409caad098c2e96eaa7f.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771414983, "uuid": "fbf33173-0cbe-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-2b8eae5fab34490c95c0102d66e16b5d.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771432686, "uuid": "337dc89c-0ce8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-89f330ac508f4d138c9dff7c99d7fbe7.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400166, "uuid": "7c32e369-0c9c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-8dc73645e8a9477fa0fad237f3a9c54f.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771432686, "uuid": "337e2220-0ce8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-a3013919434641e5a5268667ed5667e0.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771410125, "uuid": "ac4cf20c-0cb3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "q4m8v.ship5plum.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771421885, "uuid": "0d928db1-0ccf-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "r2k6d.military423pudd.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438507, "uuid": "c1276f65-0cf5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "ravku.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771425184, "uuid": "bc762082-0cd6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "rn1l1t-vvex.military423pudd.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771417265, "uuid": "4c23031e-0cc4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "rn1nt-llow.mint4pack.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771442766, "uuid": "abcec4bb-0cff-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "rulebase.censure47contr.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771442407, "uuid": "d5d11955-0cfe-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "safeguard.censure47contr.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771399385, "uuid": "aabd0283-0c9a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "saltcalc.oceansync.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771406225, "uuid": "9786fbaf-0caa-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "se9bavje.lament42leave.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771439408, "uuid": "daa36aad-0cf7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "secretlink.elusive16soot.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771430284, "uuid": "9bf4c1c8-0ce2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "sendpoint.ship9fig.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771411145, "uuid": "0c7d6fb5-0cb6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "sh1p-rnix.ship5plum.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400166, "uuid": "7c19fbc6-0c9c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "shadowbot-dih.pages.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771438206, "uuid": "0e252e82-0cf5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "shadowpath.elusive16soot.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771446127, "uuid": "7ef7c126-0d07-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "shieldpath.censure47contr.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771378984, "uuid": "2ac6acf0-0c6b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "sightzoom.nightvision.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771436107, "uuid": "2ab21f89-0cf0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "smartraise.probos7raise.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771372984, "uuid": "32895204-0c5d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "solidrock.stonecraft.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771429625, "uuid": "134bf004-0ce1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "speedtrack.ship9fig.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771433825, "uuid": "da7acf68-0cea-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "supplyline.pack1kiwi.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771437005, "uuid": "423573af-0cf2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "systemcore.murta46unprin.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771412884, "uuid": "18f04f95-0cba-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "t6k2n.disapp43squithes.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771432686, "uuid": "339a2b09-0ce8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "tcp.newyworlds.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771445166, "uuid": "422a150d-0d05-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "thankyourawbuy.p-e.kr" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771449785, "uuid": "03808f9d-0d10-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "thoughtsync.conscious86jag.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771432686, "uuid": "3371c023-0ce8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "tkistok-palaymarkes.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771405506, "uuid": "eb189602-0ca8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "traffichub.urbanpulse.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771409764, "uuid": "d52ea4f2-0cb2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "ugurhuseyn.az" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400166, "uuid": "7c1e28dd-0c9c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "vereasw.ydns.eu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771432686, "uuid": "33722a10-0ce8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "viewmyparty.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771432746, "uuid": "57757419-0ce8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "vogd.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771420024, "uuid": "b8b5cd00-0cca-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "warehouse.pack8mint.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771399024, "uuid": "d3e622a0-0c99-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "watersalt.oceansync.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771396804, "uuid": "a89f75c0-0c94-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "wavetide.oceansync.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771377484, "uuid": "acf95695-0c67-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "wildtimber.timberwalk.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771452665, "uuid": "b7ff1153-0d16-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "wisepath.overdue13wizard.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771377006, "uuid": "8fbcd209-0c66-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "woodpath.timberwalk.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771436284, "uuid": "9475f67a-0cf0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "workdeck.murta46unprin.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771408270, "uuid": "5aab1f1c-0caf-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "x7p9a.plum7ship.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771400167, "uuid": "7c9a3434-0c9c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "xenodeus.ws" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771409584, "uuid": "6a16fac8-0cb2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "xingyleather.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771417445, "uuid": "b777df83-0cc4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "z3n7a.blueg78rework.coupons" } ] } }